[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#560333: marked as done (libc6: getpwnam shows shadow passwords of NIS users)



Your message dated Thu, 07 Jan 2010 00:19:04 +0000
with message-id <E1NSg5g-0000fL-ET@ries.debian.org>
and subject line Bug#560333: fixed in eglibc 2.10.2-4
has caused the Debian Bug report #560333,
regarding libc6: getpwnam shows shadow passwords of NIS users
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
560333: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560333
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: libc6
Version: 2.7-18
Severity: normal

Hello,

I have several machines where almost all user accounts come by NIS. The NIS
server is running on a Solaris machine. As usual, the Solaris NIS server
exports the passwd data in the map "passwd" and the shadow data in the map
"passwd.adjunct.byname". These two maps are mangled together in some calls
of libc6, for example in getpwnam. This makes it possible for every user who
has an account on the NIS client machine to see the encrypted passwords of
all NIS users. This is a grave security bug.

Furthermore, getspnam returns a NULL pointer for all NIS users, even if
getspnam is called by root.

Regards
  Christoph 


-- System Information:
Debian Release: 5.0.3
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-2-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libc6 depends on:
ii  libgcc1                      1:4.3.2-1.1 GCC support library

libc6 recommends no packages.

Versions of packages libc6 suggests:
pn  glibc-doc                     <none>     (no description available)
ii  libc6-i686                    2.7-18     GNU C Library: Shared libraries [i
ii  locales                       2.7-18     GNU C Library: National Language (

-- debconf information:
  glibc/upgrade: true
  glibc/restart-failed:
* glibc/restart-services: ssh openbsd-inetd cron



--- End Message ---
--- Begin Message ---
Source: eglibc
Source-Version: 2.10.2-4

We believe that the bug you reported is fixed in the latest version of
eglibc, which is due to be installed in the Debian FTP archive:

