Bug#1138423: marked as done (openssh: FTBFS with openssl 4.0)

This is a multi-part message in MIME format...

------------=_1780312383-1692713-0
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"

Your message dated Mon, 01 Jun 2026 11:10:03 +0000
with message-id <[email protected]>
and subject line Bug#1138423: fixed in openssh 1:10.3p1-4
has caused the Debian Bug report #1138423,
regarding openssh: FTBFS with openssl 4.0
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


--=20
1138423: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D1138423
Debian Bug Tracking System
Contact [email protected] with problems

------------=_1780312383-1692713-0
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at submit) by bugs.debian.org; 30 May 2026 16:12:04 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
	(2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-28.1 required=4.0 tests=BAYES_00,
	BODY_INCLUDES_CONTROL_AFFECTS,BODY_INCLUDES_PACKAGE,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HAS_PACKAGE,RCVD_IN_DNSWL_MED,
	SPF_HELO_PASS,SPF_PASS,X_DEBBUGS_CC autolearn=ham autolearn_force=no
	version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 65; hammy, 150; neutral, 120; spammy,
	0. spammytokens: hammytokens:0.000-+--Wdatetime, 0.000-+--wdatetime,
	0.000-+--Wdate-time, 0.000-+--wdate-time, 0.000-+--sk:ffile-p
Return-path: <[email protected]>
Received: from chamillionaire.breakpoint.cc ([91.216.245.30]:34412)
	by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
	(Exim 4.96)
	(envelope-from <[email protected]>)
	id 1wTMI8-002F0Y-0J
	for [email protected];
	Sat, 30 May 2026 16:12:04 +0000
Date: Sat, 30 May 2026 18:12:01 +0200
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=breakpoint.cc;
	s=2025; t=1780157522;
	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
	 to:to:cc:mime-version:mime-version:content-type:content-type:
	 content-transfer-encoding:content-transfer-encoding;
	bh=iYUJAbEgMJ+75TRT666Euc+XszCaEGyYlR9rGF8OikU=;
	b=lQTZOorVfoCx13F2ifs3lWY5FW/y0CTp9ZuP9vmhr/1AUS6/Y8L+d0nHLAqeX897028zQd
	44Za5heDLt5I8igX61sgQXPIulM5P9D7apw0xcxwX6qjwgnW+2R2iAWgAaISURPNHEWqQ8
	n1lF/o2R1Dph6osnJxKwkzuDUikNqUWo3RWvuM2nAIIfpuJ6DDs7hUrrF2m49Pzrhr0PcA
	LHVn4Up0anyUdekua+lf9GNxItYLc/IxlybQ9wEWUlu0LJqtcqmT3oRJAUN2Rk3y8a1zRN
	Hq/XdDeeubw5r/JJR+x7bkUd5bQEqPI44s7On28ua7LpZvdOVUR1ekOlthTPsA==
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=breakpoint.cc;
	s=2025e; t=1780157522;
	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
	 to:to:cc:mime-version:mime-version:content-type:content-type:
	 content-transfer-encoding:content-transfer-encoding;
	bh=iYUJAbEgMJ+75TRT666Euc+XszCaEGyYlR9rGF8OikU=;
	b=3I5W/93xjinsbHzfYOMDSTg2vcc1wGt9SuzMmu2G/6lBKGcl0tUs50BkNzdfi01rzp+1U0
	BBqRxPFaBdfj6eCA==
From: Sebastian Andrzej Siewior <[email protected]>
To: [email protected]
Subject: openssh: FTBFS with openssl 4.0
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
X-Debbugs-CC: [email protected]
Delivered-To: [email protected]

