--- Begin Message ---
- To: Debian BTS <submit@bugs.debian.org>
- Subject: libc-bin: postinst makes a working NIS system not to work anymore at every point release
- From: Santiago Vila <sanvila@unex.es>
- Date: Thu, 28 Oct 2021 15:18:11 +0200 (CEST)
- Message-id: <alpine.DEB.2.21.2110281453350.8540@tulipan.isla-invisible.es>
Package: libc-bin
Version: 2.31-13+deb11u2
Severity: serious
Tags: patch
Dear libc-bin maintainers:
In Debian 11, the default /etc/nsswitch.conf file has now "files"
instead of the traditional "compat".
So far, so good. This is documented in Release Notes, and those who
need NIS may change /etc/nsswitch.conf if they need it.
But there is a problem: The postinst updates the file every time
it is detected that it matches *any* old default (via md5sum).
This is a functionality which was part of base-files in the past and
it was useful when there was a default /etc/nsswitch.conf which
would work for almost everybody. But this is not the case anymore,
because the default file is not good for those using NIS.
As a result, not only upgrading a Debian 10 system to Debian 11 makes
NIS to require an adjustment (i.e. putting compat again after postinst
modifies the file), but also each and every upgrade from Debian 11
point x to Debian 11 point x+1.
Patch attached. I hope this may be fixed for Debian 11.2.
Thanks.
--- a/debian/debhelper.in/libc-bin.postinst
+++ b/debian/debhelper.in/libc-bin.postinst
@@ -43,9 +43,10 @@ if [ "$1" = "configure" ] && [ "$2" = "" ] ; then
install_from_default /usr/share/libc-bin/nsswitch.conf /etc/nsswitch.conf
fi
-if [ "$1" = "configure" ] && [ "$2" != "" ]; then
- update_to_current_default /usr/share/libc-bin/nsswitch.conf /etc/nsswitch.conf
-fi
+# Not ok to do this on a Debian 11 system anymore.
+# if [ "$1" = "configure" ] && [ "$2" != "" ]; then
+# update_to_current_default /usr/share/libc-bin/nsswitch.conf /etc/nsswitch.conf
+# fi
if [ "$1" = "triggered" ] || [ "$1" = "configure" ]; then
ldconfig || ldconfig --verbose
--- End Message ---
--- Begin Message ---
Source: glibc
Source-Version: 2.32-5
Done: Aurelien Jarno <aurel32@debian.org>
We believe that the bug you reported is fixed in the latest version of
glibc, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 998008@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Aurelien Jarno <aurel32@debian.org> (supplier of updated glibc package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 05 Dec 2021 16:46:21 +0100
Source: glibc
Architecture: source
Version: 2.32-5
Distribution: unstable
Urgency: medium
Maintainer: GNU Libc Maintainers <debian-glibc@lists.debian.org>
Changed-By: Aurelien Jarno <aurel32@debian.org>
Closes: 993772 997912 998008 998622
Changes:
glibc (2.32-5) unstable; urgency=medium
.
[ Aurelien Jarno ]
* debian/control.in/libc: add a breaks against tinydns (<< 1:1.05-14).
Closes: #997912.
* debian/debhelper.in/libc-bin.postinst: stop replacing older versions from
/etc/nsswitch.conf. Closes: #998008.
* debian/patches/git-updates.diff: update from upstream stable branch:
- Fix bad conversion from ISO-2022-JP-3 with iconv (CVE-2021-43396).
Closes: #998622.
* debian/control.in/main: rename libselinux-dev build-dependency into
libselinux1-dev.
* debian/patches/any/submitted-localedef-check-magic.patch: new patch to
display a proper error message for bad locale-archive files. Closes:
#993772.
Checksums-Sha1:
560b798973f581043f04a1d6366e67b5b8d81700 9618 glibc_2.32-5.dsc
a0eb9c0193df6da9bd7d4a7047af3e9d56a14a1a 843876 glibc_2.32-5.debian.tar.xz
0402c1ae60fd84928ceb74fbedcbdcec3e047a65 8816 glibc_2.32-5_source.buildinfo
Checksums-Sha256:
1689141a43c6090a5e2fd200ec8a5fb36f5478dac700bd444b6cd96cb9922801 9618 glibc_2.32-5.dsc
660a9364e12c2653087cb0fc7d3b3aacfd8dfc7c0c09ea0ec0cb6f43526b9e6d 843876 glibc_2.32-5.debian.tar.xz
45a7be05a5c0de43bcd86f260364272d4bae2d584bda9eebb0facdaa874236c2 8816 glibc_2.32-5_source.buildinfo
Files:
041666cf7b37ad3cef28959999863701 9618 libs required glibc_2.32-5.dsc
774d0260e37031e7bb81ddf3f6f3da50 843876 libs required glibc_2.32-5.debian.tar.xz
a7acc8d24d476b8c2b3436876fe99094 8816 libs required glibc_2.32-5_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=TfvJ
-----END PGP SIGNATURE-----
--- End Message ---