XRP Ledger propõe assinaturas ML-DSA-44 para proteger contas de riscos quânticos até 2028, sem elevar a taxa-base das transações.

My Debian contributions this month were all sponsored by Freexian. You can also support my work directly via Liberapay or GitHub Sponsors. ## OpenSSH I upgraded both openssh and openssh-gssapi from 10.5p1 to 10.6p1, started generating MLDSA44-ED25519 host keys by default now that upstream no longer considers them experimental, and fixed a problem where switching between the normal and GSS-API variants followed by purging the old packages caused some configuration files to disappear. ## Python packaging New upstream versions: * afew (fixing a build failure with Python 3.15) * django-render-block (fixing a build failure) * djangorestframework (fixing a build failure) * frescobaldi * fsspec (fixing CVE-2026-104851) * khal (fixing an ikhal crash at startup) * pydantic (twice) * pydantic-core (twice) * pydantic-settings * pygml * pyinstaller-hooks-contrib (fixing a build failure) * python-ast-serialize * python-asyncvarlink * python-blockbuster * python-bytecode (fixing a build failure with Python 3.15) * python-certifi (twice) * python-cytoolz * python-django-postgres-extra * python-evalidate * python-mitogen * python-moto * python-persistent * python-typeguard (fixing a build failure with Python 3.15) * toolz (fixing a build failure with Python 3.15) * twisted (fixing CVE-2026-115774, CVE-2026-115775, CVE-2026-115776, CVE-2026-115778, CVE-2026-115877, and CVE-2026-83813) * zope.hookable * zope.i18nmessageid * zope.interface * zope.security Other build/test failures: * aiohttp-socks: Add python3-starlette and python3-uvicorn to autopkgtest dependencies * celery: FTBFS: FAILED t/unit/utils/test_platforms.py::test_close_open_fds - AssertionError * django-ninja: FTBFS: E AssertionError * django-q: Fix autopkgtest failures with python-moto 5.2.4 * ipywidgets: FTBFS: src/utils.ts(4,44): error TS7016: Could not find a declaration file for module ‘base64-js’ (tracked down to node-base64-js and contributed a fix there, uploaded by Santiago Vila) * isodate: FTBFS: includes a common build directory name ‘tests’ as a module * mercurial: FTBFS on riscv64: Failed test-obsolete-bundle-strip.t: timed out * mistune0: FTBFS: includes a common build directory name ‘tests’ as a module * pybind11-stubgen: FTBFS: E: dh_python3 fs:172: Not everything in ‘debian/python3-pybind11-stubgen/usr/lib/python3.15/dist-packages/pybind11_stubgen-3.0.0.dist-info’ was able to be merged into ‘debian/python3-pybind11-stubgen/usr/lib/python3/dist-packages/pybind11_stubgen-3.0.0.dist-info’ (contributed upstream) * pydantic-core: FTBFS: E: dh_python3 fs:172: Not everything in ‘debian/python3-pydantic-core/usr/lib/python3.15/dist-packages/.hypothesis/constants’ was able to be merged into ‘debian/python3-pydantic-core/usr/lib/python3/dist-packages/.hypothesis/constants’ * pydantic-settings: Fix test failures with pydantic 2.14 * pygml: FTBFS: E: dh_python3 fs:312: python3-pygml includes a common build directory name ‘tests’ as a module (contributed upstream) * pyinstaller: Make autopkgtests work on more architectures * pyrsistent: FTBFS with dh-python >= 7.20261019 * python-anyio: FTBFS: ValueError: server_hostname can only be specified in client mode * python-asyncvarlink: FTBFS: E: dh_python3 fs:172: Not everything in ‘debian/python3-asyncvarlink/usr/lib/python3.15/dist-packages/.hypothesis/constants’ was able to be merged into ‘debian/python3-asyncvarlink/usr/lib/python3/dist-packages/.hypothesis/constants’ * python-bcrypt: FTBFS: error: failed to select a version for the requirement bcrypt-pbkdf = "^0.10.0" * python-django-postgres-extra: FTBFS: E: dh_python3 fs:312: python3-django-postgres-extra includes a common build directory name ‘tests’ as a module * python-ecdsa: FTBFS: E: dh_python3 fs:172: Not everything in ‘debian/python3-ecdsa/usr/lib/python3.15/dist-packages/.hypothesis/constants’ was able to be merged into ‘debian/python3-ecdsa/usr/lib/python3/dist-packages/.hypothesis/constants’ * python-elastic-transport: Make tests more reliable on slow architectures * python-isoduration: FTBFS: E: dh_python3 fs:172: Not everything in ‘debian/python3-isoduration/usr/lib/python3.15/dist-packages/.hypothesis/constants’ was able to be merged into ‘debian/python3-isoduration/usr/lib/python3/dist-packages/.hypothesis/constants’ * python-lsp-mypy: FTBFS: E: dh_python3 fs:172: Not everything in ‘debian/python3-pylsp-mypy/usr/lib/python3.15/dist-packages/.mypy_cache/3.14’ was able to be merged into ‘debian/python3-pylsp-mypy/usr/lib/python3/dist-packages/.mypy_cache/3.14’ * python-multidict: FTBFS: includes a common build directory name ‘tests’ as a module * python-serializable: FTBFS: includes a common build directory name ‘tests’ as a module * python-trame-server: FTBFS: E ModuleNotFoundError: No module named ‘more_itertools’ * python-urllib3: FTBFS: E ValueError: check_hostname requires server_hostname * python-ws4py: FTBFS: E: dh_python3 fs:312: python3-ws4py includes a common build directory name ‘test’ as a module * sphinx-rst-linker: FTBFS: E ModuleNotFoundError: No module named ‘jaraco’ * sphinxcontrib-seqdiag: FTBFS: includes a common build directory name ‘tests’ as a module Since lots of Python modules use Rust extensions nowadays, we often have to help with upgrades of Rust packages. I did some of this: * PyO3 0.29 (which needs more help!): blake3-py, cbor2, pendulum, pysequoia, python-ahocorasick-rs, python-cotengrust, python-jellyfish, python-ormar-utils, python-watchfiles, rpds-py, and unicode-segmentation-rs * Upgraded python-maturin from 1.9.4 to 1.16.0 to help with several other upgrades; this was a major upgrade involving more or less completely reworking our patch set. Other bugs: * twisted: CVE-2026-106454 One of my hobbies is typesetting (“engraving”) music, sometimes for my own use, sometimes for teaching, and sometimes for my choir. I’ve used LilyPond for a long time and have got pretty used to it. My workflow was a bit cumbersome, though, usually involving side-by-side editor and PDF viewer windows with some ad-hoc Makefiles and editor macros. I recently discovered the Frescobaldi frontend to LilyPond, and decided I liked it enough to switch over to it. It was already packaged in Debian, but it had a missing desktop entry and icon and missing translations; I fixed those based on a patch set by Joachim Wiedorn. My upload introduced a testing migration problem, which I also fixed. ## Rust packaging I upgraded rust-jiter and rust-smallvec to new upstream versions for a new version of pydantic-core. The rust-smallvec upgrade caused an FTBFS in rust-saphyr-parser-bw, which I fixed. I packaged rust-cargo-cyclonedx for a new version of python-maturin. This needed some porting to work with a new version of rust-cargo-metadata, which I contributed upstream. I improved the `dev/list-rdeps.sh` tool used by the Rust team to check build-depends too, which should make it easier for that team to remember Python packages in transitions. ## Code reviews * debbugs: Fix autopkgtests (merged) * openssh-gssapi: d/t/purge-keeps-config-with-counterpart: test for purge (merged) * openssh: d/t/purge-keeps-config-with-counterpart: test for purge (merged) * python-datamodel-code-generator: Upgrade to 0.85.0 (sponsored upload for Nico Della Torre) * python-pyramid-tm: FTBFS: ModuleNotFoundError: No module named ‘pkg_resources’ (sponsored upload for Maximilian Engelhardt)

