Package: src:openssh Version: 1:10.4p1-1 Severity: important sshd-session is built without crypt() support, so password authentication fails when UsePAM is set to "no" — sshd logs "Failed password" for a correct password. UsePAM yes is unaffected (that path goes through pam_unix, which links libcrypt itself).
The build no longer detects crypt: [1] checking for crypt in -lcrypt... no checking for crypt... no This is a side effect of libc6-dev dropping its libcrypt-dev dependency (glibc 2.42-7) [2][3]. openssh only ever got libcrypt-dev transitively, so it's now absent from the build chroot and crypt() is compiled out. It builds cleanly (no FTBFS), which is why the archive rebuild for that transition didn't flag it. trixie (1:10.0p1-7+deb13u4) still links libcrypt and is fine. [4] The fix is to add libcrypt-dev to Build-Depends. I'll submit an MR with that plus a regression test once my Salsa account is approved. Same issue hit Ubuntu 26.04 (LP: #2161162). [5] [1] - https://buildd.debian.org/status/fetch.php?pkg=openssh&arch=amd64&ver=1%3A10.4p1-1&stamp=1783366343&raw=0 [2] - https://salsa.debian.org/glibc-team/glibc/-/commit/10c4a331fb977ae5ae7255e9ee1c9c133f9d9da9 [3] - https://www.freexian.com/blog/debian-contributions-04-2025/ [4] - https://buildd.debian.org/status/fetch.php?pkg=openssh&arch=amd64&ver=1%3A10.0p1-7%2Bdeb13u4&stamp=1778093735&raw=0 [5] - https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2161162
