Hi!

While rebuilding the python related packages against the Python 3.15rc2
version we found that glance fails to build from source:
https://debusine.debian.net/debian/r-python-python3.15/artifact/4856229/

 From the log, the error seems to be:

Traceback (most recent call last):
   File "/usr/lib/python3.15/hashlib.py", line 180, in __hash_new
     return _hashlib.new(name, *args, **kwargs)
            ~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^
_hashlib.UnsupportedDigestmodError: [digital envelope routines]
unsupported hash algorithm sha123

Please note that while we ran into this error during the rebuild against
Python 3.15, that doesn't mean that the root cause for the failure is
necessarily the new Python version. Although in this case it seems
likely.

Setting the severity to important for now. Once Python 3.15 is released
and later added to python3-defaults, this bug will become release
critical.

Hello,

Bug #1149374 in glance reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/openstack-team/services/glance/-/commit/daec0ae1115ecbda20a4e54e7768350e9f275061
------------------------------------------------------------------------
Fixed FTBFS against python 3.15 (unsupported hash algorithm sha123), by
validating os_hash_algo against hashlib.algorithms_available in the
add_location API and raising an explicit HTTP 400, since Python 3.15's
hashlib.new() raises _hashlib.UnsupportedDigestmodError which is no
longer a ValueError (Closes: #1149374):
- reject-unsupported-os_hash_algo-with-HTTP-400.patch
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1149374

We believe that the bug you reported is fixed in the latest version of
glance, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1149374@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Thomas Goirand <zigo@debian.org> (supplier of updated glance package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Tue, 06 Oct 2026 20:18:44 +0200
Source: glance
Architecture: source
Version: 2:33.0.0-5
Distribution: unstable
Urgency: medium
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 1149374
Changes:
 glance (2:33.0.0-5) unstable; urgency=medium
 .
   * Fixed FTBFS against python 3.15 (unsupported hash algorithm sha123), by
     validating os_hash_algo against hashlib.algorithms_available in the
     add_location API and raising an explicit HTTP 400, since Python 3.15's
     hashlib.new() raises _hashlib.UnsupportedDigestmodError which is no
     longer a ValueError (Closes: #1149374):
     - reject-unsupported-os_hash_algo-with-HTTP-400.patch
Checksums-Sha1:
 95214fa6f7a033854cbdae1667f798af2f844f6a 3610 glance_33.0.0-5.dsc
 c206611c01462cc159fcd1f667f155eb4827d522 20364 glance_33.0.0-5.debian.tar.xz
 01b020a56a2789aa525cd64ead5e4a466acd7988 18951 glance_33.0.0-5_amd64.buildinfo
Checksums-Sha256:
 3a489a5a242562c64998a7fed5ae7e8745a48ca4516bf5e3237d20b0d12092f9 3610 glance_33.0.0-5.dsc
 b1961862910ce133d19e6985bb7d1baf0a876d6b794c8483a1d300c01c3f59f5 20364 glance_33.0.0-5.debian.tar.xz
 3b34489b5aa77f159d1b48a1445aecbfdf8186bd78167a28788da0e8b98a1b75 18951 glance_33.0.0-5_amd64.buildinfo
Files:
 681800802e8eeebf760fff59a91f7617 3610 net optional glance_33.0.0-5.dsc
 48743dbb9e1d4ad2f1314eb57082c395 20364 net optional glance_33.0.0-5.debian.tar.xz
 b718fbd3056d7c2041b5fbff129bec29 18951 net optional glance_33.0.0-5_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=WnEV
-----END PGP SIGNATURE-----