Activity log for bug #423252

Date Who What changed Old value New value Message
2009-09-02 15:51:57 Matt Kassawara bug added bug
2009-09-12 13:25:43 Eric Carvalho glibc (Ubuntu): status New Confirmed
2009-09-19 01:31:38 Ryan Beasley nominated for series Ubuntu Karmic
2009-10-23 19:08:29 John Affleck bug watch added http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=545414
2009-11-17 11:23:45 Rune Philosof summary NSS using LDAP on Karmic (alpha 4) breaks 'su' and 'sudo' NSS using LDAP on Karmic breaks 'su' and 'sudo'
2009-12-10 01:00:51 Philipp Kaluza bug task added sudo (Debian)
2009-12-10 01:01:23 Philipp Kaluza bug task added sudo (Kairos Linux)
2009-12-10 12:42:52 Bug Watch Updater sudo (Debian): status Unknown Confirmed
2010-02-09 18:30:37 Andrew Pollock tags glucid
2010-03-05 05:46:39 Christoph Cullmann nominated for series Ubuntu Lucid
2010-03-24 23:51:24 Kees Cook affects glibc (Ubuntu) eglibc (Ubuntu)
2010-03-24 23:51:55 Kees Cook bug task added libnss-ldap (Ubuntu)
2010-03-24 23:52:20 Kees Cook bug task added eglibc (Ubuntu Lucid)
2010-03-24 23:52:20 Kees Cook bug task added libnss-ldap (Ubuntu Lucid)
2010-03-24 23:52:34 Kees Cook bug task added eglibc (Ubuntu Karmic)
2010-03-24 23:52:34 Kees Cook bug task added libnss-ldap (Ubuntu Karmic)
2010-03-24 23:54:09 Kees Cook eglibc (Ubuntu Karmic): status New Invalid
2010-03-24 23:54:17 Kees Cook eglibc (Ubuntu Lucid): status Confirmed Invalid
2010-03-24 23:54:30 Kees Cook eglibc (Ubuntu Karmic): status Invalid New
2010-03-24 23:54:38 Kees Cook affects eglibc (Ubuntu Karmic) sudo (Ubuntu Karmic)
2010-03-24 23:56:07 Kees Cook sudo (Ubuntu Lucid): status Invalid New
2010-03-24 23:56:33 Kees Cook bug task added eglibc (Ubuntu)
2010-03-30 14:08:11 Mathias Gug sudo (Ubuntu Lucid): importance Undecided Medium
2010-03-30 14:08:45 Mathias Gug libnss-ldap (Ubuntu Lucid): importance Undecided Medium
2010-04-04 23:07:12 Andreas Sandberg attachment added getpwnam_xid_test.c http://launchpadlibrarian.net/43116436/getpwnam_xid_test.c
2010-04-05 00:46:06 Philipp Kaluza sudo (Kairos Linux): importance Undecided High
2010-04-05 00:46:06 Philipp Kaluza sudo (Kairos Linux): status New Confirmed
2010-04-05 00:46:06 Philipp Kaluza sudo (Kairos Linux): assignee Philipp Kaluza (pixelpapst)
2010-04-14 22:01:38 David Smith removed subscriber Goobuntu Team
2010-04-16 22:27:12 Andreas Sandberg bug task added libgcrypt11 (Ubuntu)
2010-04-21 10:07:49 Thierry Carrez sudo (Ubuntu Lucid): assignee Mathias Gug (mathiaz)
2010-04-27 01:57:45 Mathias Gug eglibc (Ubuntu Karmic): status New Invalid
2010-04-27 01:58:07 Mathias Gug eglibc (Ubuntu Lucid): status New Invalid
2010-04-27 01:58:33 Mathias Gug libnss-ldap (Ubuntu Karmic): status New Invalid
2010-04-27 01:59:06 Mathias Gug libnss-ldap (Ubuntu Lucid): status New Invalid
2010-04-27 01:59:33 Mathias Gug sudo (Ubuntu Karmic): status New Invalid
2010-04-27 02:00:04 Mathias Gug sudo (Ubuntu Lucid): status New Invalid
2010-04-27 02:00:45 Mathias Gug libgcrypt11 (Ubuntu Karmic): importance Undecided Medium
2010-04-27 02:00:45 Mathias Gug libgcrypt11 (Ubuntu Karmic): status New Triaged
2010-04-27 02:01:12 Mathias Gug libgcrypt11 (Ubuntu Lucid): importance Undecided Medium
2010-04-27 02:01:12 Mathias Gug libgcrypt11 (Ubuntu Lucid): status New Triaged
2010-04-27 02:08:14 Mathias Gug bug task added ubuntu-release-notes
2010-04-27 10:41:24 Howard Chu attachment added potential libgcrypt fix http://launchpadlibrarian.net/45701569/dif1.txt
2010-04-27 10:46:19 Howard Chu attachment added potential gnutls fix http://launchpadlibrarian.net/45701794/dif2.txt
2010-04-27 14:24:34 raraki-adpt removed subscriber raraki-adpt
2010-04-27 17:26:18 Mathias Gug summary NSS using LDAP on Karmic breaks 'su' and 'sudo' NSS using LDAP+SSL breaks setuid applications like su and sudo
