Ticket #1581 (closed defect: fixed)

Opened 5 years ago

Last modified 3 years ago

nss_hesiod segfaults in xenial and jessie

Reported by: andersk Owned by:
Priority: blocker Milestone: The Distant Future
Component: upstream Keywords:
Cc: Fixed in version:
Upstream bug:  LP:1571456

Description

The nss_hesiod module was  completely broken by upstream glibc commit  glibc-2.22~290, causing functions like getpwuid to segfault. It was fixed three months later in  glibc-2.24~295, and the fix was backported to the upstream stable branches as  glibc-2.23-31-g2d1f679 and  glibc-2.22-70-ga64be6f.

Unfortunately, the bug made its way into Ubuntu 16.04 and was never fixed there. I filed  LP:1571456 with patches a few days before the 16.04 release, and then converted the report into an SRU request, but it has been almost completely ignored.

This thoroughly blocks debathena-login on Ubuntu 16.04, unless we move from Hesiod to LDAP (#200).

Change History

comment:1 Changed 5 years ago by andersk

  • Summary changed from nss_hesiod segfaults in xenial to nss_hesiod segfaults in xenial and jessie

The commit introducing this bug was backported in a jessie stable update ( Debian:818281), so jessie with libc6 ≥ 2.19-18+deb8u6 is now also affected ( Debian:821358).

comment:2 Changed 5 years ago by andersk

The fix finally landed in xenial-updates today as libc6 2.23-0ubuntu4. 🎉🎉🎉

For jessie, the fix is  committed but not yet uploaded.

comment:3 Changed 3 years ago by andersk

  • Status changed from new to closed
  • Resolution set to fixed

The fix was uploaded to jessie a while ago as libc6 2.19-18+deb8u7.

Note: See TracTickets for help on using tickets.