In an option review I did in 2024, shortly after the xz-utils backdoor, I explained that having GSS-API authentication and key exchange support in the main OpenSSH packages is problematic. The key exchange patch is large and intrusive. Furthermore, even linking to the necessary libraries is not without risk …
More preparations for OpenSSH GSS-API split; the usual round of Python packaging work.
OpenSSL 4.0, pytest 9.1, and Python 3.14 as default.
OpenSSH security and IPQoS backports; the usual Python packaging work.
groff, OpenSSH, and parted updates; helped with dput-ng data loss fix.
A few security updates, but otherwise mostly routine Python work.
Even more pkg_resources wrangling, minor OpenSSH security updates, and a BTS mail-handling tweak.
More Python 3.14 and pkg_resources wrangling.
Mostly chasing Python 3.14 problems.
A walk-through of preparing changes to multiple packages using Debusine.