--- title: My contributions to Debian - May 2026 date: 01 Jun, 2026 author: eamanu tags: new-blog, Debian, free-software --- # My contribution to Debian - May 2026 # LTS ## libexif - Upload libexif/0.6.25-1+deb13u1 to fix: CVE-2026-40386, CVE-2026-40385, CVE-2026-32775. - Upload libexif/0.6.24-1+deb12u1 to fix: CVE-2026-40386, CVE-2026-40385, CVE-2026-32775. ## python-authlib - work in bullseye - Mark CVE-2026-41425 as no vulnerable for bullseye and bookworm. - Upload python-authlib 0.15.4-1+deb11u2 - Send DLA-4579-1. ## krb - Release DLA-4603-1 for krb5 1.18.3-6+deb11u8 to fix CVE-2026-40356 and CVE-2026-40355. ## python-flask-httpauth - Release DLA-4605-1 for python-flask-httpauth 3.2.4-3.1+deb11u1 to fix CVE-2026-34531. ## corosync - Work in a patch to fix CVE-2026-35091 and CVE-2026-35092 # ELTS ## pyasn1 - Release ELA-1717-1 to fix CVE-2026-30922 in 0.1.9-2+deb9u2 (stretch), 0.4.2-3+deb10u2 (buster). ## python-gevent - Release ELA-1718-1 to fix CVE-2023-41419 in 1.3.7-1+deb10u1 (buster). ## libexif - Release ELA-1737-1 for: - libeixf/0.6.21-5.1+deb10u6 to fix: CVE-2026-40386, CVE-2026-40385 and CVE-2026-32775 - libexif/0.6.21-2+deb9u6 to fix: CVE-2026-40386, CVE-2026-40385 and CVE-2026-32775 # Sponsor - bazaar version 0.7.14-1. Kudos to Seyed Mohamad Amin Modaresi - beets: - Review patches for CVE-2026-42052 (trixie and bookworm). Kudos to Pieter Lenaerts . - python-marisa-trie: Introduce version 1.4.1+ds-1 to Debian. Kudos to Tianyu Chen - pytesseract: Upload version 0.3.13+git20250218.df9fce0-2. Kudos to Seyed Mohamad Amin Modaresi - bazaar version 0.8.1-1. Kudos to Seyed Mohamad Amin Modaresi # Debian Python Team ## citeproc-py - New upstream release 0.9.3. - Packaging updates. ## myst-parser - Fix debci build. myst-parser should be buid with python3-mardown-it >= 4.0.0 ## python-ftputil - New upstream release 5.2.0-1 - Packaging updates. ## mdit-py-plugins - New upstream release 0.6.1-1. - Packaging updates ## python-flask-jwt-extended - New upstream release 4.7.4-1 - Packaging updates ## python-ftputil - New upstream release 5.2.0-1. - Packaging updates. ## python-sounddevice - New upstream release 0.5.5-1 - Packaging updates. ## python-scramp - New upstream release 1.4.8-1. - Packaging updates. # Debian Rust Team ## crc-catalog - New upstream release 2.5.0 # Other packages ## Planify - New upstream release 4.19.1-1 - Packaging updates. # Debian User Forums - 2026-05-03: https://forums.debian.net/viewtopic.php?p=842705#p842705 - 2026-05-10: https://forums.debian.net/viewtopic.php?p=843436#p843436 - 2026-05-17: https://forums.debian.net/viewtopic.php?p=843436#p843436 # DFSG - Review pymatgen-core-test-files for DFSG team it was accepted. - Review runit-services for DFSG team it was accepted. - Review libexttextcat for DFSG team it was rejected. - Review mkdocs-rss-plugin for DFSG team it was accepted. - Review python-compit-inext-api for DFSG team it was rejected. - Review python-apricot-select for DFSG team it was accepted. - Review apt-suggest-auto for DFSG team it was accepted. - Review python-iso4217 for DFSG team it was accepted. - Review cryptolyzer for DFSG team it was accepted. - Review rust-rust-i18n-support for DFSG team it was accepted. - Review rust-axum-macros for DFSG team it was accepted. - Review node-pixl-cli for DFSG team it was accepted - Review node-pixl-unit for DFSG team it was accepted - Review node-pixl-config for DFSG team it was accepted - Review collatinus-nouus for DFSG team it was rejected - Review node-pixl-cache for DFSG team it was accepted - Review python-sigstore-models for DFSG team it was accepted - Review hwatch for DFSG team it was accepted - Review rust-apfs for DFSG team it was accepted - Review rust-icns for DFST team it was accepted --- # Detailed logwork - 1: - Work in pyasn1 for buster. This is sponsored by