eglibc-source_2.10.2-4_all.deb
  to main/e/eglibc/eglibc-source_2.10.2-4_all.deb
eglibc_2.10.2-4.diff.gz
  to main/e/eglibc/eglibc_2.10.2-4.diff.gz
eglibc_2.10.2-4.dsc
  to main/e/eglibc/eglibc_2.10.2-4.dsc
glibc-doc_2.10.2-4_all.deb
  to main/e/eglibc/glibc-doc_2.10.2-4_all.deb
libc-bin_2.10.2-4_amd64.deb
  to main/e/eglibc/libc-bin_2.10.2-4_amd64.deb
libc-dev-bin_2.10.2-4_amd64.deb
  to main/e/eglibc/libc-dev-bin_2.10.2-4_amd64.deb
libc6-dbg_2.10.2-4_amd64.deb
  to main/e/eglibc/libc6-dbg_2.10.2-4_amd64.deb
libc6-dev-i386_2.10.2-4_amd64.deb
  to main/e/eglibc/libc6-dev-i386_2.10.2-4_amd64.deb
libc6-dev_2.10.2-4_amd64.deb
  to main/e/eglibc/libc6-dev_2.10.2-4_amd64.deb
libc6-i386_2.10.2-4_amd64.deb
  to main/e/eglibc/libc6-i386_2.10.2-4_amd64.deb
libc6-pic_2.10.2-4_amd64.deb
  to main/e/eglibc/libc6-pic_2.10.2-4_amd64.deb
libc6-prof_2.10.2-4_amd64.deb
  to main/e/eglibc/libc6-prof_2.10.2-4_amd64.deb
libc6-udeb_2.10.2-4_amd64.udeb
  to main/e/eglibc/libc6-udeb_2.10.2-4_amd64.udeb
libc6_2.10.2-4_amd64.deb
  to main/e/eglibc/libc6_2.10.2-4_amd64.deb
libnss-dns-udeb_2.10.2-4_amd64.udeb
  to main/e/eglibc/libnss-dns-udeb_2.10.2-4_amd64.udeb
libnss-files-udeb_2.10.2-4_amd64.udeb
  to main/e/eglibc/libnss-files-udeb_2.10.2-4_amd64.udeb
locales-all_2.10.2-4_amd64.deb
  to main/e/eglibc/locales-all_2.10.2-4_amd64.deb
locales_2.10.2-4_all.deb
  to main/e/eglibc/locales_2.10.2-4_all.deb
nscd_2.10.2-4_amd64.deb
  to main/e/eglibc/nscd_2.10.2-4_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 560333@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Aurelien Jarno <aurel32@debian.org> (supplier of updated eglibc package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Wed, 06 Jan 2010 22:18:19 +0100
Source: eglibc
Binary: libc-bin libc-dev-bin glibc-doc eglibc-source locales locales-all nscd libc6 libc6-dev libc6-dbg libc6-prof libc6-pic libc6-udeb libc6.1 libc6.1-dev libc6.1-dbg libc6.1-prof libc6.1-pic libc6.1-udeb libc0.3 libc0.3-dev libc0.3-dbg libc0.3-prof libc0.3-pic libc0.3-udeb libc0.1 libc0.1-dev libc0.1-dbg libc0.1-prof libc0.1-pic libc0.1-udeb libc6-i386 libc6-dev-i386 libc6-sparc64 libc6-dev-sparc64 libc6-s390x libc6-dev-s390x libc6-amd64 libc6-dev-amd64 libc6-powerpc libc6-dev-powerpc libc6-ppc64 libc6-dev-ppc64 libc6-mipsn32 libc6-dev-mipsn32 libc6-mips64 libc6-dev-mips64 libc0.1-i386 libc0.1-dev-i386 libc6-sparcv9b libc6-i686 libc6-xen libc0.1-i686 libc6.1-alphaev67 libnss-dns-udeb libnss-files-udeb
Architecture: all amd64 source
Version: 2.10.2-4
Distribution: unstable
Urgency: low
Maintainer: GNU Libc Maintainers <debian-glibc@lists.debian.org>
Changed-By: Aurelien Jarno <aurel32@debian.org>
Closes: 558984 560333 563552 563636
Description: 
 eglibc-source - Embedded GNU C Library: sources
 glibc-doc  - Embedded GNU C Library: Documentation
 libc-bin   - Embedded GNU C Library: Binaries
 libc-dev-bin - Embedded GNU C Library: Development binaries
 libc0.1    - Embedded GNU C Library: Shared libraries
 libc0.1-dbg - Embedded GNU C Library: detached debugging symbols
 libc0.1-dev - Embedded GNU C Library: Development Libraries and Header Files
 libc0.1-dev-i386 - GNU C Library: 32bit development libraries for AMD64
 libc0.1-i386 - GNU C Library: 32bit shared libraries for AMD64
