LTS

libssh2

  • Release DLA-4773-1 to fix CVE-2025-15661, CVE-2026-7598, CVE-2026-58050, CVE-2026-58051, CVE-2026-66032 and CVE-2026-66034 for bookworm.

pyasn1

  • Release DLA-4778-1 to fix CVE-2026-59884, CVE-2026-59885 and CVE-2026-59886 for bookworm.

python-git

  • Work on several CVEs. First iteration was to identify the upstream patches.

  • Working on the stable fixes.

tiff

  • Work on bookworm and stable patches.

ELTS

python3.7

  • Release ELA-1839-1 to fix CVE-2021-23336, CVE-2021-28861, CVE-2022-0391, CVE-2023-24329, CVE-2025-0938, CVE-2025-13462, CVE-2026-0672, CVE-2026-0865, CVE-2026-3644, CVE-2026-4224, CVE-2026-4519 and CVE-2026-6100 for buster.

libssh2

  • Release ELA-1818-1 to fix CVE-2025-15661, CVE-2026-7598, CVE-2026-58050, CVE-2026-58051, CVE-2026-66032 and CVE-2026-66034.

  • Release ELA-1819-1 to fix CVE-2025-15661, CVE-2026-7598, CVE-2026-58051, CVE-2026-66032 and CVE-2026-66034.

pyasn1

  • Release ELA-1840-1 to fix CVE-2026-59884, CVE-2026-59885 and CVE-2026-59886 for stretch, buster and bullseye.

Other LTS activities

  • Attend the monthly LTS team meeting.

  • Front Desk activities during a week.

Debian Python Team

commonmark

  • New upstream release 0.9.2-1. Only cosmetic changes.

kiwisolver

  • New upstream release 1.5.1-1.

python-git

  • New upstream release 3.1.62-1.

citeproc-py

  • New upstream release 0.11.1-1.

bdict

  • New upstream release 0.24.1-1. Cosmetic changes.

python-sounddevice

  • New upstream release 0.5.6-1. Cosmetic changes.

python-molotov

  • Remove python3-aiomeasures from the project, upstream no longer uses it.

python-scramp

  • New upstream release 1.4.17-1. Fix bug #1125641.

DFSG

  • rust-bincode-1: Review it. It was accepted.

  • rust-cargo-fuzz: Review it. It was rejected.

  • rust-trippy-packet: Review it. It was accepted.

  • rust-trippy-dns: Review it. It was accepted.

  • rust-similario-core: Review it. It was accepted.

  • rust-blake2-0.10: Review it. It was accepted.

  • rust-argon2-0.5: Review it. It was accepted.

  • rust-rename-item: Review it. It was accepted.

  • rust-atuin-vt100: Review it. It was accepted.

  • rust-smolset: Review it. It was rejected.

  • rust-snakecase: Review it. It was rejected.

  • rust-const-gen: Review it. It was rejected.

  • rust-murmur3: Review it. It was accepted.

  • rust-earcut: Review it. It was accepted.

  • rust-cron: Review it. It was accepted.

  • rust-pfm: Review it. It was accepted.

  • rust-lamxfs: Review it. It was accepted.

  • python-raygeo: Review it. It was accepted.

  • rust-lamexfat: Review it. It was rejected.

  • python-zinvolt: Review it. It was accepted.

  • gnovi-studio: Review it. It was accepted.

  • rust-aercut: Review it. It was rejected.

  • rust-smolset: Review it again. It was accepted.

  • rust-cosmic-undo-2: Review it. It was accepted.

  • rust-sqlparser: Review it. It was accepted.

  • rust-softbuffer: Review it. It was accepted.

  • rust-recursive: Review it. It was accepted.

  • libultrahdr: Review it. It was rejected.

  • rust-jsonpath-lib-polars-vendors: Review it. It was accepted.

  • rust-planus: Review it. It was accepted.

  • python-nanoemoji: Review it. It was accepted.

  • rust-halfbrown: Review it. It was accepted.

  • rust-value-trait: Review it. It was accepted.

  • rust-polars-parquet-format: Review it. It was accepted.

  • rust-modit: Review it. It was rejected.

  • rust-simd-json: Review it. It was rejected.

  • ruff: Review it. It was accepted.

  • rust-wbmp: Review it. It was accepted.

  • rust-tinijson: Review it. It was accepted.

  • rust-fips204: Review it. It was accepted.

  • rust-astc-decode: Review it. It was accepted.

  • rust-err-report: Review it. It was accepted.

  • rust-gix-note: Review it. It was accepted.

  • refnx: Review it. It was accepted.

Sponsorship

  • python-rayforge: Introduce version 1.8.5-1 to Debian. Kudos to Michele Cane michele.cane@proton.me.

  • python-asysocks: Introduce version 0.2.18-1 to Debian. Kudos to Lester Guerzon lester@guerzon.net.

  • python-deepl: Introduce version 1.31.0-1 to Debian. Kudos to Lester Guerzon lester@guerzon.net.

  • python-deepl: Upload some fixes in version 1.32.0-2. Kudos to Lester Guerzon lester@guerzon.net.

  • certipy: Upload some fixes in version 0.2.3-2. Kudos to Lester Guerzon lester@guerzon.net.

  • certipy-ad: Introduce version 5.1.0-1 to Debian. Kudos to Lester Guerzon lester@guerzon.net.

  • python-hidraw: Introduce version 1.2.-1 to Debian. Kudos to Michael Lloyd michael@micl.dev.

  • pypsrp: Upload version 0.9.1-2 with cosmetic changes. Kudos to Lester Guerzon lester@guerzon.net.

Previous: My contributions to Debian - August 2026