From: Florian Weimer Date: Fri, 24 Jul 2020 14:46:23 +0000 (+0200) Subject: NEWS: Deprecate nss_hesiod X-Git-Tag: glibc-2.32~13 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=20fb7452c04221608be1359cc100387db3e36356;p=thirdparty%2Fglibc.git NEWS: Deprecate nss_hesiod Storing user databases in DNS, without client-side DNSSEC validation, is problematic from a security point of view. Reviewed-by: Carlos O'Donell --- diff --git a/NEWS b/NEWS index 1ef4a0a7a47..83aed60e197 100644 --- a/NEWS +++ b/NEWS @@ -147,6 +147,11 @@ Deprecated and removed features, and other changes affecting compatibility: applications which use the malloc hooks must preload a special shared object, to enable the hooks. +* The hesiod NSS module has been deprecated and will be removed in a + future version of glibc. System administrators are encouraged to + switch to other approaches for networked account databases, such as + LDAP. + Changes to build and runtime requirements: * powerpc64le requires GCC 7.4 or newer. This is required for supporting