Your message dated Sun, 19 Jul 2026 12:05:22 +0000
with message-id <[email protected]>
and subject line Bug#1142354: fixed in openssh 1:10.4p1-2
has caused the Debian Bug report #1142354,
regarding sshd-session built without crypt(), breaking UsePAM=no password auth
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1142354: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1142354
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: src:openssh
Version: 1:10.4p1-1
Severity: important
sshd-session is built without crypt() support, so password
authentication fails when UsePAM is set to "no" — sshd logs "Failed
password" for a correct password. UsePAM yes is unaffected (that path
goes through pam_unix, which links libcrypt itself).
The build no longer detects crypt: [1]
checking for crypt in -lcrypt... no
checking for crypt... no
This is a side effect of libc6-dev dropping its libcrypt-dev dependency
(glibc 2.42-7) [2][3]. openssh only ever got libcrypt-dev transitively, so
it's
now absent from the build chroot and crypt() is compiled out. It builds
cleanly (no FTBFS), which is why the archive rebuild for that transition
didn't flag it.
trixie (1:10.0p1-7+deb13u4) still links libcrypt and is fine. [4]
The fix is to add libcrypt-dev to Build-Depends. I'll submit an MR with
that plus a regression test once my Salsa account is approved. Same issue
hit Ubuntu 26.04 (LP: #2161162). [5]
[1] -
https://buildd.debian.org/status/fetch.php?pkg=openssh&arch=amd64&ver=1%3A10.4p1-1&stamp=1783366343&raw=0
[2] -
https://salsa.debian.org/glibc-team/glibc/-/commit/10c4a331fb977ae5ae7255e9ee1c9c133f9d9da9
[3] - https://www.freexian.com/blog/debian-contributions-04-2025/
[4] -
https://buildd.debian.org/status/fetch.php?pkg=openssh&arch=amd64&ver=1%3A10.0p1-7%2Bdeb13u4&stamp=1778093735&raw=0
[5] - https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2161162
--- End Message ---
--- Begin Message ---
Source: openssh
Source-Version: 1:10.4p1-2
Done: Colin Watson <[email protected]>
We believe that the bug you reported is fixed in the latest version of
openssh, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Colin Watson <[email protected]> (supplier of updated openssh package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 19 Jul 2026 12:46:25 +0100
Source: openssh
Architecture: source
Version: 1:10.4p1-2
Distribution: unstable
Urgency: medium
Maintainer: Debian OpenSSH Maintainers <[email protected]>
Changed-By: Colin Watson <[email protected]>
Closes: 1142354
Changes:
openssh (1:10.4p1-2) unstable; urgency=medium
.
[ Alexander Fisher ]
* Build-Depends: add libcrypt-dev so crypt() is detected at build time,
fixing password authentication with UsePAM=no (closes: #1142354).
* debian/tests: add password-auth-no-pam regression test.
Checksums-Sha1:
5db560828ddf87d12da47fb65535e5789ad6f53c 3828 openssh_10.4p1-2.dsc
e0897f6092f5da617a0a816ea72fd4915479b34a 208756 openssh_10.4p1-2.debian.tar.xz
c18123045b83b70d7c6ea0d8c891971c8fe7fcc5 5201704 openssh_10.4p1-2.git.tar.xz
eb2af3f40852f6bf2bbd845f99c0968da74c4521 17552
openssh_10.4p1-2_source.buildinfo
Checksums-Sha256:
2ba68f5995714ce4ee135db85fdc78962ad57b1d5cc883f9171c017f9db56c97 3828
openssh_10.4p1-2.dsc
f50ddcf77357c8d54b16d53b4c34cde3df18dc3be56a806af8a5c7b75f647d38 208756
openssh_10.4p1-2.debian.tar.xz
1116a1a1d76a8e088624f60630c2d7aba4e4fa9287625566bcaff089b6b1ade3 5201704
openssh_10.4p1-2.git.tar.xz
182467dc041d185af04dbc51e8c1a1207bcf4ba194595690e018d01101cf2975 17552
openssh_10.4p1-2_source.buildinfo
Files:
af204938d6b5ea67ca9a04be909f856e 3828 net standard openssh_10.4p1-2.dsc
850c8ccb685bee13cdf98d9a26b30c75 208756 net standard
openssh_10.4p1-2.debian.tar.xz
1330ed982e284aa32858cc47182ca859 5201704 net standard
openssh_10.4p1-2.git.tar.xz
80f0bf8cb07e6e82f6f6f1f0ef268143 17552 net standard
openssh_10.4p1-2_source.buildinfo
Git-Tag-Info: tag=0606c3b1cbf1a69328fceb20c742b9eec56c8652
fp=ac0a4ff12611b6fccf01c111393587d97d86500b
Git-Tag-Tagger: Colin Watson <[email protected]>
-----BEGIN PGP SIGNATURE-----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=d5DN
-----END PGP SIGNATURE-----
pgpwdWZKdsIP_.pgp
Description: PGP signature
--- End Message ---