2010-04-27 17:32:22 Mathias Gug description On Karmic (alpha 4 plus updates), changing the nsswitch.conf 'passwd' field to anything with 'ldap' as the first item breaks the ability to become root using 'su' and 'sudo' as anyone but root. Default nsswitch.conf: passwd: compat group: compat shadow: compat matt@box:~$ sudo uname -a [sudo] password for matt: Linux box 2.6.31-9-server #29-Ubuntu SMP Sun Aug 30 18:37:42 UTC 2009 x86_64 GNU/Linux matt@box:~$ su - Password: root@box:~# Modified nsswitch.conf with 'ldap' before 'compat': passwd: ldap compat group: ldap compat shadow: ldap compat matt@box:~$ sudo uname -a sudo: setreuid(ROOT_UID, user_uid): Operation not permitted matt@box:~$ su - Password: setgid: Operation not permitted Modified nsswitch.conf with 'ldap' after 'compat': passwd: compat ldap group: compat ldap shadow: compat ldap matt@box:~$ sudo uname -a [sudo] password for matt: Linux box 2.6.31-9-server #29-Ubuntu SMP Sun Aug 30 18:37:42 UTC 2009 x86_64 GNU/Linux matt@box:~$ su - Password: root@box:~# The same arrangements in nsswitch.conf work as expected in Jaunty and earlier releases. On Karmic (alpha 4 plus updates), changing the nsswitch.conf 'passwd' field to anything with 'ldap' as the first item breaks the ability to become root using 'su' and 'sudo' as anyone but root. Default nsswitch.conf: passwd: compat group: compat shadow: compat matt@box:~$ sudo uname -a [sudo] password for matt: Linux box 2.6.31-9-server #29-Ubuntu SMP Sun Aug 30 18:37:42 UTC 2009 x86_64 GNU/Linux matt@box:~$ su - Password: root@box:~# Modified nsswitch.conf with 'ldap' before 'compat': passwd: ldap compat group: ldap compat shadow: ldap compat matt@box:~$ sudo uname -a sudo: setreuid(ROOT_UID, user_uid): Operation not permitted matt@box:~$ su - Password: setgid: Operation not permitted Modified nsswitch.conf with 'ldap' after 'compat': passwd: compat ldap group: compat ldap shadow: compat ldap matt@box:~$ sudo uname -a [sudo] password for matt: Linux box 2.6.31-9-server #29-Ubuntu SMP Sun Aug 30 18:37:42 UTC 2009 x86_64 GNU/Linux matt@box:~$ su - Password: root@box:~# The same arrangements in nsswitch.conf work as expected in Jaunty and earlier releases. Lucid Release Note: == NSS via LDAP+SSL breaks setuid applications like sudo == Upgrading systems configured to use ldap over ssl as the first service in the nss stack (in nsswitch.conf) leads to a broken nss resolution for setuid applications after the upgrade to Lucid (for example sudo would stop working). There isn't any simple workaround for now. One option is to switch to libnss-ldapd in place of libnss-ldap before the upgrade. Another one consists in using nscd before the upgrade.
2010-04-27 17:34:47 Mathias Gug ubuntu-release-notes: status New Confirmed
2010-04-27 18:55:42 Miguel Di Ciurcio Filho removed subscriber Miguel Di Ciurcio Filho
2010-04-28 18:19:20 Brian Murray tags glucid glucid regression-release
2010-04-28 18:22:08 Brian Murray libgcrypt11 (Ubuntu Lucid): milestone lucid-updates
2010-04-28 21:16:17 Loïc Minier ubuntu-release-notes: status Confirmed Fix Released
2010-04-28 23:59:15 Mathias Gug ubuntu-release-notes: status Fix Released Confirmed
2010-04-29 08:50:45 Loïc Minier ubuntu-release-notes: status Confirmed Fix Released
2010-04-29 12:16:28 Rune Philosof ubuntu-release-notes: status Fix Released Confirmed
2010-04-29 12:41:56 Steve Langasek ubuntu-release-notes: status Confirmed Fix Released
2010-04-29 12:46:20 Ansgar Burchardt bug watch added http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566351
2010-04-29 12:46:20 Ansgar Burchardt bug task added libgcrypt11 (Debian)
2010-04-29 13:49:48 Bug Watch Updater libgcrypt11 (Debian): status Unknown Confirmed
2010-05-01 16:31:00 Brian Murray tags glucid regression-release glucid patch regression-release
2010-05-03 08:44:59 Vincent Batoufflet removed subscriber Vincent Batoufflet
2010-05-06 09:57:49 aurelieng nominated for series Ubuntu Maverick
2010-07-22 08:41:34 James Andrewartha bug added subscriber James Andrewartha
2010-08-28 09:14:00 Arthur de Jong bug added subscriber Arthur de Jong
2010-09-13 16:39:07 skulda bug added subscriber skulda
2010-09-19 18:10:43 Antonin Stefanutti bug added subscriber Antonin
2010-09-23 03:52:12 Nathan Stratton Treadway summary NSS using LDAP+SSL breaks setuid applications like su and sudo NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd
2010-09-24 20:24:34 skulda removed subscriber skulda
2010-10-03 19:52:19 Id2ndR bug added subscriber Id2ndR
2010-10-06 22:50:42 Stefan bug added subscriber Stefan
2010-10-10 18:49:47 totya bug added subscriber totya
2010-10-19 21:12:55 Andreas Ntaflos bug added subscriber Andreas Ntaflos
2010-10-23 03:41:03 Michael Lowell Roberts bug added subscriber Michael Lowell Roberts
2010-11-04 14:29:26 John Pybus bug added subscriber John Pybus
2010-12-30 23:53:33 Howard Chu bug watch added https://bugs.g10code.com/gnupg/issue1181
