brian m. carlson (one of the git upstream copyright holders) claims in Bug #1094969 that git cannot be distributed when linked with OpenSSL. IIRC the Debian position is to use the system library exception.
Indeed our /usr/lib/git-core/git-remote-https links against libssl.so.3, probably via libcurl-gnutls.so.4. To avoid introducing distro-wide changes at a time where this seems inappropriate, an option is to disable building git with libcurl. Below is a simple patch to accomplish this. Barring any new insights or feedback from the involved maintainers, this might be a way out. I believe all relevant people are in CC:, and they can figure this out. Details can be found in the bug. Chris diff -Nru git-2.49.0/debian/changelog git-2.49.0/debian/changelog --- git-2.49.0/debian/changelog 2025-03-15 18:48:53.000000000 +0100 +++ git-2.49.0/debian/changelog 2025-04-13 22:18:18.000000000 +0200 @@ -1,3 +1,11 @@ +git (1:2.49.0-1.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Disable building with libcurl. + + -- Chris Hofstaedtler <z...@debian.org> Sun, 13 Apr 2025 22:18:18 +0200 + git (1:2.49.0-1) unstable; urgency=low * new upstream release (see RelNotes/2.48.0.adoc, RelNotes/2.49.0.adoc). diff -Nru git-2.49.0/debian/control git-2.49.0/debian/control --- git-2.49.0/debian/control 2025-03-15 18:48:14.000000000 +0100 +++ git-2.49.0/debian/control 2025-04-13 22:18:18.000000000 +0200 @@ -3,9 +3,10 @@ Priority: optional Maintainer: Jonathan Nieder <jrnie...@gmail.com> Uploaders: Anders Kaseorg <ande...@mit.edu> +Build-Conflicts: libcurl4-gnutls-dev, libcurl4-openssl-dev Build-Depends: libz-dev, gettext, libpcre2-dev | libpcre3-dev, - libcurl4-gnutls-dev, libexpat1-dev, + libexpat1-dev, subversion, libsvn-perl, libyaml-perl, tcl, python3, libhttp-date-perl | libtime-parsedate-perl, diff -Nru git-2.49.0/debian/rules git-2.49.0/debian/rules --- git-2.49.0/debian/rules 2025-03-15 18:36:51.000000000 +0100 +++ git-2.49.0/debian/rules 2025-04-13 22:18:18.000000000 +0200 @@ -10,6 +10,7 @@ OPTS =NO_OPENSSL=1 prefix=/usr gitexecdir=/usr/lib/git-core \ mandir=/usr/share/man htmldir=/usr/share/doc/git/html \ INSTALLDIRS=vendor \ + NO_CURL=1 \ SANE_TOOL_PATH= INSTALL=install TAR=tar \ NO_CROSS_DIRECTORY_HARDLINKS=1 NO_INSTALL_HARDLINKS=1 \ NO_PERL_CPAN_FALLBACKS=1 \
