rsh bug fix update
| Advisory: | RHBA-2009:0423-2 |
|---|---|
| Type: | Bug Fix Advisory |
| Severity: | N/A |
| Issued on: | 2009-04-15 |
| Last updated on: | 2009-09-02 |
| Affected Products: | Red Hat Enterprise Linux (v. 5 server) Red Hat Enterprise Linux Desktop (v. 5 client) |
Details
Updated rsh packages that resolve several issues are now available.
The rsh-server package contains programs which allow users to run commands
on remote machines, log in to other machines, copy files between machines
(rsh, rlogin and rcp), and provides an alternate method of executing remote
commands (rexec). All of these programs are run by xinetd and can be
configured through the Pluggable Authentication Modules (PAM) system, and
through configuration files in the /etc/xinetd.d/ directory.
These updated rsh packages provide fixes for the following bugs:
* rsh did not set any of the environment variables listed in the
/etc/security/pam_env.conf configuration file, and thus rsh users did not
have access to that environment. With this update, rsh correctly reads and
sets the environment variables listed in /etc/security/pam_env.conf, thus
resolving the issue.
* the rexec(1) man page stated that the maximum length of the username on
the remote system was restricted to 16 characters. Internally, however,
rexec limited the maximum username length to 14 characters. rexec's maximum
username length has been increased to 16 characters, which corresponds to
the value given in the manual page, and which resolves the issue.
* when copying data to a full NFS directory, rcp failed silently and did
not report an error, which led to silent data loss. With this update, rcp
does report an error under this condition.
All users of rsh are advised to upgrade to these updated packages, which
resolve these issues.
Solution
errata relevant to your system have been applied.
This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259
Updated packages
| Red Hat Enterprise Linux (v. 5 server) | |
| SRPMS: | |
| rsh-0.17-40.el5.src.rpm File outdated by: RHBA-2011:1429 |
MD5: a5540711fd8aaad7485beb0b3271629d |
| IA-32: | |
| rsh-0.17-40.el5.i386.rpm File outdated by: RHBA-2011:1429 |
MD5: 6f90d4dcd68abf124ee1913771fc242c |
| rsh-server-0.17-40.el5.i386.rpm File outdated by: RHBA-2011:1429 |
MD5: 0b3d6736b5cbfbf49282dbd27c9d6b06 |
| IA-64: | |
| rsh-0.17-40.el5.ia64.rpm File outdated by: RHBA-2011:1429 |
MD5: 71e10db7c16dac556ee6a09b58c3e1fb |
| rsh-server-0.17-40.el5.ia64.rpm File outdated by: RHBA-2011:1429 |
MD5: 1df5805f3de9a99680d926a72ac4bddd |
| PPC: | |
| rsh-0.17-40.el5.ppc.rpm File outdated by: RHBA-2011:1429 |
MD5: f2a878304d0793637cf74c48740840d6 |
| rsh-server-0.17-40.el5.ppc.rpm File outdated by: RHBA-2011:1429 |
MD5: 3175c547255b5735fd5225cd540f6de4 |
| s390x: | |
| rsh-0.17-40.el5.s390x.rpm File outdated by: RHBA-2011:1429 |
MD5: 72936aae3bf35fd4a95ad72982fd65df |
| rsh-server-0.17-40.el5.s390x.rpm File outdated by: RHBA-2011:1429 |
MD5: a03f337eafd6a719e1b6da74d8a75948 |
| x86_64: | |
| rsh-0.17-40.el5.x86_64.rpm File outdated by: RHBA-2011:1429 |
MD5: 772d56ca8e7e37d9bcc72a2715696cb7 |
| rsh-server-0.17-40.el5.x86_64.rpm File outdated by: RHBA-2011:1429 |
MD5: b62c95915b96b392cc31a13173da27cb |
| Red Hat Enterprise Linux Desktop (v. 5 client) | |
| SRPMS: | |
| rsh-0.17-40.el5.src.rpm File outdated by: RHBA-2011:1429 |
MD5: a5540711fd8aaad7485beb0b3271629d |
| IA-32: | |
| rsh-0.17-40.el5.i386.rpm File outdated by: RHBA-2011:1429 |
MD5: 6f90d4dcd68abf124ee1913771fc242c |
| rsh-server-0.17-40.el5.i386.rpm File outdated by: RHBA-2011:1429 |
MD5: 0b3d6736b5cbfbf49282dbd27c9d6b06 |
| x86_64: | |
| rsh-0.17-40.el5.x86_64.rpm File outdated by: RHBA-2011:1429 |
MD5: 772d56ca8e7e37d9bcc72a2715696cb7 |
| rsh-server-0.17-40.el5.x86_64.rpm File outdated by: RHBA-2011:1429 |
MD5: b62c95915b96b392cc31a13173da27cb |
| (The unlinked packages above are only available from the Red Hat Network) | |
Bugs fixed (see bugzilla for more information)
434938 - [PATCH] rshd access pam_env
436748 - rexec username limit is 16 characters, not 14
461903 - rcp does not return ENOSPC error on full NFS-File system
Keywords
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package
The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/