Package: openssh
Version: 1:10.3p1-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: [email protected]
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| cc -g -O2 -Werror=3Dimplicit-function-declaration -ffile-prefix-map=3D/bu=
ild/reproducible-path/openssh-10.3p1=3D. -fstack-protector-strong -fstack-c=
lash-protection -Wformat -Werror=3Dformat-security -fcf-protection -pipe -W=
no-error=3Dformat-truncation -Wall -Wextra -Wpointer-arith -Wuninitialized =
-Wsign-compare -Wformat-security -Wsizeof-pointer-memaccess -Wno-pointer-si=
gn -Wno-unused-parameter -Wno-unused-result -Wimplicit-fallthrough -Wmislea=
ding-indentation -fno-strict-aliasing -D_FORTIFY_SOURCE=3D2 -ftrapv -fzero-=
call-used-regs=3Dused -ftrivial-auto-var-init=3Dzero -fno-builtin-memset -f=
stack-protector-strong -Wdate-time -D_FORTIFY_SOURCE=3D2 -g -O2 -Werror=3Di=
mplicit-function-declaration -ffile-prefix-map=3D/build/reproducible-path/o=
penssh-10.3p1=3D. -fstack-protector-strong -fstack-clash-protection -Wforma=
t -Werror=3Dformat-security -fcf-protection -DSSH_EXTRAVERSION=3D\"Debian-1=
\"   -I. -I../.. -I"/build/reproducible-path/openssh-10.3p1/debian/build-de=
b/openbsd-compat/include" -Wdate-time -D_FORTIFY_SOURCE=3D2 -D_XOPEN_SOURCE=
=3D600 -D_BSD_SOURCE -D_DEFAULT_SOURCE -D_GNU_SOURCE -I/usr/include/editlin=
e  -DOPENSSL_API_COMPAT=3D0x10100000L  -isystem /usr/include/mit-krb5 -isys=
tem /usr/include/mit-krb5 -isystem /usr/include/mit-krb5 -DSSHDIR=3D\"/etc/=
ssh\" -D_PATH_SSH_PROGRAM=3D\"/usr/bin/ssh\" -D_PATH_SSH_ASKPASS_DEFAULT=3D=
\"/usr/bin/ssh-askpass\" -D_PATH_SFTP_SERVER=3D\"/usr/lib/openssh/sftp-serv=
er\" -D_PATH_SSH_KEY_SIGN=3D\"/usr/lib/openssh/ssh-keysign\" -D_PATH_SSHD_S=
ESSION=3D\"/usr/lib/openssh/sshd-session\" -D_PATH_SSHD_AUTH=3D\"/usr/lib/o=
penssh/sshd-auth\" -D_PATH_SSH_PKCS11_HELPER=3D\"/usr/lib/openssh/ssh-pkcs1=
1-helper\" -D_PATH_SSH_SK_HELPER=3D\"/usr/lib/openssh/ssh-sk-helper\" -D_PA=
TH_SSH_PIDDIR=3D\"/run\" -D_PATH_PRIVSEP_CHROOT_DIR=3D\"/run/sshd\" -DHAVE_=
CONFIG_H -c ../../ssh-sk-client.c -o ssh-sk-client.o
| cc -o ssh ssh.o readconf.o clientloop.o sshtty.o sshconnect.o sshconnect2=
=2Eo mux.o ssh-pkcs11.o ssh-sk-client.o -L. -Lopenbsd-compat/ -Wl,-z,relro =
-Wl,-z,now -Wl,-z,relro -Wl,-z,now -Wl,-z,noexecstack -fstack-protector-str=
ong -Wl,--as-needed -Wl,-z,relro -Wl,-z,now  -lssh -lopenbsd-compat -lmd  -=
lselinux -L/usr/lib/x86_64-linux-gnu/mit-krb5 -lgssapi_krb5 -lcrypto  -lz
| /usr/bin/x86_64-linux-gnu-ld.bfd: openbsd-compat//libopenbsd-compat.a(ope=
nssl-compat.o): in function `ssh_libcrypto_init':
| ./debian/build-deb/openbsd-compat/../../../openbsd-compat/openssl-compat.=
c:80:(.text+0x69): undefined reference to `ENGINE_load_builtin_engines'
| /usr/bin/x86_64-linux-gnu-ld.bfd: ./debian/build-deb/openbsd-compat/../..=
/../openbsd-compat/openssl-compat.c:81:(.text+0x6e): undefined reference to=
 `ENGINE_register_all_complete'
| collect2: error: ld returned 1 exit status
| make[2]: *** [Makefile:223: ssh] Error 1


Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/openssh_10.3p1-1_a=
md64-2026-04-19T12:07:47Z