2011-01-20 07:27:59 Ballock bug added subscriber Tieto
2011-03-11 22:14:15 Simon Déziel bug added subscriber Simon Déziel
2011-03-15 17:25:42 Andreas bug added subscriber Andreas
2011-03-17 18:49:23 Peter Matulis bug added subscriber Peter Matulis
2011-03-28 06:58:27 Felix Schuster removed subscriber Felix Schuster
2011-03-28 16:06:31 Robbie Williamson bug task added eglibc (Ubuntu Maverick)
2011-03-28 16:06:31 Robbie Williamson bug task added libgcrypt11 (Ubuntu Maverick)
2011-03-28 16:06:31 Robbie Williamson bug task added libnss-ldap (Ubuntu Maverick)
2011-03-28 16:06:31 Robbie Williamson bug task added sudo (Ubuntu Maverick)
2011-03-28 16:06:52 Robbie Williamson eglibc (Ubuntu Maverick): status New Invalid
2011-03-28 16:07:20 Robbie Williamson libgcrypt11 (Ubuntu Maverick): importance Undecided Medium
2011-03-28 16:07:20 Robbie Williamson libgcrypt11 (Ubuntu Maverick): status New Triaged
2011-03-28 16:07:20 Robbie Williamson libgcrypt11 (Ubuntu Maverick): milestone maverick-updates
2011-03-28 16:08:09 Robbie Williamson sudo (Ubuntu Maverick): status New Invalid
2011-03-28 16:09:01 Robbie Williamson libgcrypt11 (Ubuntu): status Triaged Confirmed
2011-03-28 16:10:26 Robbie Williamson libgcrypt11 (Ubuntu Karmic): status Triaged Won't Fix
2011-03-28 16:10:51 Robbie Williamson libgcrypt11 (Ubuntu Lucid): status Triaged Confirmed
2011-03-28 16:11:23 Robbie Williamson libgcrypt11 (Ubuntu Maverick): status Triaged Confirmed
2011-03-28 16:43:33 Thilo Mende removed subscriber Thilo Mende
2011-03-28 16:55:24 Robbie Williamson libgcrypt11 (Ubuntu Maverick): assignee Canonical Foundations Team (canonical-foundations)
2011-03-28 16:55:36 Robbie Williamson libgcrypt11 (Ubuntu Lucid): assignee Canonical Foundations Team (canonical-foundations)
2011-04-26 15:44:01 Kevin Bullock bug added subscriber Kevin Bullock
2011-05-03 11:17:39 Stéphane Bidoul (Acsone) bug added subscriber Stéphane Bidoul
2011-07-08 12:17:42 James Craig bug added subscriber James Craig
2011-07-20 15:09:17 Tromer bug added subscriber Tromer
2011-07-22 11:44:59 Launchpad Janitor libnss-ldap (Ubuntu Maverick): status New Confirmed
2011-08-11 12:10:54 Dan Eicher bug added subscriber Dan Eicher
2011-08-23 16:57:01 langeman bug added subscriber langeman
2011-09-14 21:53:26 Scott Duckworth bug added subscriber Scott Duckworth
2011-10-04 10:49:11 Boian Mihailov bug added subscriber Boian Mihailov
2011-10-04 15:15:52 Tom removed subscriber Tom
2011-11-18 21:57:23 Wart bug added subscriber Wart
2012-01-24 18:14:01 nutznboltz bug added subscriber nutznboltz
2012-01-24 18:24:23 Launchpad Janitor branch linked lp:~nutznboltz/ubuntu/precise/libgcrypt11/fix-lp423252
2012-01-24 22:46:22 nutznboltz tags glucid patch regression-release glucid patch precise regression-release
2012-01-24 23:46:43 Nicolas Brousse removed subscriber Nicolas Brousse
2012-02-03 22:00:37 nutznboltz removed subscriber nutznboltz
2012-02-05 02:06:51 nutznboltz marked as duplicate 926350
2012-02-05 02:37:03 Steve Langasek removed duplicate marker 926350
2012-03-11 23:52:28 Alex Vandiver bug added subscriber Alex Vandiver
2012-03-12 13:53:00 Marlon Dutra removed subscriber Marlon Dutra
2012-03-19 13:51:50 darqchild bug added subscriber darqchild
2012-04-07 08:48:44 Schwabix removed subscriber Dr.med.Zoidberg
2012-04-17 16:32:07 BrandonTomlinson bug added subscriber BrandonTomlinson
2012-04-24 14:53:21 Ool bug added subscriber Ool
2012-04-24 16:47:22 Ken Bowley bug added subscriber Ken Bowley
2012-04-24 21:13:48 David Wolfe bug added subscriber David Wolfe
2012-04-25 08:19:17 Thorsten Glaser bug task added openldap (Ubuntu)
2012-04-25 08:19:41 Thorsten Glaser bug watch added http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=658739
2012-04-25 08:19:41 Thorsten Glaser bug task added gnutls26 (Debian)
2012-04-25 08:20:30 Thorsten Glaser bug task added openldap (Debian)
2012-04-25 14:13:24 Olaf Lessenich bug added subscriber Olaf Lessenich
2012-04-25 14:53:25 Olaf Lessenich bug added subscriber Olaf Lessenich
2012-04-25 14:53:42 Olaf Lessenich removed subscriber Olaf Lessenich
2012-04-25 16:18:24 Steve Langasek bug task deleted openldap (Ubuntu)
2012-04-25 16:20:17 Steve Langasek bug task deleted openldap (Ubuntu Karmic)
2012-04-25 16:21:24 Steve Langasek bug task deleted openldap (Ubuntu Lucid)
