Upstream Debian build-essential deliberately doesn't depend on libcrypt- dev and the current sid openssh package is also affected. I'm going to open a bug report there too, and submit a patch once my Debian Salsa account is approved.
So whilst I think the _correct_ fix _is_ to add libcrypt-dev to "Build- Depends", adding the updated build-essential to -security would perhaps prevent inconsistencies in other Ubuntu Security package updates. https://salsa.debian.org/glibc- team/glibc/-/commit/10c4a331fb977ae5ae7255e9ee1c9c133f9d9da9 is where the dependency on libcrypt-dev was dropped. "doing an archive rebuild and filling (sic) the bug reports." But openssh still built, so wasn't caught. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2161162 Title: 1:10.2p1-2ubuntu3.4 built without crypt() To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2161162/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