Sebastian

------------=_1780312383-1692713-0
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at 1138423-close) by bugs.debian.org; 1 Jun 2026 11:10:06 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
	(2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-113.0 required=4.0 tests=BAYES_00,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FVGT_m_MULTI_ODD,
	HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,
	SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham
	autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 99; hammy, 150; neutral, 119; spammy,
	0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK,
	0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload,
	0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo.
Return-path: <[email protected]>
Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:59914)
	by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
	(Exim 4.96)
	(envelope-from <[email protected]>)
	id 1wU0X0-0076Bd-27
	for [email protected];
	Mon, 01 Jun 2026 11:10:06 +0000
Received: via submission
	from C=NA,ST=NA,L=Ankh Morpork,O=Debian SMTP,OU=Debian SMTP CA,CN=fasolo.debian.org,[email protected] (verified)
	by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
	(Exim 4.96)
	(envelope-from <[email protected]>)
	id 1wU0Wy-002tIY-2w
	for [email protected];
	Mon, 01 Jun 2026 11:10:04 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type:
	Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID
	:Content-Description:In-Reply-To:References;
	bh=mMZJn1U+ytWvtIB6QsY4ldvf7Cm/pixiawEylGUOfqY=; b=FAE8ruvHtLIZCrLDERd2BprPiq
	Os4ZpHlbFc7KVOaMPGRLdECPHc5qKNesd3oh5/q4SPf/UOhKRSVkzjKxTshxCCwvZWqtMcVzFazNW
	TTvGPOT1+xya3gtecUQ+UoNU1lf0yf5Lj1+0PYOpjZYCP6j4j2mM+N8xhLCw378RXZBbNQENgSxj3
	7/ZU2c6p1YPvZbAEJUhGPUyjkp8FPXHYfTN0GMN5WSE+81bSlfPrHdcRM7w+9I5LnyPPV9mMIGY+w
	eU0bmbBYragOon3VNPEv7yZ3zQVjFiorQQvEIRdeZMSNSRXy+qjJID8BsLHxBQF3WsbcVvrR2v7d6
	CJ567G0g==;
Received: from dak by fasolo.debian.org with local (Exim 4.98.2)
	(envelope-from <[email protected]>)
	id 1wU0Wx-000000002Hk-390E;
	Mon, 01 Jun 2026 11:10:03 +0000
From: Debian FTP Masters <[email protected]>
Reply-To: Colin Watson <[email protected]>
To: [email protected]
X-DAK: dak process-upload
X-Debian: DAK
X-Debian-Package: openssh
Debian: DAK
Debian-Changes: openssh_10.3p1-4_source.changes
Debian-Source: openssh
Debian-Version: 1:10.3p1-4
Debian-Architecture: source
Debian-Suite: unstable
Debian-Archive-Action: accept
MIME-Version: 1.0
Subject: Bug#1138423: fixed in openssh 1:10.3p1-4
Content-Type: multipart/signed; micalg="pgp-sha256";
 protocol="application/pgp-signature";
 boundary="===============4618339581876038066=="
Message-Id: <[email protected]>
Date: Mon, 01 Jun 2026 11:10:03 +0000

--===============4618339581876038066==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Source: openssh
Source-Version: 1:10.3p1-4
Done: Colin Watson <[email protected]>