2012-04-25 16:38:56 Steve Langasek bug task deleted openldap (Ubuntu Maverick)
2012-04-27 13:57:58 Bug Watch Updater gnutls26 (Debian): status Unknown New
2012-04-30 16:28:26 Antonin Stefanutti removed subscriber Antonin Stefanutti
2012-05-01 17:17:59 Craig White bug added subscriber Craig White
2012-05-08 22:06:17 Jordan Evans bug added subscriber Jordan Evans
2012-05-14 12:52:13 mcguire bug added subscriber mcguire
2012-05-15 17:24:50 Adam Stokes nominated for series Ubuntu Natty
2012-05-15 17:24:50 Adam Stokes nominated for series Ubuntu Oneiric
2012-05-15 17:24:50 Adam Stokes nominated for series Ubuntu Precise
2012-05-15 17:38:59 Adam Stokes description On Karmic (alpha 4 plus updates), changing the nsswitch.conf 'passwd' field to anything with 'ldap' as the first item breaks the ability to become root using 'su' and 'sudo' as anyone but root. Default nsswitch.conf: passwd: compat group: compat shadow: compat matt@box:~$ sudo uname -a [sudo] password for matt: Linux box 2.6.31-9-server #29-Ubuntu SMP Sun Aug 30 18:37:42 UTC 2009 x86_64 GNU/Linux matt@box:~$ su - Password: root@box:~# Modified nsswitch.conf with 'ldap' before 'compat': passwd: ldap compat group: ldap compat shadow: ldap compat matt@box:~$ sudo uname -a sudo: setreuid(ROOT_UID, user_uid): Operation not permitted matt@box:~$ su - Password: setgid: Operation not permitted Modified nsswitch.conf with 'ldap' after 'compat': passwd: compat ldap group: compat ldap shadow: compat ldap matt@box:~$ sudo uname -a [sudo] password for matt: Linux box 2.6.31-9-server #29-Ubuntu SMP Sun Aug 30 18:37:42 UTC 2009 x86_64 GNU/Linux matt@box:~$ su - Password: root@box:~# The same arrangements in nsswitch.conf work as expected in Jaunty and earlier releases. Lucid Release Note: == NSS via LDAP+SSL breaks setuid applications like sudo == Upgrading systems configured to use ldap over ssl as the first service in the nss stack (in nsswitch.conf) leads to a broken nss resolution for setuid applications after the upgrade to Lucid (for example sudo would stop working). There isn't any simple workaround for now. One option is to switch to libnss-ldapd in place of libnss-ldap before the upgrade. Another one consists in using nscd before the upgrade. SRU Request: [Impact] As heavily outlined in the amount of comments in this bug the impact is detrimental to both community and enterprise users alike. [Development Fix] Howard Chu released a patch in #73 which was later confirmed in #106 & #108 as a resolution. The patch has since then made its way into the latest development tree. [Stable Fix] Patch from #73 can be applied cleanly to Lucid and new distributions. [Test Case] On Karmic (alpha 4 plus updates), changing the nsswitch.conf 'passwd' field to anything with 'ldap' as the first item breaks the ability to become root using 'su' and 'sudo' as anyone but root. Default nsswitch.conf: passwd: compat group: compat shadow: compat matt@box:~$ sudo uname -a [sudo] password for matt: Linux box 2.6.31-9-server #29-Ubuntu SMP Sun Aug 30 18:37:42 UTC 2009 x86_64 GNU/Linux matt@box:~$ su - Password: root@box:~# Modified nsswitch.conf with 'ldap' before 'compat': passwd: ldap compat group: ldap compat shadow: ldap compat matt@box:~$ sudo uname -a sudo: setreuid(ROOT_UID, user_uid): Operation not permitted matt@box:~$ su - Password: setgid: Operation not permitted Modified nsswitch.conf with 'ldap' after 'compat': passwd: compat ldap group: compat ldap shadow: compat ldap matt@box:~$ sudo uname -a [sudo] password for matt: Linux box 2.6.31-9-server #29-Ubuntu SMP Sun Aug 30 18:37:42 UTC 2009 x86_64 GNU/Linux matt@box:~$ su - Password: root@box:~# The same arrangements in nsswitch.conf work as expected in Jaunty and earlier releases. [Regression Potential] This should be minimal as the code change only addresses the duplicating global_init during thread callbacks. Lucid Release Note: == NSS via LDAP+SSL breaks setuid applications like sudo == Upgrading systems configured to use ldap over ssl as the first service in the nss stack (in nsswitch.conf) leads to a broken nss resolution for setuid applications after the upgrade to Lucid (for example sudo would stop working). There isn't any simple workaround for now. One option is to switch to libnss-ldapd in place of libnss-ldap before the upgrade. Another one consists in using nscd before the upgrade.
