[Bug 499425] Re: getpwnam shows shadow passwords of NIS users

2011-05-25 Thread Bug Watch Updater
Launchpad has imported 8 comments from the remote bug at http://sourceware.org/bugzilla/show_bug.cgi?id=11134. If you reply to an imported comment from within Launchpad, your comment will be sent to the remote bug automatically. Read more about Launchpad's inter-bugtracker facilities at

[Bug 499425] Re: getpwnam shows shadow passwords of NIS users

2011-04-28 Thread Jamie Strandboge
** Changed in: eglibc (Ubuntu Karmic) Status: In Progress = Won't Fix ** Changed in: eglibc (Ubuntu Dapper) Status: In Progress = Triaged ** Changed in: eglibc (Ubuntu Hardy) Status: In Progress = Triaged -- You received this bug notification because you are a member of

[Bug 499425] Re: getpwnam shows shadow passwords of NIS users

2010-11-23 Thread Alex Valavanis
Jaunty reached end-of-life on 23 October 2010, so this bug will not be fixed in that version of Ubuntu. It has been fixed in newer versions. ** Changed in: eglibc (Ubuntu Jaunty) Status: In Progress = Won't Fix -- getpwnam shows shadow passwords of NIS users

Re: [Bug 499425] Re: getpwnam shows shadow passwords of NIS users

2010-08-24 Thread Christoph
Hello, On Fri, 06 Aug 2010 16:27:16 - Kees Cook k...@ubuntu.com wrote: Upstream rejected these patches, so it puts us in a rather tricky position. As far as I remember, Ulrich Drepper wrote that they do not completely reject the patches, but that they are going to use a variable in some

[Bug 499425] Re: getpwnam shows shadow passwords of NIS users

2010-08-06 Thread Christoph
Will there ever be fixes for hardy and jaunty? -- getpwnam shows shadow passwords of NIS users https://bugs.launchpad.net/bugs/499425 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list

Re: [Bug 499425] Re: getpwnam shows shadow passwords of NIS users

2010-08-06 Thread Kees Cook
Upstream rejected these patches, so it puts us in a rather tricky position. -- getpwnam shows shadow passwords of NIS users https://bugs.launchpad.net/bugs/499425 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing

[Bug 499425] Re: getpwnam shows shadow passwords of NIS users

2010-05-07 Thread Alex Valavanis
Intrepid Ibex reached end-of-life on 30 April 2010 so I am closing the report. The bug has been fixed in newer releases of Ubuntu. ** Changed in: eglibc (Ubuntu Intrepid) Status: In Progress = Invalid -- getpwnam shows shadow passwords of NIS users https://bugs.launchpad.net/bugs/499425

[Bug 499425] Re: getpwnam shows shadow passwords of NIS users

2010-04-08 Thread Bug Watch Updater
** Changed in: glibc Status: Incomplete = Fix Released -- getpwnam shows shadow passwords of NIS users https://bugs.launchpad.net/bugs/499425 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list

[Bug 499425] Re: getpwnam shows shadow passwords of NIS users

2010-04-06 Thread Bug Watch Updater
** Changed in: glibc Status: Confirmed = Incomplete -- getpwnam shows shadow passwords of NIS users https://bugs.launchpad.net/bugs/499425 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list

[Bug 499425] Re: getpwnam shows shadow passwords of NIS users

2010-01-19 Thread Kees Cook
Actually, this should be Fix Released now, as it's in upstream glibc 2.11.1. It is not likely to ever go into Karmic, though you can pursue a Stable Release Update if you want: https://wiki.ubuntu.com/StableReleaseUpdates ** Changed in: eglibc (Ubuntu) Status: Confirmed = Fix Released

[Bug 499425] Re: getpwnam shows shadow passwords of NIS users

2010-01-19 Thread Kees Cook
Actually, let me rephrase that. It sounds like this is an actual leak that has now been fixed, rather than just being a long-standing glitch in how NIS is designed. Since this is CVE-2010-0015 we'll roll out fixes for all the Ubuntu stable releases shortly. ** Also affects: eglibc (Ubuntu

Re: [Bug 499425] Re: getpwnam shows shadow passwords of NIS users

2010-01-18 Thread Christoph
Hello, what will be Ubuntu's further actions to solve this bug in the libc packages? Debian already has built new packages even for its stable distribution and is about to release them, together with a Debian security announcement, very soon. Regards Christoph -- getpwnam shows shadow

[Bug 499425] Re: getpwnam shows shadow passwords of NIS users

2010-01-08 Thread Bug Watch Updater
** Changed in: glibc Status: Unknown = Confirmed -- getpwnam shows shadow passwords of NIS users https://bugs.launchpad.net/bugs/499425 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list

Re: [Bug 499425] Re: getpwnam shows shadow passwords of NIS users

2010-01-07 Thread Christoph
Hello, Great, thanks for forwarding it. Can you link to the upstream bug so this bug will track it? The link is: http://sourceware.org/bugzilla/show_bug.cgi?id=11134 As to the Wishlist, glibc nis support has always been broken, and having access to encrypted passwords has been a known

[Bug 499425] Re: getpwnam shows shadow passwords of NIS users

2010-01-07 Thread Christoph
** Bug watch added: Sourceware.org Bugzilla #11134 http://sourceware.org/bugzilla/show_bug.cgi?id=11134 -- getpwnam shows shadow passwords of NIS users https://bugs.launchpad.net/bugs/499425 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to

[Bug 499425] Re: getpwnam shows shadow passwords of NIS users

2010-01-07 Thread Kees Cook
** Also affects: glibc via http://sourceware.org/bugzilla/show_bug.cgi?id=11134 Importance: Unknown Status: Unknown ** Package changed: glibc (Ubuntu) = eglibc (Ubuntu) -- getpwnam shows shadow passwords of NIS users https://bugs.launchpad.net/bugs/499425 You received this bug

Re: [Bug 499425] Re: getpwnam shows shadow passwords of NIS users

2010-01-06 Thread Christoph
Hello, On Tue, 05 Jan 2010 21:03:47 - Kees Cook k...@ubuntu.com wrote: Yes, please open an upstream report. I did that yesterday. ** Changed in: glibc (Ubuntu) Importance: Undecided = Wishlist Why that? Do you really think that a bug that enables all users on a machine to see the

[Bug 499425] Re: getpwnam shows shadow passwords of NIS users

2010-01-06 Thread Kees Cook
Great, thanks for forwarding it. Can you link to the upstream bug so this bug will track it? As to the Wishlist, glibc nis support has always been broken, and having access to encrypted passwords has been a known problem for a long time. It seems that the passwd.adjunct.byname way of doing

[Bug 499425] Re: getpwnam shows shadow passwords of NIS users

2010-01-05 Thread Kees Cook
Yes, please open an upstream report. If the patch is taken upstream, all distros will benefit from it. :) ** Changed in: glibc (Ubuntu) Importance: Undecided = Wishlist ** Changed in: glibc (Ubuntu) Status: New = Confirmed -- getpwnam shows shadow passwords of NIS users

[Bug 499425] Re: getpwnam shows shadow passwords of NIS users

2009-12-23 Thread Christoph
** Visibility changed to: Public -- getpwnam shows shadow passwords of NIS users https://bugs.launchpad.net/bugs/499425 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com