--- title: My contributions to Debian - April 2026 date: 01 May, 2026 author: eamanu tags: new-blog, Debian, free-software --- # My contribution to Debian - April 2026 I've worked on the packages mentioned below, for Freexian [LTS/ELTS](https://www.freexian.com/lts/) . Many thanks to Freexian and our [sponsors](https://www.freexian.com/lts/debian/#sponsors) for providing this opportunity! ### LTS - libexif: I released DLA-4558-1 fixing CVE-2026-40386, CVE-2026-40385 and CVE-2026-32775. Also I created the backport for trixie and bookworm. - pyasn1: I released DLA-4557-1 fixing CVE-2026-30922. Also I created the backport for trixie and bookworm. - Work in python-flask-httpauth to fix CVE-2026-34531. - Continue working in python-authlib to fix CVE-2026-27962, CVE-2026-28490 and CVE-2026-28498 ### ELTS - Update python-gevent for (E)LTS team according to review. Preparing for upload. - Working in pyasn1 to fix CVE-2026-30922 in buster. ## DFSG Team - Review python-sphinx-scrapy for DFSG. It was accepted - Review pocketpy for DFSG. It was rejected. - Review pytest-textual-snapshot for DFSG. It was accepted - Review pocketpy for DFSG. It was rejected. - Review golang-github-bitfinexcom-bitfinex-api-go version 2.2.9-1 for DFSG. It was [accepted](https://dfsg-new-queue.debian.org/reviews/golang-github-bitfinexcom-bitfinex-api-go). - Review pocketpy version 2.1.8+ds-1 for DFSG. It was [accept](https://dfsg-new-queue.debian.org/reviews/pocketpy/2.1.8+ds-1) - Review python-annotated-doc version 0.0.4-1 for DFSG. It was [rejected](https://dfsg-new-queue.debian.org/reviews/python-annotated-doc/0.0.4-1). - Review python-valkey version 6.1.1-1 for DFSG. It was [rejected](https://dfsg-new-queue.debian.org/reviews/python-valkey/6.1.1-1) - Review python-elastic-apm version 6.25.0-1 for DFSG. It was [accepted](https://dfsg-new-queue.debian.org/reviews/python-elastic-apm/6.25.0-1) - Review pymatgen-core-test-files version 2026.4.7-1 for DFSG. It was [rejected](https://dfsg-new-queue.debian.org/reviews/pymatgen-core-test-files/2026.4.7-1). - Review rust-vcs-graph version 3.4.0-1. for DFSG. It was [accepted](https://dfsg-new-queue.debian.org/reviews/rust-vcs-graph/3.4.0-1) ## Sponsorship - Review fingwit for sponsor it. ## Debian Python Team - apispec: New upstream release 6.10.0. Package updates. Uploaded to unstable. - citeproc-py: New upstream release 0.9.2. Package updates. Uploaded to unstable. - kiwisolver: New upstream release 1.5.0. Package updates. Uploaded to unstable. - myst-parser: New usptream release 5.0.0. Packae updates. Uploaded to unstable. - markdown-it-py: New upstream release 4.0.0. Package updates. Uploaded to unstable. - Sponsor python-generic version 1.1.7. Kudos to Seyed Mohamad Amin Modaresi . - python-docformatter: New usptream release _1.7.8. Packages updates. Uploaded to unstable. - python-marshmallow-sqlalchemy: New upstream release 1.5.0. Package updates. Uploaded to unstable. - python-pytest-asyncio: New upstream release 1.4.0a1. Package updates. Work in progress. ## Forums Debian - Work in [Best Threads of the Week - 2026-04-12](https://forums.debian.net/viewtopic.php?p=842060#p842060) - Work in [Best Threads of the Week - 2026-04-19](https://forums.debian.net/viewtopic.php?p=842064#p842064) - Debian User Forums Best Threads of the Week - [2026-04-26](https://forums.debian.net/viewtopic.php?p=842310#p842310) # Detailed logwork Report - 04: - Review