Re: Early migration for openssh?

On Wed, May 14, 2025 at 01:15:34AM +0200, Cyril Brulebois wrote:
>Debian FTP Masters <[email protected]> (various dates):
>>  openssh (1:10.0p1-5) unstable; urgency=medium
>>  .
>>    * Ensure that configure knows the path to passwd; fixes reproducibility of
>>      openssh-tests.
>
>>  openssh (1:10.0p1-4) unstable; urgency=medium
>>  .
>>    [ Daniel Kahn Gillmor ]
>>    * Add Requires=ssh-agent.socket to ssh-agent.service (closes: #1103522).
>
>>  openssh (1:10.0p1-3) unstable; urgency=medium
>>  .
>>    * Disable --with-linux-memlock-onfault again, since it causes
>>      RLIMIT_MEMLOCK to be exceeded with some combinations of PAM modules
>>      (closes: #1103418).
>
>We have a few fixes in unstable, one for a grave bug, another one for an
>important one. Your latest update is 5/10 days old, so might qualify for
>“sufficiently tested to be confident enough”.
>
>I hope to have D-I Trixie RC 1 lined up in the next few days, but I'd be
>fine with pushing your package into testing right away instead of having
>it wait for the full 10 days. I don't think it changes anything
>regarding the d-i runtime, but users might enjoy a freshly installed
>system with a few more bugfixes right off the bat.

I also filed #1105179 earlier this week for an unblock for this.  I 
obviously have a bias here, but IMO 1:10.0p1-5 is pretty clearly better 
than 1:10.0p1-2 and there doesn't seem to be a particular reason to 
wait.

Thanks,