Freexian. - 3: - citeproc: New upstream release 0.9.3. - Sponsor baazaar version 0.7.14-1. Kudos to Seyed Mohamad Amin Modaresi - 5: - Debian User Forums Best Threads of the Week - [2026-05-03](https://forums.debian.net/viewtopic.php?p=842705#p842705) - python-ftputil: New upstream release version 5.2.0-1. - Sponsor baazaar version 0.7.14-1. Fixing a Rejection in the DFSG team. Kudos to Seyed Mohamad Amin Modaresi . - 8: - Upload libexif/0.6.25-1+deb13u1 to fix: CVE-2026-40386, CVE-2026-40385, CVE-2026-32775. This work is Sponsored by Freexian. - Upload libexif/0.6.24-1+deb12u1 to fix: CVE-2026-40386, CVE-2026-40385, CVE-2026-32775. This work is Sponsored by Freexian. - 9: - Upload python-authlib 0.15.4-1+deb11u2. This work is Sponsored by Freexian. - 10: - Release myst-parser 5.0.0-2. Fix a bug in the build. - 11: - Send DLA-4579-1 for python-authlib 0.15.4-1+deb11u2. This work is Sponsored by Freexian. - 13: - Review patch for CVE-2026-42052 for beets to fix in trixie and bookworm. Kudos to Pieter Lenaerts . - Release ELA-1717-1 pyasn1 security update - 14: - python-genvet: Prepare ELA-1718-1 to fix CVE-2023-41419 in 1.3.7-1+deb10u1 (buster).This work is Sponsored by Freexian. - Release new upstream release mdit-py-plugins version 0.6.1-1. Uploaded to unstable. - Release new upstream release python-flask-jwt-extended version 4.7.4-1. Uploaded to unstable - Release new upstream release planify version 4.19.1-1. Uploaded to unstable. - Release new upstream release python-ftputil version 5.2.0-1. Uploaded to unstable - 15: - Release new upstream release python-sounddevice version 0.5.5. Uploaded to unstable. - Release new usptream release python-scramp version 1.4.8-1. Uploaded to unstable - Work in libeixf 0.6.21-5.1+deb10u6 and 0.6.21-2+deb9u6 to fix CVE-2026-40386, CVE-2026-40385 and CVE-2026-32775. This work is Sponsored by Freexian. - Work in krb5 1.18.3-6+deb11u8 to fix CVE-2026-40356 and CVE-2026-40355. This work is Sponsored by Freexian. - 16: - Review python-marisa-trie for sponsor it. - Review pymatgen-core-test-files for DFSG team it was accepted. - Review runit-services for DFSG team it was accepted. - Review libexttextcat for DFSG team it was rejected. - Review mkdocs-rss-plugin for DFSG team it was accepted. - Review python-compit-inext-api for DFSG team it was rejected. - Review python-apricot-select for DFSG team it was accepted. - Review apt-suggest-auto for DFSG team it was accepted. - Review python-iso4217 for DFSG team it was accepted. - Review cryptolyzer for DFSG team it was accepted. - Review rust-rust-i18n-support for DFSG team it was accepted. - Review rust-axum-macros for DFSG team it was accepted. - crc-catalog: New upstream release 2.5.0. Uploaded to unstable. - 17: - Sponsor python-marisa-trie. Introduce version 1.4.1+ds-1 to Debian. Kudos to Tianyu Chen - 20: - Release ELA-1718-1 for python-gevent - 25: - Sponsor pytesseract. Upload version 0.3.13+git20250218.df9fce0-2. Kudos to Seyed Mohamad Amin Modaresi - Review Bazaar to sponsor it. - 27: - Upload krb5 version 1.18.3-6+deb11u8 for bullseye-security - Upload python-flask-httpauth in version 3.2.4-3.1+deb11u1 to fix CVE-2026-34531. - - 28: - Send DLA-4603-1 for krb5. - Send DLA-4605-1 for python-flask-httpauth - Review bazaar for sponsorship. Uploaded to unstable. Kudos to Seyed Mohamad Amin Modaresi . - Review node-pixl-cli for DFSG team it was accepted - Review node-pixl-unit for DFSG team it was accepted - Review node-pixl-config for DFSG team it was accepted - Review collatinus-nouus for DFSG team it was rejected - Review node-pixl-cache for DFSG team it was accepted - Review python-sigstore-models for DFSG team it was accepted - Review hwatch for DFSG team it was accepted - Review rust-apfs for DFSG team it was accepted - 29: Review rust-icns for DFSG team it was accepted.