We believe that the bug you reported is fixed in the latest version of
openssh, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Colin Watson <[email protected]> (supplier of updated openssh package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 01 Jun 2026 11:37:05 +0100
Source: openssh
Architecture: source
Version: 1:10.3p1-4
Distribution: unstable
Urgency: medium
Maintainer: Debian OpenSSH Maintainers <[email protected]>
Changed-By: Colin Watson <[email protected]>
Closes: 1138423
Changes:
 openssh (1:10.3p1-4) unstable; urgency=3Dmedium
 .
   * OpenSSL 4 removed support for engines, so only configure with
     --with-ssl-engine when building for older versions (closes: #1138423).
Checksums-Sha1:
 128cb7c9245689713d15261eb5d96ea8d9b2aa9a 3751 openssh_10.3p1-4.dsc
 4b17805044964aa92b0265434c5d763a09722319 203388 openssh_10.3p1-4.debian.tar.=
xz
 a52fdae2bccf5f5bb5c130301d59eddc513f8dc1 5612112 openssh_10.3p1-4.git.tar.xz
 37d6e5a11c5a8017e1c3f2e5cf93906669d79855 17491 openssh_10.3p1-4_source.build=
info
Checksums-Sha256:
 28c2b610f4b8f28b2da8bf58202db72e8caaa1fcc944dc4cd6e5131e69542559 3751 openss=
h_10.3p1-4.dsc
 5ab7ab52b250aa654485edfc8d8af528bc9db49fd96c47039a067c4205c094f5 203388 open=
ssh_10.3p1-4.debian.tar.xz
 ba01edb2f12021defc677b9cfb4fcd9a3f12e29efa8c8268bab88feccfc8ac60 5612112 ope=
nssh_10.3p1-4.git.tar.xz
 cc0dc464f66c469f5f2558c1db35092499594e410adfbd6e8ba3d36c9fd39378 17491 opens=
sh_10.3p1-4_source.buildinfo
Files:
 df51b90144541a0e20dd9fae8d27c3f7 3751 net standard openssh_10.3p1-4.dsc
 9875d714c0779c30602688879f7e70ba 203388 net standard openssh_10.3p1-4.debian=
.tar.xz
 8449d2398c7426dc75018cd889e200a8 5612112 net standard openssh_10.3p1-4.git.t=
ar.xz
 3766a63004f9a1852a56dd0fad27b20e 17491 net standard openssh_10.3p1-4_source.=
buildinfo
Git-Tag-Info: tag=3Daeeb446c12a880b8643d935581f62d8bc2ecd3ff fp=3Dac0a4ff1261=
1b6fccf01c111393587d97d86500b
Git-Tag-Tagger: Colin Watson <[email protected]>

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmodYTQACgkQYG0ITkaD
wHmDrw//fX2y2QhItZFw4thxg1dymMq1WWVRE5JQHsNVTMjHsqprNse4mQ//jfmc
a9YdgfC/3PRH+lO/pt/5kB2ahx0Q+jcMb5ZTHUqTtlc8xiHeuPpkVlkFTcX1v0Qx
NCr/2Wid9E6wKN2hkHerj3fmG7+hRIu3MOryFTbrhXCGaw9IlYt6MTxro1DsubFO
sdhrT9HkQNOyHbROoLtgwNyH2z9nxY+7U52pqV61S/SGvAJjJeLUJinVbvxbpOof
FJHtSdbHAGMZ7eJXuO1j5+q5FKomAJ5v47ylCvlkZWyMR9GmzKrQzSyItnVisIVd
pqv8tvd/IjUxjSXdfAQr6OwFMGbtlAIw+hCEb5ZO44jlGFCKTOemhTdKg1v6g6Tz
GxRD2CTZ7XartPxfnyT7WJofPTkcERBqpaiZ9kE3uV4aNaOrqJP7LrZDGIBqiMVM
zr58SD8N7e+Fp0/WCHoJq+CXqX2zTUElFbCwEQD1dRIUZLPC0U6t94PRknY/bOUR
yGL3jXTT0YgmVwBTh8UxWhAvBilIgG83AjzXFoZ3Qj62z491BrABqElyB3VKJ4+L
nTSZ8xkjyS1kpjY0hdEer/RTZTkgFrz1u3kuGrSnHtjZbbbLRGmqf6dlcBnJqohM
z+BUzIJkKn/eF/KlQdhCcDqGECzVEsp1f8qIc1DP2AxN0PYZ/qc=3D
=3DIWYG
-----END PGP SIGNATURE-----


--===============4618339581876038066==
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCah1oiwAKCRCb9qggYcy5
IZVLAQCLWZ9SvnykeIJQJCDf14jZACeTR2iDg55li+TL5r79MQEAu3mUS7HZrK3k
L3tsPry/xskx1HiV7RlA5cVERpkNUA4=
=7rLl
-----END PGP SIGNATURE-----

--===============4618339581876038066==--
------------=_1780312383-1692713-0--