python-sphinx-scrapy for DFSG. It was accepted - Review pocketpy for DFSG. It was rejected. - 09: - Review pytest-textual-snapshot for DFSG. It was accepted - 10 - Review pocketpy for DFSG. It was rejected. - 13: - Review golang-github-bitfinexcom-bitfinex-api-go version 2.2.9-1 for DFSG. It was [accepted](https://dfsg-new-queue.debian.org/reviews/golang-github-bitfinexcom-bitfinex-api-go). - Review pocketpy version 2.1.8+ds-1 for DFSG. It was [accept](https://dfsg-new-queue.debian.org/reviews/pocketpy/2.1.8+ds-1) - Review python-annotated-doc version 0.0.4-1 for DFSG. It was [rejected](https://dfsg-new-queue.debian.org/reviews/python-annotated-doc/0.0.4-1). - Review python-valkey version 6.1.1-1 for DFSG. It was [rejected](https://dfsg-new-queue.debian.org/reviews/python-valkey/6.1.1-1) - Review python-elastic-apm version 6.25.0-1 for DFSG. It was [accepted](https://dfsg-new-queue.debian.org/reviews/python-elastic-apm/6.25.0-1) - 16: - Review pymatgen-core-test-files version 2026.4.7-1 for DFSG. It was [rejected](https://dfsg-new-queue.debian.org/reviews/pymatgen-core-test-files/2026.4.7-1). - Review rust-vcs-graph version 3.4.0-1. for DFSG. It was [accepted](https://dfsg-new-queue.debian.org/reviews/rust-vcs-graph/3.4.0-1) - 17: - Start working in libexif. This is sponsored by Freexian. - 18: - Prepare trixie-pu for libexif/0.6.25-1+deb13u1. See [#1134175](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1134175) - 19: - Work in [Best Threads of the Week - 2026-04-12](https://forums.debian.net/viewtopic.php?p=842060#p842060) - Work in [Best Threads of the Week - 2026-04-19](https://forums.debian.net/viewtopic.php?p=842064#p842064) - 20 - Prepare bookworm-pu for libexif/0.6.24-1+deb12u1. See [#1134478](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1134478) - Send to review libexif version 0.6.22-3+deb11u1 to review. This is sponsored by Freexian. - Review fingwit for sponsor it. - 26: - Debian User Forums Best Threads of the Week - [2026-04-26](https://forums.debian.net/viewtopic.php?p=842310#p842310) - apispec: New upstream release 6.10.0. Package updates. Uploaded to unstable. - citeproc-py: New upstream release 0.9.2. Package updates. Uploaded to unstable. - kiwisolver: New upstream release 1.5.0. Package updates. Uploaded to unstable. - myst-parser: New usptream release 5.0.0. Packae updates. Uploaded to unstable. - markdown-it-py: New upstream release 4.0.0. Package updates. Uploaded to unstable. - Sponsor python-generic version 1.1.7. Kudos to Seyed Mohamad Amin Modaresi . - python-docformatter: New usptream release _1.7.8. Packages updates. Uploaded to unstable. - python-marshmallow-sqlalchemy: New upstream release 1.5.0. Package updates. Uploaded to unstable. - python-pytest-asyncio: New upstream release 1.4.0a1. Package updates. Work in progress. - 29: - Update python-gevent for (E)LTS team according to reviewer. - 30: - Upload pyasn1 to bullseye-security to fix CVE-2026-30922 (see [#1131371](https://bugs.debian.org/1131371)). [DLA-4557-1](https://lists.debian.org/debian-lts-announce/2026/05/msg00001.html]() was sent. - Upload libexif to bullseye-security to fix CVE-2026-40386, CVE-2026-40385, CVE-2026-32775 (see [#1133923](https://bugs.debian.org/1133923), [#1133922](https://bugs.debian.org/1133922), [#1131116](https://bugs.debian.org/1131116)). [DLA-4558-1](https://lists.debian.org/debian-lts-announce/2026/05/msg00002.html) was sent.