2012-05-15 17:39:36 Adam Stokes bug added subscriber Ubuntu Stable Release Updates Team
2012-05-15 17:50:35 Adam Stokes removed subscriber Ubuntu Stable Release Updates Team
2012-05-15 17:50:56 Adam Stokes description SRU Request: [Impact] As heavily outlined in the amount of comments in this bug the impact is detrimental to both community and enterprise users alike. [Development Fix] Howard Chu released a patch in #73 which was later confirmed in #106 & #108 as a resolution. The patch has since then made its way into the latest development tree. [Stable Fix] Patch from #73 can be applied cleanly to Lucid and new distributions. [Test Case] On Karmic (alpha 4 plus updates), changing the nsswitch.conf 'passwd' field to anything with 'ldap' as the first item breaks the ability to become root using 'su' and 'sudo' as anyone but root. Default nsswitch.conf: passwd: compat group: compat shadow: compat matt@box:~$ sudo uname -a [sudo] password for matt: Linux box 2.6.31-9-server #29-Ubuntu SMP Sun Aug 30 18:37:42 UTC 2009 x86_64 GNU/Linux matt@box:~$ su - Password: root@box:~# Modified nsswitch.conf with 'ldap' before 'compat': passwd: ldap compat group: ldap compat shadow: ldap compat matt@box:~$ sudo uname -a sudo: setreuid(ROOT_UID, user_uid): Operation not permitted matt@box:~$ su - Password: setgid: Operation not permitted Modified nsswitch.conf with 'ldap' after 'compat': passwd: compat ldap group: compat ldap shadow: compat ldap matt@box:~$ sudo uname -a [sudo] password for matt: Linux box 2.6.31-9-server #29-Ubuntu SMP Sun Aug 30 18:37:42 UTC 2009 x86_64 GNU/Linux matt@box:~$ su - Password: root@box:~# The same arrangements in nsswitch.conf work as expected in Jaunty and earlier releases. [Regression Potential] This should be minimal as the code change only addresses the duplicating global_init during thread callbacks. Lucid Release Note: == NSS via LDAP+SSL breaks setuid applications like sudo == Upgrading systems configured to use ldap over ssl as the first service in the nss stack (in nsswitch.conf) leads to a broken nss resolution for setuid applications after the upgrade to Lucid (for example sudo would stop working). There isn't any simple workaround for now. One option is to switch to libnss-ldapd in place of libnss-ldap before the upgrade. Another one consists in using nscd before the upgrade. SRU Request: [Impact] As heavily outlined in the amount of comments in this bug the impact is detrimental to both community and enterprise users alike. [Development Fix] Howard Chu released a patch in #73 which was later confirmed in #106 & #108 as a resolution. [Stable Fix] Patch from #73 can be applied cleanly to Lucid and new distributions. [Test Case] On Karmic (alpha 4 plus updates), changing the nsswitch.conf 'passwd' field to anything with 'ldap' as the first item breaks the ability to become root using 'su' and 'sudo' as anyone but root. Default nsswitch.conf: passwd: compat group: compat shadow: compat matt@box:~$ sudo uname -a [sudo] password for matt: Linux box 2.6.31-9-server #29-Ubuntu SMP Sun Aug 30 18:37:42 UTC 2009 x86_64 GNU/Linux matt@box:~$ su - Password: root@box:~# Modified nsswitch.conf with 'ldap' before 'compat': passwd: ldap compat group: ldap compat shadow: ldap compat matt@box:~$ sudo uname -a sudo: setreuid(ROOT_UID, user_uid): Operation not permitted matt@box:~$ su - Password: setgid: Operation not permitted Modified nsswitch.conf with 'ldap' after 'compat': passwd: compat ldap group: compat ldap shadow: compat ldap matt@box:~$ sudo uname -a [sudo] password for matt: Linux box 2.6.31-9-server #29-Ubuntu SMP Sun Aug 30 18:37:42 UTC 2009 x86_64 GNU/Linux matt@box:~$ su - Password: root@box:~# The same arrangements in nsswitch.conf work as expected in Jaunty and earlier releases. [Regression Potential] This should be minimal as the code change only addresses the duplicating global_init during thread callbacks. Lucid Release Note: == NSS via LDAP+SSL breaks setuid applications like sudo == Upgrading systems configured to use ldap over ssl as the first service in the nss stack (in nsswitch.conf) leads to a broken nss resolution for setuid applications after the upgrade to Lucid (for example sudo would stop working). There isn't any simple workaround for now. One option is to switch to libnss-ldapd in place of libnss-ldap before the upgrade. Another one consists in using nscd before the upgrade.
2012-05-15 18:35:15 Adam Stokes branch linked lp:~adam-stokes/ubuntu/quantal/libgcrypt11/libgcrypt-fix-423252
2012-05-16 11:26:12 Thierry Carrez removed subscriber Thierry Carrez
2012-05-16 15:40:40 Launchpad Janitor libgcrypt11 (Ubuntu): status Confirmed Fix Released
2012-05-16 16:14:18 Launchpad Janitor branch linked lp:ubuntu/libgcrypt11
2012-05-16 17:44:47 Adam Stokes attachment added libgcrypt11_1.5.0-3ubuntu1.precise.debdiff https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/423252/+attachment/3149496/+files/libgcrypt11_1.5.0-3ubuntu1.precise.debdiff
2012-05-17 14:59:45 Adam Stokes attachment added Oneiric-proposed debdiff https://bugs.launchpad.net/ubuntu/+source/libgcrypt11/+bug/423252/+attachment/3150693/+files/libgcrypt11_1.5.0-1ubuntu0.1.oneiric.debdiff
