+1 Maintenance Report from 2026-08-17 to 2026-08-21

TLDR: Focused on OpenSSL 4.0 migration, learning more and investigated an interesting regression.

What a week it has been doing my first +1 maintenance shift! The week has mostly been smooth sailing going through various OpenSSL4.0 migration tasks with some deviations. As I started my shift on Monday, I first messaged others to get some advice for my +1 maintenance shift and looked through the previous reports to get inspiration.

The first half of the week was spent on opening merge-proposals for various FTBFS bugs and the second investigating an interesting regression in pybind11. More information on this regression below (fix already released).

Lastly, I want to take the chance to thank those who helped me throughout the week. @ruancomelli and @vmpyr for all their helpful links and information for a first-time +1 maintenance shift. @ravi-sharma for his guidance and advice throughout my OpenSSL transitions. @ahasenack and @ginggs for all their help with sponsorships and investigating the pybind11 regression.

Work-Needed Items

  • The work items recommended by people in previous +1 maintenance shifts.
  • There are still a few packages to be fixed for the OpenSSL 4.0 migration. Read the https://lists.ubuntu.com/archives/ubuntu-devel/2026-June/043622.html for more info.
  • More research into whether the pybind11 package for Resolute should be updated with the regression fix. So far no packages have been found to be affected but any new builds against the version in Resolute may introduce the regression.

Sponsorship Needed

Full Logs

kristall

This package was failing to build from source when built against OpenSSL 4.0 but is now fixed and released:

Launchpad Bug: https://bugs.launchpad.net/ubuntu/+source/kristall/+bug/2154981
Merge Proposal: https://code.launchpad.net/~rroessler/ubuntu/+source/kristall/+git/kristall/+merge/509583

Debian Bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138433
Salsa MR: https://salsa.debian.org/debian/kristall/-/merge_requests/2

Upstream Bug: https://github.com/ikskuh/kristall/issues/308
Upstream PR: https://github.com/ikskuh/kristall/pull/309

xmrig

This package was failing to build from source when built against OpenSSL 4.0 but is now fixed and released:

Launchpad Bug: https://bugs.launchpad.net/ubuntu/+source/xmrig/+bug/2154929
Merge Proposal: https://code.launchpad.net/~rroessler/ubuntu/+source/xmrig/+git/xmrig/+merge/509641

Debian Bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138381
Salsa MR: https://salsa.debian.org/cryptocoin-team/xmrig/-/merge_requests/1

Upstream Bug: https://github.com/xmrig/xmrig/issues/3833
Upstream PR: https://github.com/xmrig/xmrig/pull/3808

monero

This package was failing to build from source when built against OpenSSL 4.0 but is now fixed and released:

Launchpad Bug: https://bugs.launchpad.net/ubuntu/+source/monero/+bug/2154924
Merge Proposal: https://code.launchpad.net/~rroessler/ubuntu/+source/monero/+git/monero/+merge/509642

Debian Bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138376
Salsa MR: Merge requests are currently blocked from being requested

Upstream Bug: https://github.com/monero-project/monero/issues/10904
Upstream PR: https://github.com/monero-project/monero/pull/10908

feather-wallet

This package was failing to build from source when built against OpenSSL 4.0 but is now fixed and released:

Launchpad Bug: https://bugs.launchpad.net/ubuntu/+source/feather-wallet/+bug/2154886
Merge Proposal: https://code.launchpad.net/~rroessler/ubuntu/+source/feather-wallet/+git/feather-wallet/+merge/509643

Debian Bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138339
Salsa MR: https://salsa.debian.org/cryptocoin-team/feather-wallet/-/merge_requests/1

Upstream Bug: https://github.com/feather-wallet/feather/issues/300
Upstream PR: Issues in submitting as seen from the above bug-report

amanda

This package was failing to build from source when built against OpenSSL 4.0 but is now fixed and waiting sponsorship:

Launchpad Bug: https://bugs.launchpad.net/ubuntu/+source/amanda/+bug/2163689
Merge Proposal: https://code.launchpad.net/~rroessler/ubuntu/+source/amanda/+git/amanda/+merge/509813

Debian Bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1144897
Salsa MR: https://salsa.debian.org/debian/amanda/-/merge_requests/4

