--- Begin Message ---
Package: libnss-ldap
Version: 265-1
Severity: normal
Dear Maintainer,
* What led up to the situation?
* I upgraded my system using apt-get.
* What exactly did you do (or not do) that was effective (or
ineffective)?
After upgrading to nss-ldap-265-1, a substantial number of critical
system binaries segfault immediately, including:
* logins
* zsh
* bash
* sudo
* ssh
* resolvconf
* What was the outcome of this action?
* My system was placed into a state that was impossible to
adminstrate/fix, as I could not login as root, nor could I sudo to
root. Recovery was only possible by booting to a USB drive, and
recovering the system from there. Many login shells would not work
(bash, zsh).
* What outcome did you expect instead?
* A clean upgrade, with overall system functionality intact - maybe a
few bugs (perhaps even serious), but not an entirely unusable system.
After rolling back to a different BTRFS snapshot, I was able to confirm
this happens when libnss-ldap is upgraded to 265-1.:
* I rolled back to a pre-upgrade state
* Made a start snapshot
* Mounted the start snapshot
* mounted (bind) /dev, /dev/pts, /proc, /sys into the chroot.
* chrooted to the start snapshot
* apt-get install libnss-ldap
At this point, sudo, zsh, bash, and other programs segfault
immediately.
I then held libnss-ldap to version 264-2.5, and ran an apt-get upgrade,
which was uneventful. I then proceeded to do a snapshot/chroot test cycle,
and was able to confirm again that upgrading libnss-ldap (and only
libnss-ldap) would reproduce this issue for me.
-- System Information:
Debian Release: jessie/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.11-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages libnss-ldap depends on:
ii debconf [debconf-2.0] 1.5.51
ii libc6 2.17-93
ii libcomerr2 1.42.8-1
ii libgssapi-krb5-2 1.11.3+dfsg-3
ii libkrb5-3 1.11.3+dfsg-3
ii libldap-2.4-2 2.4.31-1+nmu2+b1
ii libsasl2-2 2.1.25.dfsg1-17
ii multiarch-support 2.17-93
Versions of packages libnss-ldap recommends:
ii libpam-ldap 184-8.6
ii nscd 2.17-93
libnss-ldap suggests no packages.
-- debconf information:
* libnss-ldap/confperm: false
* shared/ldapns/ldap-server: ldap://pilot.pariahzero.net/
* libnss-ldap/rootbinddn: cn=admin,dc=pilot,dc=pariahzero,dc=net
* shared/ldapns/ldap_version: 3
libnss-ldap/override: true
* libnss-ldap/dbrootlogin: true
libnss-ldap/binddn: cn=proxyuser,dc=example,dc=net
* libnss-ldap/nsswitch:
* shared/ldapns/base-dn: dc=pilot,dc=pariahzero,dc=net
* libnss-ldap/dblogin: false
--- End Message ---
--- Begin Message ---
Source: libnss-ldap
Source-Version: 265-2
We believe that the bug you reported is fixed in the latest version of
libnss-ldap, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 727177@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Arthur de Jong <adejong@debian.org> (supplier of updated libnss-ldap package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 26 Oct 2013 22:08:10 +0200
Source: libnss-ldap
Binary: libnss-ldap
Architecture: source i386
Version: 265-2
Distribution: unstable
Urgency: low
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Arthur de Jong <adejong@debian.org>
Description:
libnss-ldap - NSS module for using LDAP as a naming service
Closes: 727177
Changes:
libnss-ldap (265-2) unstable; urgency=low
.
* QA upload.
* Set package section to admin, following override file.
* Add glibc-2.16.patch to handle removal of __libc_lock_lock and similar
symbols from libc (Closes: #727177).
Checksums-Sha1:
5704c040da0148f895138fc81d340107b9d33ca0 1346 libnss-ldap_265-2.dsc
d2274dd1827113d67b6a7e83fec670038ec3ba90 64241 libnss-ldap_265-2.debian.tar.gz
f53863395cb6c314554321c04ebfc86141c72f4e 113162 libnss-ldap_265-2_i386.deb
Checksums-Sha256:
81ea009232b1ec0ad36927a76cef7396b4cf911b51ebda6429840163fb9e3be3 1346 libnss-ldap_265-2.dsc
ecf8595e92d1739ea3bdcf1c1d2c9aa108152fef042b085b5bccc16428155c91 64241 libnss-ldap_265-2.debian.tar.gz
0c7c73e2f522f1ccd167bc1ed33866be92d067f3a344624a05f6bde2a3f2f487 113162 libnss-ldap_265-2_i386.deb
Files:
ae0b3960dc6acc424fa07eb9c4941ca6 1346 admin extra libnss-ldap_265-2.dsc
0aaac618fb71b8c7ac60c0409f4b0ec0 64241 admin extra libnss-ldap_265-2.debian.tar.gz
0ec266e50ec7e4d140cf4b86d5c9b2d2 113162 admin extra libnss-ldap_265-2_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
iEYEARECAAYFAlJsIfoACgkQVYan35+NCKdfRgCgha6Bz31dExkv2dKFMT1rzHUI
oEoAoKqeR1/fSGBr0V6mIp8UDopjodG6
=hC6d
-----END PGP SIGNATURE-----
--- End Message ---