2012-05-17 15:10:49 Adam Stokes attachment added libgcrypt11_1.4.6-4ubuntu2.1.natty.debdiff https://bugs.launchpad.net/ubuntu/+source/libgcrypt11/+bug/423252/+attachment/3150719/+files/libgcrypt11_1.4.6-4ubuntu2.1.natty.debdiff
2012-05-17 15:12:31 Stéphane Graber bug task added libgcrypt11 (Ubuntu Natty)
2012-05-17 15:12:31 Stéphane Graber bug task added sudo (Ubuntu Natty)
2012-05-17 15:12:31 Stéphane Graber bug task added libnss-ldap (Ubuntu Natty)
2012-05-17 15:12:31 Stéphane Graber bug task added eglibc (Ubuntu Natty)
2012-05-17 15:12:50 Stéphane Graber bug task added libgcrypt11 (Ubuntu Oneiric)
2012-05-17 15:12:50 Stéphane Graber bug task added sudo (Ubuntu Oneiric)
2012-05-17 15:12:50 Stéphane Graber bug task added libnss-ldap (Ubuntu Oneiric)
2012-05-17 15:12:50 Stéphane Graber bug task added eglibc (Ubuntu Oneiric)
2012-05-17 15:13:53 Stéphane Graber libgcrypt11 (Ubuntu Maverick): status Confirmed Won't Fix
2012-05-17 15:14:15 Stéphane Graber bug task added libgcrypt11 (Ubuntu Precise)
2012-05-17 15:14:15 Stéphane Graber bug task added sudo (Ubuntu Precise)
2012-05-17 15:14:15 Stéphane Graber bug task added libnss-ldap (Ubuntu Precise)
2012-05-17 15:14:15 Stéphane Graber bug task added eglibc (Ubuntu Precise)
2012-05-17 15:14:52 Stéphane Graber libgcrypt11 (Ubuntu Precise): status New Fix Committed
2012-05-17 15:15:11 Stéphane Graber libgcrypt11 (Ubuntu Oneiric): status New Fix Committed
2012-05-17 15:17:38 Stéphane Graber libgcrypt11 (Ubuntu Natty): status New Fix Committed
2012-05-18 08:07:15 Martin Pitt bug added subscriber Ubuntu Stable Release Updates Team
2012-05-18 08:07:24 Martin Pitt bug added subscriber SRU Verification
2012-05-18 08:07:28 Martin Pitt tags glucid patch precise regression-release glucid patch precise regression-release verification-needed
2012-05-18 08:57:47 Launchpad Janitor branch linked lp:ubuntu/precise-proposed/libgcrypt11
2012-05-18 08:58:13 Launchpad Janitor branch linked lp:ubuntu/oneiric-proposed/libgcrypt11
2012-05-18 08:58:32 Launchpad Janitor branch linked lp:ubuntu/natty-proposed/libgcrypt11
2012-05-20 14:59:56 nryc bug added subscriber nryc
2012-05-21 16:29:35 Patrick Welche bug added subscriber Patrick Welche
2012-05-23 07:48:11 Clint Byrum tags glucid patch precise regression-release verification-needed glucid patch precise regression-release verification-done verification-done-precise verification-needed
2012-05-24 20:41:36 Adam Stokes attachment added libgcrypt11_1.4.4-5ubuntu2.1.lucid.debdiff https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/423252/+attachment/3161716/+files/libgcrypt11_1.4.4-5ubuntu2.1.lucid.debdiff
2012-05-24 20:51:10 Stéphane Graber libgcrypt11 (Ubuntu Lucid): status Confirmed Fix Committed
2012-05-24 21:07:40 Steve Langasek libgcrypt11 (Ubuntu Lucid): status Fix Committed In Progress
2012-05-29 00:16:14 Chris Halse Rogers libgcrypt11 (Ubuntu Lucid): status In Progress Fix Committed
2012-05-29 00:16:54 Chris Halse Rogers tags glucid patch precise regression-release verification-done verification-done-precise verification-needed glucid patch precise regression-release verification-done-precise verification-needed
2012-05-29 00:44:19 Launchpad Janitor branch linked lp:ubuntu/lucid-proposed/libgcrypt11
2012-05-29 00:51:54 Jeffrey Kois removed subscriber Jeffrey Kois
2012-05-29 00:51:57 Jeffrey Kois bug added subscriber Jeffrey Kois
2012-05-29 20:57:10 darqchild removed subscriber darqchild
2012-06-01 21:41:10 Launchpad Janitor libgcrypt11 (Ubuntu Precise): status Fix Committed Fix Released
2012-06-01 21:43:02 Colin Watson tags glucid patch precise regression-release verification-done-precise verification-needed glucid patch precise regression-release verification-needed
2012-06-14 14:21:20 Steve Langasek tags glucid patch precise regression-release verification-needed glucid patch precise regression-release verification-done-lucid verification-needed
2012-06-19 11:23:12 Stéphane Bidoul (Acsone) removed subscriber Stéphane Bidoul (Acsone)
2012-06-25 10:25:52 nryc removed subscriber nryc
2012-06-25 15:24:10 Launchpad Janitor libgcrypt11 (Ubuntu Lucid): status Fix Committed Fix Released
2012-06-27 06:00:39 Mathieu Sauve-Frankel bug added subscriber Mathieu Sauve-Frankel
2012-07-25 18:34:40 Larry Prikockis bug added subscriber Larry Prikockis
2012-09-21 16:14:29 Howard Chu attachment added Addition to the patch in comment#73 https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/423252/+attachment/3328846/+files/dif.txt
2012-10-15 20:21:19 Chris J Arges bug added subscriber Sustaining Engineering
2012-11-05 16:26:08 Adam Stokes bug task deleted eglibc (Ubuntu)
2012-11-05 16:26:21 Adam Stokes bug task deleted libnss-ldap (Ubuntu)
2012-11-05 16:26:39 Adam Stokes bug task deleted sudo (Ubuntu)
2012-11-08 23:02:36 Eric Carvalho removed subscriber Eric Carvalho
2012-11-11 13:05:16 Andreas Metzler bug added subscriber Andreas Metzler
2012-11-12 14:34:05 raffis bug added subscriber Raffael Sahli
2012-12-11 13:10:18 Sam Morris bug added subscriber Sam Morris
2013-01-23 13:03:09 carloslp bug added subscriber carloslp