 libc0.1-i686 - GNU C Library: Shared libraries [i686 optimized]
 libc0.1-pic - Embedded GNU C Library: PIC archive library
 libc0.1-prof - Embedded GNU C Library: Profiling Libraries
 libc0.1-udeb - Embedded GNU C Library: Shared libraries - udeb (udeb)
 libc0.3    - Embedded GNU C Library: Shared libraries
 libc0.3-dbg - Embedded GNU C Library: detached debugging symbols
 libc0.3-dev - Embedded GNU C Library: Development Libraries and Header Files
 libc0.3-pic - Embedded GNU C Library: PIC archive library
 libc0.3-prof - Embedded GNU C Library: Profiling Libraries
 libc0.3-udeb - Embedded GNU C Library: Shared libraries - udeb (udeb)
 libc6      - Embedded GNU C Library: Shared libraries
 libc6-amd64 - GNU C Library: 64bit Shared libraries for AMD64
 libc6-dbg  - Embedded GNU C Library: detached debugging symbols
 libc6-dev  - Embedded GNU C Library: Development Libraries and Header Files
 libc6-dev-amd64 - GNU C Library: 64bit Development Libraries for AMD64
 libc6-dev-i386 - GNU C Library: 32-bit development libraries for AMD64
 libc6-dev-mips64 - GNU C Library: 64bit Development Libraries for MIPS64
 libc6-dev-mipsn32 - GNU C Library: n32 Development Libraries for MIPS64
 libc6-dev-powerpc - GNU C Library: 32bit powerpc development libraries for ppc64
 libc6-dev-ppc64 - GNU C Library: 64bit Development Libraries for PowerPC64
 libc6-dev-s390x - GNU C Library: 64bit Development Libraries for IBM zSeries
 libc6-dev-sparc64 - GNU C Library: 64bit Development Libraries for UltraSPARC
 libc6-i386 - GNU C Library: 32-bit shared libraries for AMD64
 libc6-i686 - GNU C Library: Shared libraries [i686 optimized]
 libc6-mips64 - GNU C Library: 64bit Shared libraries for MIPS64
 libc6-mipsn32 - GNU C Library: n32 Shared libraries for MIPS64
 libc6-pic  - Embedded GNU C Library: PIC archive library
 libc6-powerpc - GNU C Library: 32bit powerpc shared libraries for ppc64
 libc6-ppc64 - GNU C Library: 64bit Shared libraries for PowerPC64
 libc6-prof - Embedded GNU C Library: Profiling Libraries
 libc6-s390x - GNU C Library: 64bit Shared libraries for IBM zSeries
 libc6-sparc64 - GNU C Library: 64bit Shared libraries for UltraSPARC
 libc6-sparcv9b - GNU C Library: Shared libraries [v9b optimized]
 libc6-udeb - Embedded GNU C Library: Shared libraries - udeb (udeb)
 libc6-xen  - GNU C Library: Shared libraries [Xen version]
 libc6.1    - Embedded GNU C Library: Shared libraries
 libc6.1-alphaev67 - GNU C Library: Shared libraries (EV67 optimized)
 libc6.1-dbg - Embedded GNU C Library: detached debugging symbols
 libc6.1-dev - Embedded GNU C Library: Development Libraries and Header Files
 libc6.1-pic - Embedded GNU C Library: PIC archive library
 libc6.1-prof - Embedded GNU C Library: Profiling Libraries
 libc6.1-udeb - Embedded GNU C Library: Shared libraries - udeb (udeb)
 libnss-dns-udeb - GNU C Library: NSS helper for DNS - udeb (udeb)
 libnss-files-udeb - GNU C Library: NSS helper for files - udeb (udeb)
 locales    - Embedded GNU C Library: National Language (locale) data [support]
 locales-all - Embedded GNU C Library: Precompiled locale data
 nscd       - Embedded GNU C Library: Name Service Cache Daemon
Changes: 
 eglibc (2.10.2-4) unstable; urgency=low
 .
   [ Samuel Thibault ]
   * testsuite-checking/expected-results-i486-linux-gnu-libc: Add