Upstream Bug: Unnecessary as noted in PR below
Upstream PR: https://github.com/zmanda/amanda/pull/292

ecflow

This package was failing to build from source when built against OpenSSL 4.0 but is now fixed and committed:

Launchpad Bug: https://bugs.launchpad.net/ubuntu/+source/ecflow/+bug/2154891
Merge Proposal: https://code.launchpad.net/~rroessler/ubuntu/+source/ecflow/+git/ecflow/+merge/509587

Debian Bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138344
Salsa MR: https://salsa.debian.org/science-team/ecflow/-/merge_requests/1

Upstream Bug: https://github.com/ecmwf/ecflow/issues/411
Upstream PR: https://github.com/ecmwf/ecflow/pull/412

After the above merge-proposal was accepted, there was a regression in the autopkgtest results. Whenever the ecflow module was imported, the process would exit with a free() invalid pointer crash. After following the backtrace output from gdb, I found that there was a regression in pybind11-3.0.1-3 where on deallocation of specifically constructed objects, a free() would be called on string literals causing the crash. Since the fix to pybind11 has been committed, I have since added an additional request to rebuild ecflow against the patched version.

Launchpad Bug: https://bugs.launchpad.net/ubuntu/+source/ecflow/+bug/2163679
Merge Proposal: code.launchpad.net/~rroessler/ubuntu/+source/ecflow/+git/ecflow/+merge/509910

pybind11

As per the regression first noticed in ecflow testing, I followed the trail to a recent upstream PR in which the regression was introduced (see: https://github.com/pybind/pybind11/pull/5486). This PR introduced a latent bug where a free() is called on string-literals under certain conditions (showing in the original build for ecflow). Upstream has since patched this and I also prepared a fix for Stonking which has been committed. I also spent the later part of the week confirming that no other packages have been affected (of which there are none in Stonking and Resolute). It should be noted that users that are compiling against the version in Resolute will still have the regression.

Launchpad Bug: https://bugs.launchpad.net/ubuntu/+source/pybind11/+bug/2164501
Merge Proposal: https://code.launchpad.net/~rroessler/ubuntu/+source/pybind11/+git/pybind11/+merge/509742

Debian Bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1144807
Salsa MR: Waiting for upstream release (since next will be unaffected)

Upstream Bugs:

Upstream PRs:

2 Likes

I was also on (my first!) +1 maintenance shift last week.

I started the week by reading the previous report. Since I don’t have full upload rights, there was nothing that I could do about the work-needed items besides watch the excuses page and wait for rebuilds.

libsodium transition

I asked for NCRs (thanks, @ahasenack) for the following packages:

  • oidc-agent
  • netsniff-ng
  • quicktun
  • kickpass
  • libequihash
  • libmacaroons
  • gdnsd
  • libxeddsa
  • libtoxcore
  • minisign
  • librecast
  • rspamd

shadowsocks-libev needed an upstream patch to make it not FTBFS with C23

https://code.launchpad.net/~puida/ubuntu/+source/shadowsocks-libev/+git/shadowsocks-libev/+merge/509703

The packages haven’t migrated yet due to the Perl transition.

ntirpc

ntirpc was FTBFS due to symbol mismatch on some architectures. This was happening because prometheus-cpp-lite symbols were leaking into libntirpcmonitoring, and LTO made the set of symbols included in each architecture be different. Since Debian does not enable LTO by default, it only FTBFS in Ubuntu.

For now, we fixed the FTBFS by disabling LTO.

I also submitted a patch upstream to restrict exports in this library. This patch was merged, so we can drop this delta once Debian picks it up.

gcl

gcl is also FTBFS due to C23 issues. I cherry-picked an upstream patch that fixes this, but it hasn’t been uploaded yet.

postgresql-18

Since I was working on the PostgreSQL MREs, I took the opportunity to sync postgresql-18 in Stonking since all delta was included in the latest upstream release.

Work-needed items

  • Trigger rebuilds for packages mentioned in the libsodium transition section.
  • Review/upload the gcl MP.
1 Like

And here is my activity list for the +1 maintenance week. Due to the perl sync near the end of the week, many of these uploads, autopkgtest retries, and other archive actions are still pending.

SRU Work

language-packs

For resolute point release. 272 source packages.