2013-01-24 20:47:22 Brian Murray tags glucid patch precise regression-release verification-done-lucid verification-needed glucid patch precise regression-release removal-candidate verification-done-lucid verification-needed
2013-01-24 23:55:14 carloslp bug watch added http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=368297
2013-01-24 23:55:14 carloslp bug watch added http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=658896
2013-02-05 21:07:40 Bug Watch Updater gnutls26 (Debian): status New Confirmed
2013-03-05 20:53:27 Paul Boven bug added subscriber Paul Boven
2013-05-04 17:22:54 dino99 eglibc (Ubuntu Natty): status New Invalid
2013-05-04 17:23:25 dino99 eglibc (Ubuntu Oneiric): status New Invalid
2013-05-04 17:23:56 dino99 libgcrypt11 (Ubuntu Natty): status Fix Committed Invalid
2013-05-04 17:24:24 dino99 libgcrypt11 (Ubuntu Oneiric): status Fix Committed Invalid
2013-05-04 17:24:57 dino99 libnss-ldap (Ubuntu Natty): status New Invalid
2013-05-04 17:25:29 dino99 libnss-ldap (Ubuntu Oneiric): status New Invalid
2013-05-04 17:26:04 dino99 sudo (Ubuntu Natty): status New Invalid
2013-05-04 17:26:31 dino99 sudo (Ubuntu Oneiric): status New Invalid
2013-05-04 17:28:02 dino99 libnss-ldap (Ubuntu Maverick): status Confirmed Invalid
2014-02-07 15:41:59 Curtis Hovey removed subscriber Registry Administrators
2014-06-01 04:36:33 Mathew Hodson openldap (Debian): importance Undecided Unknown
2014-06-01 04:36:33 Mathew Hodson openldap (Debian): status New Unknown
2014-06-01 04:36:33 Mathew Hodson openldap (Debian): remote watch Debian Bug tracker #368297
2014-06-01 04:39:10 Mathew Hodson sudo (Debian): status Confirmed Unknown
2014-06-01 04:39:10 Mathew Hodson sudo (Debian): remote watch Debian Bug tracker #545414 Debian Bug tracker #658896
2014-06-01 04:46:28 Mathew Hodson affects sudo (Kairos Linux) libgcrypt
2014-06-01 04:46:28 Mathew Hodson libgcrypt: importance High Unknown
2014-06-01 04:46:28 Mathew Hodson libgcrypt: status Confirmed Unknown
2014-06-01 04:46:28 Mathew Hodson libgcrypt: remote watch GnuPG Bugs #1181
2014-06-01 04:46:28 Mathew Hodson libgcrypt: assignee Philipp Kaluza (pixelpapst)
2014-06-01 04:50:34 Mathew Hodson tags glucid patch precise regression-release removal-candidate verification-done-lucid verification-needed glucid patch precise regression-release removal-candidate verification-done-lucid
2014-06-01 05:35:16 Bug Watch Updater openldap (Debian): status Unknown Confirmed
2014-06-01 08:51:03 Bug Watch Updater sudo (Debian): status Unknown Confirmed
2014-06-01 10:04:32 Bug Watch Updater libgcrypt: status Unknown Fix Released
2014-06-03 22:21:51 Victor Vargas removed subscriber Kamus
2015-01-09 00:12:22 Mathew Hodson affects openldap (Debian) libnss-ldap (Debian)
2015-01-09 00:16:06 Mathew Hodson bug watch removed http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=545414
2015-01-09 00:26:44 Mathew Hodson tags glucid patch precise regression-release removal-candidate verification-done-lucid patch precise regression-release removal-candidate verification-done-lucid
2015-01-09 00:34:36 Mathew Hodson sudo (Ubuntu Precise): status New Invalid
2015-01-09 00:34:56 Mathew Hodson eglibc (Ubuntu Precise): status New Invalid
2015-01-09 00:35:21 Mathew Hodson libnss-ldap (Ubuntu Precise): status New Invalid
2015-01-14 14:47:44 Mathew Hodson tags patch precise regression-release removal-candidate verification-done-lucid karmic lucid patch precise regression-release removal-candidate verification-done-lucid verification-done-precise
2015-01-28 19:16:01 Mathew Hodson tags karmic lucid patch precise regression-release removal-candidate verification-done-lucid verification-done-precise karmic patch regression-release removal-candidate verification-done-lucid verification-done-precise
2015-01-28 19:20:25 Mathew Hodson affects eglibc (Ubuntu Karmic) gnutls26 (Ubuntu Karmic)
2015-03-14 16:14:41 Bug Watch Updater libgcrypt11 (Debian): status Confirmed Fix Released
2015-03-14 18:59:50 Bug Watch Updater libnss-ldap (Debian): status Confirmed Fix Released
2015-03-14 19:43:22 Bug Watch Updater gnutls26 (Debian): status Confirmed Fix Released
2015-03-14 19:43:29 Bug Watch Updater sudo (Debian): status Confirmed Fix Released
2015-05-27 03:50:37 Mathew Hodson tags karmic patch regression-release removal-candidate verification-done-lucid verification-done-precise karmic patch regression-release verification-done-lucid verification-done-precise
2015-05-27 04:21:58 aurelieng removed subscriber aurelieng
2015-09-16 23:05:10 Mathew Hodson bug task deleted sudo (Ubuntu Precise)
2015-09-16 23:05:39 Mathew Hodson bug task deleted sudo (Ubuntu Oneiric)
2015-09-16 23:05:57 Mathew Hodson bug task deleted gnutls26 (Ubuntu Karmic)
2015-09-16 23:07:50 Mathew Hodson bug task deleted gnutls26 (Ubuntu Lucid)
2015-09-16 23:08:11 Mathew Hodson bug task deleted gnutls26 (Ubuntu Maverick)
2015-09-16 23:19:20 Mathew Hodson bug task deleted gnutls26 (Ubuntu Natty)
2015-09-16 23:19:31 Mathew Hodson bug task deleted gnutls26 (Ubuntu Oneiric)
2015-09-16 23:19:42 Mathew Hodson bug task deleted gnutls26 (Ubuntu Precise)
2015-09-16 23:20:37 Mathew Hodson libgcrypt11 (Ubuntu Natty): importance Undecided Medium
