On 2021-09-11 21:52, Adrian Bunk wrote: > On Sat, Sep 11, 2021 at 03:59:12PM +0200, Marc Haber wrote: > > Package: release.debian.org > > Severity: normal > > User: release.debian....@packages.debian.org > > Usertags: binnmu > > > > [this is my first binNMU request, I hope that I did everything right] > > [ I am not a member of the release team ] > > > aide is statically linked. With the new glibc, NSS calls get somehow > > still some dynamic linking, which causes a reproducible and > > unconditional segfault one aide uses an NSS-releated call. A rebuild > > fixes this issue. I am currently discussing this issue with upstream to > > find out whether we can do things a bit better in the future. > > AFAIR static glibc linking and NSS is known problematic.
Indeed, I confirm. Note that this will change with glibc 2.34 which has nss_files and nss_dns built-in. > The dependencies should ensure that apt/dpkg only install a working set > of packages. Dependencies like "libc6 (>> 2.32), libc6 (<< 2.33)" might > help, but I've added debian-glibc to Cc since I don't know for sure > whether this would be sufficient. This is correct, there is no breakage between minor version, only between major version. Now, given that bookworm will very likely have glibc >= 2.34 (at least that the goal if we are able to solve all issues with each new upstream version), so I am not sure if it is worth implementing such a change. Regards, Aurelien -- Aurelien Jarno GPG: 4096R/1DDD8C9B aurel...@aurel32.net http://www.aurel32.net