Notable changes in this release include enabling the hybrid post-quantum ssh-mldsa44-ed25519 signature algorithm

OpenSSH 10.6 is out with security fixes, the new hybrid post-quantum ssh-mldsa44-ed25519 algorithm, and several new SSH and SFTP features.

OpenSSH 10.6 is out with security fixes, the new hybrid post-quantum ssh-mldsa44-ed25519 algorithm, and several new SSH and SFTP features.

OpenSSH 10.6 was released on 2026-10-06. It is available from the mirrors listed at https://www.openssh.com/. OpenSSH is a 100% complete SSH protocol 2.0 implementation and includes sftp client and s...

OpenSSH 10.6 is out with security fixes, the new hybrid post-quantum ssh-mldsa44-ed25519 algorithm, and several new SSH and SFTP features.

https://blog.gslin.org/archives/2026/09/24/13225/cloudflare-%e7%9a%84-1-1-1-1-%e6%94%af%e6%8f%b4-post-quantum-%e6%bc%94%e7%ae%97%e6%b3%95%e7%9a%84-dnssec/ Cloudflare 的 1.1.1.1 支援 Post-Quantum 演算法的 DNSSEC #1111 #44 #cloudflare #cryptography #dns #dnssec #dsa #ml #MlDsa44 #packet #post #quantum #signature #size #tcp #udp #validation