2015-09-16 23:20:37 Mathew Hodson libgcrypt11 (Ubuntu Natty): status Invalid Won't Fix
2015-09-16 23:20:58 Mathew Hodson bug task deleted libnss-ldap (Ubuntu Karmic)
2015-09-16 23:21:10 Mathew Hodson bug task deleted libnss-ldap (Ubuntu Lucid)
2015-09-16 23:21:26 Mathew Hodson bug task deleted libnss-ldap (Ubuntu Maverick)
2015-09-16 23:21:49 Mathew Hodson bug task deleted libnss-ldap (Ubuntu Natty)
2015-09-16 23:22:16 Mathew Hodson bug task deleted libnss-ldap (Ubuntu Oneiric)
2015-09-16 23:22:29 Mathew Hodson bug task deleted libnss-ldap (Ubuntu Precise)
2015-09-16 23:22:47 Mathew Hodson bug task deleted sudo (Ubuntu Karmic)
2015-09-16 23:22:56 Mathew Hodson bug task deleted sudo (Ubuntu Lucid)
2015-09-16 23:23:07 Mathew Hodson bug task deleted sudo (Ubuntu Maverick)
2015-09-16 23:23:18 Mathew Hodson bug task deleted sudo (Ubuntu Natty)
2015-09-16 23:23:41 Mathew Hodson libgcrypt11 (Ubuntu): milestone lucid-updates
2015-09-16 23:46:55 Mathew Hodson bug watch added http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=368297
2015-09-16 23:46:55 Mathew Hodson libgcrypt11 (Debian): status Fix Released Unknown
2015-09-16 23:46:55 Mathew Hodson libgcrypt11 (Debian): remote watch Debian Bug tracker #566351 Debian Bug tracker #368297
2015-09-16 23:48:49 Mathew Hodson gnutls26 (Debian): importance Unknown Undecided
2015-09-16 23:48:49 Mathew Hodson gnutls26 (Debian): status Fix Released New
2015-09-16 23:48:49 Mathew Hodson gnutls26 (Debian): remote watch Debian Bug tracker #658739
2015-09-16 23:50:21 Mathew Hodson affects gnutls26 (Debian) debian
2015-09-16 23:51:42 Mathew Hodson debian: assignee Mathew Hodson (mathew-hodson)
2015-09-16 23:52:27 Mathew Hodson affects debian gnutls26 (Debian)
2015-09-16 23:52:27 Mathew Hodson gnutls26 (Debian): importance Undecided Unknown
2015-09-16 23:52:27 Mathew Hodson gnutls26 (Debian): status New Unknown
2015-09-16 23:52:27 Mathew Hodson gnutls26 (Debian): remote watch Debian Bug tracker #658739
2015-09-16 23:52:27 Mathew Hodson gnutls26 (Debian): assignee Mathew Hodson (mathew-hodson)
2015-09-16 23:52:58 Mathew Hodson bug watch removed http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566351
2015-09-16 23:53:32 Mathew Hodson libgcrypt11 (Ubuntu Oneiric): status Invalid Won't Fix
2015-09-16 23:53:59 Mathew Hodson libgcrypt11 (Ubuntu Oneiric): importance Undecided Medium
2015-09-16 23:54:11 Mathew Hodson libgcrypt11 (Ubuntu Precise): importance Undecided Medium
2015-09-17 01:25:13 Bug Watch Updater libgcrypt11 (Debian): status Unknown Fix Released
2015-09-17 13:13:08 Bug Watch Updater gnutls26 (Debian): status Unknown Fix Released
2015-09-18 05:30:00 Mathew Hodson libgcrypt11 (Ubuntu Maverick): milestone maverick-updates
2015-09-18 05:34:04 Mathew Hodson tags karmic patch regression-release verification-done-lucid verification-done-precise karmic lucid patch precise regression-release verification-done-lucid verification-done-precise
2015-09-18 07:27:55 mcguire removed subscriber mcguire
2015-10-28 21:17:36 Mathew Hodson bug watch added http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566351
2015-10-28 21:17:36 Mathew Hodson libgcrypt11 (Debian): status Fix Released Unknown
2015-10-28 21:17:36 Mathew Hodson libgcrypt11 (Debian): remote watch Debian Bug tracker #368297 Debian Bug tracker #566351
2015-10-28 21:19:24 Mathew Hodson affects gnutls26 (Debian) ubuntu-translations
2015-10-28 21:19:24 Mathew Hodson ubuntu-translations: importance Unknown Undecided
2015-10-28 21:19:24 Mathew Hodson ubuntu-translations: status Fix Released New
2015-10-28 21:19:24 Mathew Hodson ubuntu-translations: remote watch Debian Bug tracker #658739
2015-10-28 21:19:43 Mathew Hodson bug task deleted ubuntu-translations
2015-10-28 21:20:31 Mathew Hodson affects libnss-ldap (Debian) ubuntu-translations
2015-10-28 21:20:31 Mathew Hodson ubuntu-translations: importance Unknown Undecided
2015-10-28 21:20:31 Mathew Hodson ubuntu-translations: status Fix Released New
2015-10-28 21:20:31 Mathew Hodson ubuntu-translations: remote watch Debian Bug tracker #579647
2015-10-28 21:20:48 Mathew Hodson bug task deleted ubuntu-translations
2015-10-28 21:21:23 Mathew Hodson affects sudo (Debian) ubuntu-translations
2015-10-28 21:21:23 Mathew Hodson ubuntu-translations: importance Unknown Undecided
2015-10-28 21:21:23 Mathew Hodson ubuntu-translations: status Fix Released New
2015-10-28 21:21:23 Mathew Hodson ubuntu-translations: remote watch Debian Bug tracker #658896
2015-10-28 21:21:37 Mathew Hodson bug task deleted ubuntu-translations
2015-10-28 21:22:29 Mathew Hodson bug watch removed http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=368297
2015-10-28 21:22:48 Mathew Hodson bug watch removed http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=579647
2015-10-28 21:23:03 Mathew Hodson bug watch removed http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=658739
2015-10-28 21:23:19 Mathew Hodson bug watch removed http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=658896
2015-10-28 21:33:47 Michael Lenaghan removed subscriber Michael Lenaghan
2015-10-29 13:22:22 Bug Watch Updater libgcrypt11 (Debian): status Unknown Fix Released