Comment 5 for bug 531976

Revision history for this message
Stephane Chazelas (stephane-chazelas) wrote : Re: Embargoed security issue in libnss_db

2010-03-04 18:52:51 -0800, Ulrich Drepper:
> That code isn't maintained for a decade or more. Nobody should have
> used that code since then and there certainly will be no code changes to
> obsolete, actively removed code.
[...]

Hi Ulrich,

Well,

http://sourceware.org/git/?p=glibc.git;a=blob;f=nss/nsswitch.conf;hb=HEAD

has "db" for all the nss databases as first choice, ubuntu's and
debian's for a few databases by default (BTW, debian unstable is
also affected)

and

http://packages.debian.org/changelogs/pool/main/libn/libnss-db/libnss-db_2.2.3pre1-3.1/changelog

looks somehow maintained to me.

I can see no mention of nss-db being obsoleted in the glibc
README.

What would be the official alternative then?

regards,
Stephane