     tst-atime.out failure.
 .
   [ Aurelien Jarno ]
   * Also build a libc6-sparcv9b package on sparc64.
   * Disable debian/patches/any/cvs-futimens.diff. Addresses: #563726,
     #563754.
   * Add debian/patches/localedata/locale-et_EE.diff to change weekday
     and workday to Monday.  Closes: #563636.
   * Add debian/patches/any/cvs-resolv-init.diff to fix mixing IPv4 and
     IPv6 name server in resolv.conf.
   * Add debian/patches/any/cvs-resolv-uninitialized.diff to fix an
     uninitialized variable in resolv code.
   * Add debian/patches/any/cvs-resolv-bindv6only.diff to not use
     IPV4-mapped addresses in the resolver code.  Closes: #563552.
   * Add debian/patches/any/cvs-resolv-edns0.diff to handle overly large
     answer buffers in resolver.
   * Add debian/patches/any/cvs-resolv-v6mapped.diff to fix lookup failure
     with IPv6 mapping enabled and big answers.  Closes: #558984.
   * Add debian/patches/any/submitted-nis-shadow.diff to remove encrypted
     passwords from passwd entries, and add them in shadow entries.
     Closes: #560333.
 .
   [ Petr Salinger]
   * kfreebsd/local-sysdeps.diff: update to revision 2907 (from glibc-bsd).
Checksums-Sha1: 
 052761468d4d86fa4fdd9ba08157def6eb9bf279 1816194 glibc-doc_2.10.2-4_all.deb
 5a9cad26b5dab23b431a6d82650ded0d1c0faf0f 10932664 eglibc-source_2.10.2-4_all.deb
 3e2f12a6d3e6c8be9a28ffc458fe836ec0edd6c9 4751354 locales_2.10.2-4_all.deb
 4194c976a0b5298c5bc75514cb52a9c139bbcbaa 4247006 libc6_2.10.2-4_amd64.deb
 a00fc905c506b4dc8363982d265a7cf7435d491d 2547860 libc6-dev_2.10.2-4_amd64.deb
 1469a027a8d2e45907f2b4002ba98d53ab1f287b 1994288 libc6-prof_2.10.2-4_amd64.deb
 0ccf12114d7fcdd2f03db333b94bb8030756b065 1517960 libc6-pic_2.10.2-4_amd64.deb
 c8c6d7224a18ee1fed98d2ef929c1ed1c9e3cdfc 728798 libc-bin_2.10.2-4_amd64.deb
 eb2fdff824340bdd14963eb3559f3d951b7abb39 201832 libc-dev-bin_2.10.2-4_amd64.deb
 ccecb01c4f43cfc02b4977f7e11ceaf5f76285f9 3064406 locales-all_2.10.2-4_amd64.deb
 2e76592232a4c9ac9e41c3cdf9bbfda25a5c2d34 3793578 libc6-i386_2.10.2-4_amd64.deb
 f3738464705320671d15f22b2041576528badf46 1499146 libc6-dev-i386_2.10.2-4_amd64.deb
 b07505a762a73a06423c981a4a212bfe38ebbf8d 190438 nscd_2.10.2-4_amd64.deb
 37554451ea421453f83f1adaf83cbeee4572b21d 10277258 libc6-dbg_2.10.2-4_amd64.deb
 94437fe88e21c1e3c0fc7dc284c2791f00fe964f 1133922 libc6-udeb_2.10.2-4_amd64.udeb
 bdf165710e659d8284597f7ca4ed4360d069dc7c 11232 libnss-dns-udeb_2.10.2-4_amd64.udeb
 9f105210555ac8f85e89aae0e0a6e45aa7a603fc 19498 libnss-files-udeb_2.10.2-4_amd64.udeb
 329110be0d3a6d3918ee8d6e2b1d717a518e26fc 2777 eglibc_2.10.2-4.dsc
 e5c08982eec8f1be821f1c6a943c8a8a92bad1f3 788632 eglibc_2.10.2-4.diff.gz
Checksums-Sha256: 
 769adaf34ded2b841cbe1c1ffe23cdf6a1dfc97b312a919f7218a232bdcbd2ec 1816194 glibc-doc_2.10.2-4_all.deb
 91da64e65aa4ec88a936fb14ff9eae55d2e8c51461e63d0e552ee8bf302f9a5a 10932664 eglibc-source_2.10.2-4_all.deb
 bbc08198bda16d2585800c588b19294645b0aa3c464155bcd84c89ebc1828d56 4751354 locales_2.10.2-4_all.deb
 8fa4922bdf4ed3eb2f3cb895bd6cc46be11a1e9e4c23fa632a7faf3147325b10 4247006 libc6_2.10.2-4_amd64.deb
 49a1b52d9a41f02ca5ade876f483dd4f4918ee6e9cb3b385c2d10563903fbecf 2547860 libc6-dev_2.10.2-4_amd64.deb
