FOSS Activities in October 2026

November 10, 2026 2-minute read

Here’s my monthly but brief update about the activities I’ve done in the FOSS world.

Debian

Whilst I didn’t have much time, here are still a few things that I worked on:

Sponsored ubuntu-dev-tools/0.215 for Florent ‘Skia’ Jacquet, so that seeded-in-ubuntu no longer crashes when distro-info-data is outdated.
Assisted a few folks in getting their patches submitted via Salsa.
Mentoring for newcomers.
Moderation of -project mailing list.

Released Ubuntu 26.10 (Stonking Stingray)! With my Release team hat on, I:
- Announced the Final Freeze for Stonking Stingray.
- Added the 26.10 release YAML to ubuntu-release, which generates all the publishing commands for the release day.
- Put out the call for testing once the RC images were ready on Test Observer.
- Released 26.10 and announced it on Discourse.
Approved the FFe for adsys 0.17.0, as it isn’t seeded.
Sponsored libp11/0.4.12-1.1ubuntu2 for Guruprasad, an SRU to Noble which drops the workaround from the previous SRU that broke EAP-TLS Wi-Fi with TPM-backed PKCS#11 keys (LP: #2163152).
Proposed a fix for net-tools’ FTBFS in stonking - Linux 7.1 removed the amateur radio subsystem along with <linux/rose.h>, so ROSE support has to go: (MP).
Reviewed quite a lot of MPs and PRs - britney hints, ubuntu-cdimage, livecd-rootfs, ubuntu-seeds, ubuntu-dev-tools, a bunch of 26.10 release notes, and so on.
Did Archive Admin, DMB, and Release team duties as usual.

This month I have worked 3.50 hours on Debian Long Term Support (LTS) and on its sister Extended LTS project and did the following things:

libpng1.6: Use-after-free of zlib input in png_read_end() after incomplete zTXt, iTXt, or iCCP decompression (CVE-2026-46675).
- [ELTS]: The patch is ready but couldn’t finish testing this month. The upstream fix that went into bookworm via DLA 4824-1 applies to all three ELTS suites as-is. Will roll out the fix in November.

[E/LTS] Monitored discussions on mailing lists, IRC, and all the documentation updates.
[E/LTS] Couldn’t make it to the monthly LTS meeting live, but left my thoughts in the meeting notes on Beuc’s proposal of offering help to the Release team with reviewing security SPUs - +1 for trying, as long as the Release team is on board with it and we don’t end up doing the same work twice.

Until next time.
:wq for today.