From patchwork Fri Jul 24 14:47:10 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Florian Weimer X-Patchwork-Id: 40171 Return-Path: X-Original-To: patchwork@sourceware.org Delivered-To: patchwork@sourceware.org Received: from server2.sourceware.org (localhost [IPv6:::1]) by sourceware.org (Postfix) with ESMTP id E5E5138930DE; Fri, 24 Jul 2020 14:47:18 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org E5E5138930DE DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sourceware.org; s=default; t=1595602039; bh=EsCoxA7ZzqNxbEHFLJnSYK5e5/P4HxydqwjH6RfqMiA=; h=To:Subject:Date:List-Id:List-Unsubscribe:List-Archive:List-Post: List-Help:List-Subscribe:From:Reply-To:From; b=w+U9+KEmO45DCGYwmRBc2DoPj4ubDMymjyAmv9Oyq4XT3hUh70VL9mIOV5N5KEUyu 3ODc5ycw4mzxzVh59KR4bTpxGtHHevUkXNzHHSl2GIhIQ6PKMk4UUDmiTEZtNJrpIQ 0W3PvLBrB9TJo/YXtFsJ5NdKxTj6wFRkjMUVVzQ0= X-Original-To: libc-alpha@sourceware.org Delivered-To: libc-alpha@sourceware.org Received: from us-smtp-delivery-1.mimecast.com (us-smtp-2.mimecast.com [207.211.31.81]) by sourceware.org (Postfix) with ESMTP id 0A4C8385702F for ; Fri, 24 Jul 2020 14:47:16 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 0A4C8385702F Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-421-9hs10VByONiNcrFdd16pjQ-1; Fri, 24 Jul 2020 10:47:13 -0400 X-MC-Unique: 9hs10VByONiNcrFdd16pjQ-1 Received: from smtp.corp.redhat.com (int-mx05.intmail.prod.int.phx2.redhat.com [10.5.11.15]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id BE30280183C for ; Fri, 24 Jul 2020 14:47:12 +0000 (UTC) Received: from oldenburg2.str.redhat.com (ovpn-112-154.ams2.redhat.com [10.36.112.154]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 45EF1710AC for ; Fri, 24 Jul 2020 14:47:12 +0000 (UTC) To: libc-alpha@sourceware.org Subject: [PATCH] NEWS: Deprecate nss_hesiod Date: Fri, 24 Jul 2020 16:47:10 +0200 Message-ID: <87a6zp7yxd.fsf@oldenburg2.str.redhat.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux) MIME-Version: 1.0 X-Scanned-By: MIMEDefang 2.79 on 10.5.11.15 X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com X-Spam-Status: No, score=-12.2 required=5.0 tests=BAYES_00, DKIMWL_WL_HIGH, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, GIT_PATCH_0, RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H3, RCVD_IN_MSPIKE_WL, SPF_HELO_NONE, SPF_PASS, TXREP autolearn=ham autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on server2.sourceware.org X-BeenThere: libc-alpha@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Libc-alpha mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-Patchwork-Original-From: Florian Weimer via Libc-alpha From: Florian Weimer Reply-To: Florian Weimer Errors-To: libc-alpha-bounces@sourceware.org Sender: "Libc-alpha" Storing user databases in DNS, without client-side DNSSEC validation, is problematic from a security point of view. Reviewed-by: Carlos O'Donell --- NEWS | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/NEWS b/NEWS index 1ef4a0a7a4..83aed60e19 100644 --- a/NEWS +++ b/NEWS @@ -147,6 +147,11 @@ Deprecated and removed features, and other changes affecting compatibility: applications which use the malloc hooks must preload a special shared object, to enable the hooks. +* The hesiod NSS module has been deprecated and will be removed in a + future version of glibc. System administrators are encouraged to + switch to other approaches for networked account databases, such as + LDAP. + Changes to build and runtime requirements: * powerpc64le requires GCC 7.4 or newer. This is required for supporting