 8c06820674fceb76d8c04b19ad4001fc194780144766bf2d9700455c8f21dc8a 1994288 libc6-prof_2.10.2-4_amd64.deb
 72cd83efb65d3f4f6e1e005ffb646fd0604aad86aa8ca2a3037d8b081fb6c313 1517960 libc6-pic_2.10.2-4_amd64.deb
 fdaf6b7ef44660dac795bd35bbc41a4b7676580f1038959112d7a5c113abd4c9 728798 libc-bin_2.10.2-4_amd64.deb
 3a70479ba2655e334ad6c62b9f0a9bf41ac7ef47163c84ec1ae9d7640f7fc871 201832 libc-dev-bin_2.10.2-4_amd64.deb
 7923b0cea8d16d0d813565b857c0cc24fe3b00fd6ed9ada17ce9f2620e0de15e 3064406 locales-all_2.10.2-4_amd64.deb
 9fb99ab84133b7839bf650ff7144a768f74625c0e4dec7779487ae3b9fe5fbf9 3793578 libc6-i386_2.10.2-4_amd64.deb
 199e775a6107c6c8a76030d5766abf97198ff1891bd6a471a278f906e8a137a9 1499146 libc6-dev-i386_2.10.2-4_amd64.deb
 e4cdca881073711cacb57404e267f72e8a2cab9657c233dcfa23d87a5a589c64 190438 nscd_2.10.2-4_amd64.deb
 b1c976df0c3467cc84691de677fb362a90e906aa253b302e848afefa835e10db 10277258 libc6-dbg_2.10.2-4_amd64.deb
 aa48558d19fd89254b8a2772bf51e62c247a70b516a6e6f7dc467707d0914411 1133922 libc6-udeb_2.10.2-4_amd64.udeb
 272aaa35025c53c213f90269b81e911d047ce0c3cba7e9787611814c4fdd84fa 11232 libnss-dns-udeb_2.10.2-4_amd64.udeb
 c4bb081611fed737d143a37525d40a44d565d11cec2171b522555de5a0addece 19498 libnss-files-udeb_2.10.2-4_amd64.udeb
 ee28950661e63278ed663950f2c6672bd8a2772e1597bb464627033c93830088 2777 eglibc_2.10.2-4.dsc
 d7d93cc8cd621861e54292593a6f9d62df080c7402ce7c6b6205802414b94d7b 788632 eglibc_2.10.2-4.diff.gz
Files: 
 7ccab70fbfe3769f76acb6862c9f1af3 1816194 doc optional glibc-doc_2.10.2-4_all.deb
 b77eb297f334ea1e011d6e7a901a8ed1 10932664 devel optional eglibc-source_2.10.2-4_all.deb
 23c59ae986b24083b0bf08cd8cb592bf 4751354 libs standard locales_2.10.2-4_all.deb
 90e5cdbdf138bcbf095e86f9b5111c5b 4247006 libs required libc6_2.10.2-4_amd64.deb
 3875eee2c22dfb2b729c7b629863a8db 2547860 libdevel optional libc6-dev_2.10.2-4_amd64.deb
 d3783576a307ff80c6d24bc89014073a 1994288 libdevel extra libc6-prof_2.10.2-4_amd64.deb
 56e48d9f82fe9e70ffdc63d0f56cbd73 1517960 libdevel optional libc6-pic_2.10.2-4_amd64.deb
 d34441e8dc14442a6af404d89de1e07a 728798 libs required libc-bin_2.10.2-4_amd64.deb
 caba48ec13c264f59ec59a34bc0b9fc5 201832 libdevel optional libc-dev-bin_2.10.2-4_amd64.deb
 1c37b9a6f2554a1c8589a062eca8a568 3064406 libs extra locales-all_2.10.2-4_amd64.deb
 7cc0c563857f581abbcf414954c9ceae 3793578 libs optional libc6-i386_2.10.2-4_amd64.deb
 fb97b8723301c27acc5de0033cf2166e 1499146 libdevel optional libc6-dev-i386_2.10.2-4_amd64.deb
 5ea77267d56dfdff809ef16f0c41a1ea 190438 admin optional nscd_2.10.2-4_amd64.deb
 57ae480e1192f5a1fc70c392ddeae7c9 10277258 debug extra libc6-dbg_2.10.2-4_amd64.deb
 3a8e7121da5b8ec1d60e0a14da82d695 1133922 debian-installer extra libc6-udeb_2.10.2-4_amd64.udeb
 759be2f12f50c9aab8f7985fce2677c8 11232 debian-installer extra libnss-dns-udeb_2.10.2-4_amd64.udeb
 67d53cdf053333f5be4cc82633c893b4 19498 debian-installer extra libnss-files-udeb_2.10.2-4_amd64.udeb
 ef23b3332cf867ae7a5e8a62534b17f7 2777 libs required eglibc_2.10.2-4.dsc
 04f4cc2fd73845bd628b3b770fe494c8 788632 libs required eglibc_2.10.2-4.diff.gz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iD8DBQFLRR+Ww3ao2vG823MRAh5DAKCBKHY8KHHzl1B9/RJ+nkNQ0LQmxQCePfMg
IcQrk0JgXFJl5bx0Mm+2YJE=
=JTTU
-----END PGP SIGNATURE-----



--- End Message ---

Reply to: