Bug Fix Advisory tftp bug fix update

Advisory: RHBA-2008:0160-2
Type: Bug Fix Advisory
Severity: N/A
Issued on: 2008-07-24
Last updated on: 2008-07-24
Affected Products: Red Hat Desktop (v. 4)
Red Hat Enterprise Linux AS (v. 4)
Red Hat Enterprise Linux ES (v. 4)
Red Hat Enterprise Linux WS (v. 4)
OVAL: N/A

Details

Updated tftp packages that fix several bugs are now available.

The Trivial File Transfer Protocol (TFTP) is normally used only for booting
diskless workstations. The tftp package provides the user interface for
TFTP, which allows users to transfer files to and from a remote machine.
The tftp-server package provides the server for TFTP which allows users to
transfer files to and from a remote machine.

These updated packages fix the following bugs:

* when a tftp client sent a request to 255.255.255.255 (the limited
broadcast address) tftpd failed. tfptd would remember the address the
client sent the address to (255.255.255.255) and attempt to respond using
this as the source address. This is the right thing to do for multi-homed
tftp servers but failed because using the limited broadcast address as a
source address is not allowed. These updated packages fix this by changing
the source address used by tftpd when responding to such requests from
INADDR_BROADCAST to INADDR_ANY.

* tftp-server rejected "r" re-mapping rules (for re-writing a matched
string with a given pattern) incorrectly. Amongst other errors, this
prevented "\\" being re-mapped to "/", causing problems for Windows
clients. These updated packages no longer reject "r" rules incorrectly. As
well, they now return an informative error message when they correctly
reject a rule.

* the time stamp on tftp-server log files in /var/log/messages used UTC
rather than the local system time. The time stamp on log files produced by
these updated packages now uses the local system time.

All users of tftp-server should upgrade to these updated packages, which
resolve these issues.


Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188


Updated packages

Red Hat Desktop (v. 4)

SRPMS:
tftp-0.39-3.el4.src.rpm     70272fdc462fc0e062ba6af97706da02
 
IA-32:
tftp-0.39-3.el4.i386.rpm     a3c272cfadc3e7b9997d2ac7ca326032
tftp-server-0.39-3.el4.i386.rpm     0410ab3b56b63bdca20da2bb32108516
 
x86_64:
tftp-0.39-3.el4.x86_64.rpm     0b0d5c09b1afaaa60829e856f06b7a6a
tftp-server-0.39-3.el4.x86_64.rpm     b9a2b49393dd4b4f5fcabbd8382f8d20
 
Red Hat Enterprise Linux AS (v. 4)

SRPMS:
tftp-0.39-3.el4.src.rpm     70272fdc462fc0e062ba6af97706da02
 
IA-32:
tftp-0.39-3.el4.i386.rpm     a3c272cfadc3e7b9997d2ac7ca326032
tftp-server-0.39-3.el4.i386.rpm     0410ab3b56b63bdca20da2bb32108516
 
IA-64:
tftp-0.39-3.el4.ia64.rpm     edfeb7cb45313d957450ddb4831d86c0
tftp-server-0.39-3.el4.ia64.rpm     5271f4bf60f9e5642d2dfb8f7a28bc99
 
PPC:
tftp-0.39-3.el4.ppc.rpm     cdae67639c5beafc52da333cf70b5e49
tftp-server-0.39-3.el4.ppc.rpm     fc807c13768de10243d7961be6392a47
 
s390:
tftp-0.39-3.el4.s390.rpm     bbafa2991d980b7fe68bfb7686ed24c3
tftp-server-0.39-3.el4.s390.rpm     b1aa4aafc04a63e6c81f0a045077d5c6
 
s390x:
tftp-0.39-3.el4.s390x.rpm     dd7753149f37d954fbdf092dd205e239
tftp-server-0.39-3.el4.s390x.rpm     3cdfc8ec4bde74459adb3f95f95a2f5f
 
x86_64:
tftp-0.39-3.el4.x86_64.rpm     0b0d5c09b1afaaa60829e856f06b7a6a
tftp-server-0.39-3.el4.x86_64.rpm     b9a2b49393dd4b4f5fcabbd8382f8d20
 
Red Hat Enterprise Linux ES (v. 4)

SRPMS:
tftp-0.39-3.el4.src.rpm     70272fdc462fc0e062ba6af97706da02
 
IA-32:
tftp-0.39-3.el4.i386.rpm     a3c272cfadc3e7b9997d2ac7ca326032
tftp-server-0.39-3.el4.i386.rpm     0410ab3b56b63bdca20da2bb32108516
 
IA-64:
tftp-0.39-3.el4.ia64.rpm     edfeb7cb45313d957450ddb4831d86c0
tftp-server-0.39-3.el4.ia64.rpm     5271f4bf60f9e5642d2dfb8f7a28bc99
 
x86_64:
tftp-0.39-3.el4.x86_64.rpm     0b0d5c09b1afaaa60829e856f06b7a6a
tftp-server-0.39-3.el4.x86_64.rpm     b9a2b49393dd4b4f5fcabbd8382f8d20
 
Red Hat Enterprise Linux WS (v. 4)

SRPMS:
tftp-0.39-3.el4.src.rpm     70272fdc462fc0e062ba6af97706da02
 
IA-32:
tftp-0.39-3.el4.i386.rpm     a3c272cfadc3e7b9997d2ac7ca326032
tftp-server-0.39-3.el4.i386.rpm     0410ab3b56b63bdca20da2bb32108516
 
IA-64:
tftp-0.39-3.el4.ia64.rpm     edfeb7cb45313d957450ddb4831d86c0
tftp-server-0.39-3.el4.ia64.rpm     5271f4bf60f9e5642d2dfb8f7a28bc99
 
x86_64:
tftp-0.39-3.el4.x86_64.rpm     0b0d5c09b1afaaa60829e856f06b7a6a
tftp-server-0.39-3.el4.x86_64.rpm     b9a2b49393dd4b4f5fcabbd8382f8d20
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

242653 - tftp-server log in GMT instead of localtime



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/