Dear maintainer, The sash packages provides /usr/bin/sash which is statically linked against glibc glibc is mostly is mostly licensed under the LGPL, which requires that the full source code of the incorporating binary package be made available. According to Debian Policy §7.8 [1] such a binary package MUST list the glibc source package (and possibly others) in the Built-Using: field. Regards Aurelien [1] https://www.debian.org/doc/debian-policy/ch-relationships.html#additional-source-packages-used-to-build-the-binary-built-using
control: tag -1 + patch Hi, It happens that sash already has support for adding glibc to Built-Using. It doesn't work because it uses grep-status to determine the name of the glibc dev package from the provide, and this binary is provide by dctrl-tools which is not in the build-depends. This appears in the build log: | make[1]: Entering directory '/<<PKGBUILDDIR>>' | make[1]: grep-status: No such file or directory | dh_gencontrol -- -V"built-using=zlib (= 1:1.3.dfsg+really1.3.1-1), " The easiest solution here is to use libc-dev-bin to lookup the source version, as anyway libc6-dev strictly depends on it. This is what is done in the attached patch. By the way, it seems that the zlib license doesn't require the source code to be available, so it doesn't qualify to Built-Using according to Debian Policy 7.8. It should probably be moved to Static-Built-Using (see #1069256), but anyway that's not relevant for this bug. Regards Aurelien
We believe that the bug you reported is fixed in the latest version of sash, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1106806@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Marco d'Itri <md@linux.it> (supplier of updated sash package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) Format: 1.8 Date: Tue, 03 Jun 2025 04:08:45 +0200 Source: sash Architecture: source Version: 3.8-7 Distribution: unstable Urgency: medium Maintainer: Marco d'Itri <md@linux.it> Changed-By: Marco d'Itri <md@linux.it> Closes: 1106806 Changes: sash (3.8-7) unstable; urgency=medium . * Move zlib1g-dev to Static-Built-Using. * Fix generating Built-Using for glibc. (Closes: #1106806) Checksums-Sha1: cc0cd637fd95d5cac8b93e1849686441d4e4ed52 1186 sash_3.8-7.dsc 6fa1771dd6a0310f38a3a59335c2f0fe6dc3093c 34272 sash_3.8-7.debian.tar.xz 8f7087bcc43675d55ac3b844be93fe884643395b 5382 sash_3.8-7_amd64.buildinfo Checksums-Sha256: 4ef0a90f35181cf1431b39b2b8c14de748927024f40f7a57ebdb3b16627ca3c0 1186 sash_3.8-7.dsc d92c24d685911a022ed737c89df38f722f642dfa53552951dc7e90bc84c8151e 34272 sash_3.8-7.debian.tar.xz 3a6c6454ae4777bba479e0b15a59b18eeacbcdc6275b9b17fcc3e0c85842a27e 5382 sash_3.8-7_amd64.buildinfo Files: 13b08632b9ffbf4c081f6551e31f445d 1186 shells optional sash_3.8-7.dsc 26a5d36de35e234a0793e77b1f04054d 34272 shells optional sash_3.8-7.debian.tar.xz 610e7ce446de4ab644430fad44e0aecc 5382 shells optional sash_3.8-7_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQQnKUXNg20437dCfobLPsM64d7XgQUCaD5cDgAKCRDLPsM64d7X gbGFAP9ZcPvEUfv7Dd3WY9BdVJFGgRkfRbIcAOzj1Vz83a35hwD6AnZN43rdtBjn PiAxWNpGpV3kaiHGy+tm28NJ3sid9ws= =dQsM -----END PGP SIGNATURE-----