Accepted.

linux-firmware split for noble, NEW queue

https://bugs.launchpad.net/bugs/1958518

Started, continuing next week.

snapd

Bug #2067006 “systemd-userdbd can leak hashed user passwords to …” : Bugs : systemd package : Ubuntu

Bug #2157692 “[Security Release] 2.76.1” : Bugs : snapd

Bug #2158301 “[SRU] 2.76.3” : Bugs : snapd package : Ubuntu

Released for resolute, noble, jammy.

console-setup

Bug #2152901 “[SRU] Subiquity’s automatic keyboard detection reg…” : Bugs : subiquity

Released for resolute, noble.

open-vm-tools

Bug #2153486 “Backport open-vm-tools 13.0.10 to noble” : Bugs : open-vm-tools package : Ubuntu

Released for noble.

Removals

Bug #2163039 “Please remove obsolete rspamd binaries from stonki…” : Bugs : rspamd package : Ubuntu

Has a rdeps opensmtpd-filter-rspamd, can we remove it with a pending recommends?

This is blocking the migration. Didn’t get to it.

NEW queue

log4cplus

Accepted NEW binaries from a soname bump.

Patch Pilot

softhsm2

Merge into ubuntu/devel : fix-lp2154889 : lp:~ravi-sharma/ubuntu/+source/softhsm2 : Git : Code : softhsm2 package : Ubuntu

Sponsored.

arm-trusted-firmware

https://code.launchpad.net/~ravi-sharma/ubuntu/+source/arm-trusted-firmware/+git/arm-trusted-firmware/+merge/507419

Sponsored.

kannel

Sponsored.

gensio

Merge into ubuntu/devel : fix-lp2154877 : lp:~ravi-sharma/ubuntu/+source/gensio : Git : Code : gensio package : Ubuntu

Sponsored.

cauchy

https://code.launchpad.net/~graysonwolf/ubuntu/+source/cauchy/+git/cauchy/+merge/509459

Sponsored.

bsdgames

Merge into ubuntu/devel : ftbfs-stonking : lp:~graysonwolf/ubuntu/+source/bsdgames : Git : Code : bsdgames package : Ubuntu

Left a question.

sudo

Uploaded fix for openssl4 ftbfs, and autopkgtests.

libsodium 23 → 26 transition

Uploaded several NCR for Puida, see Matrix - Decentralised and secure communication

Also reviewed and sponsored https://code.launchpad.net/~puida/ubuntu/+source/shadowsocks-libev/+git/shadowsocks-libev/+merge/509703

ganglia, monero

Reviewed, left comments, not sponsored.

chrony

Merge into debian/sid : stonking-chrony-merge-1 : lp:~ahasenack/ubuntu/+source/chrony : Git : Code : chrony package : Ubuntu

Worked on a chrony merge

openssh

Bug #2164221 “Second openssh merge for stonking” : Bugs : openssh package : Ubuntu

Merge into debian/sid : stonking-openssh-merge-2 : lp:~ahasenack/ubuntu/+source/openssh : Git : Code : openssh package : Ubuntu

Worked on the openssh merge.

i386 Allow list

I added lua5.5 and mysql-9.7.

OpenSSL 4 related

Request for FTBFS reviews in matrix: Matrix - Decentralised and secure communication

dovecot migration

NCR for dovecot-fts-xapian: Merge into ubuntu/devel : fix-2154981-ftbfs : lp:~rroessler/ubuntu/+source/kristall : Git : Code : kristall package : Ubuntu

Sponsored.

opensc, pkcs11-provider

Untangled the migration due to swugenerator.

imx-code-signing-tool

Bug #2163673 “DEP8 test failure due to missing engine in openssl…” : Bugs : imx-code-signing-tool package : Ubuntu

Autopkgtests fail because src:libp11 no longer builds the openssl (4) engine. NEEDS-ACTION

lua5.5 promotion to main

Comment #3 : Bug #2155757 : Bugs : lua5.5 package : Ubuntu

Looks ready. Promoted.

rsyslog FTBFS

Bug #2163685 “FTBFS: initialization discards ‘const’ qualifier f…” : Bugs : rsyslog package : Ubuntu

Doing a merge at the same time.

1 Like