Bug#963525: , Bug#963721: libmount1 with libcryptsetup dependency

[Simon McVittie]

Control: retitle 963525 steam: crashes with libmount version that depends on libcryptsetup12

On Sun, 28 Jun 2020 at 15:45:41 +0200, Chris Hofstaedtler wrote:
> 1) Software that is not shipped by Debian and uses a statically
> linked or private copy of libssl crashes, because libmount1 pulls 
> in libssl1.1, transitively. This is quite clearly unsupported by
> libssl. If anyone ships binaries for Debian, they need to either
> link against Debian's libssl, or not use any of the system provided
> libs.

If you consider this to be a bug in the proprietary Steam binaries rather
than in libmount, then that's at least plausible, but please leave #963525
open and with a reasonably descriptive title so that Steam users don't
open duplicate bugs.

I'm in contact with Valve about making the proprietary Steam binaries
more robust against system libraries that pull in OpenSSL, and have
suggested various possible routes. However, none of these are things we
can fix unilaterally in Debian: they require recompiling (or at least
relinking) the proprietary Steam client, which we are both legally and
technically unable to do.

I suspect this is likely to trigger brokenness in other binaries that
we can't fix, not just Steam, but let's see what happens...

Workarounds include:

- Hold back libmount1 until there's a better solution from Valve
- Install Steam via Flatpak or similar rather than using steam.deb
- Uninstall libglib2.0-0:i386, if you don't need it for other reasons
  (the most common reason to need it is 32-bit Wine)

    smcv