Skip to navigation

Bug Fix Advisory rsh bug fix update

Advisory: RHBA-2009:0423-2
Type: Bug Fix Advisory
Severity: N/A
Issued on: 2009-04-15
Last updated on: 2009-09-02
Affected Products: Red Hat Enterprise Linux (v. 5 server)
Red Hat Enterprise Linux Desktop (v. 5 client)

Details

Updated rsh packages that resolve several issues are now available.

The rsh-server package contains programs which allow users to run commands
on remote machines, log in to other machines, copy files between machines
(rsh, rlogin and rcp), and provides an alternate method of executing remote
commands (rexec). All of these programs are run by xinetd and can be
configured through the Pluggable Authentication Modules (PAM) system, and
through configuration files in the /etc/xinetd.d/ directory.

These updated rsh packages provide fixes for the following bugs:

* rsh did not set any of the environment variables listed in the
/etc/security/pam_env.conf configuration file, and thus rsh users did not
have access to that environment. With this update, rsh correctly reads and
sets the environment variables listed in /etc/security/pam_env.conf, thus
resolving the issue.

* the rexec(1) man page stated that the maximum length of the username on
the remote system was restricted to 16 characters. Internally, however,
rexec limited the maximum username length to 14 characters. rexec's maximum
username length has been increased to 16 characters, which corresponds to
the value given in the manual page, and which resolves the issue.

* when copying data to a full NFS directory, rcp failed silently and did
not report an error, which led to silent data loss. With this update, rcp
does report an error under this condition.

All users of rsh are advised to upgrade to these updated packages, which
resolve these issues.


Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Updated packages

Red Hat Enterprise Linux (v. 5 server)

SRPMS:
rsh-0.17-40.el5.src.rpm
File outdated by:  RHBA-2011:1429
    MD5: a5540711fd8aaad7485beb0b3271629d
 
IA-32:
rsh-0.17-40.el5.i386.rpm
File outdated by:  RHBA-2011:1429
    MD5: 6f90d4dcd68abf124ee1913771fc242c
rsh-server-0.17-40.el5.i386.rpm
File outdated by:  RHBA-2011:1429
    MD5: 0b3d6736b5cbfbf49282dbd27c9d6b06
 
IA-64:
rsh-0.17-40.el5.ia64.rpm
File outdated by:  RHBA-2011:1429
    MD5: 71e10db7c16dac556ee6a09b58c3e1fb
rsh-server-0.17-40.el5.ia64.rpm
File outdated by:  RHBA-2011:1429
    MD5: 1df5805f3de9a99680d926a72ac4bddd
 
PPC:
rsh-0.17-40.el5.ppc.rpm
File outdated by:  RHBA-2011:1429
    MD5: f2a878304d0793637cf74c48740840d6
rsh-server-0.17-40.el5.ppc.rpm
File outdated by:  RHBA-2011:1429
    MD5: 3175c547255b5735fd5225cd540f6de4
 
s390x:
rsh-0.17-40.el5.s390x.rpm
File outdated by:  RHBA-2011:1429
    MD5: 72936aae3bf35fd4a95ad72982fd65df
rsh-server-0.17-40.el5.s390x.rpm
File outdated by:  RHBA-2011:1429
    MD5: a03f337eafd6a719e1b6da74d8a75948
 
x86_64:
rsh-0.17-40.el5.x86_64.rpm
File outdated by:  RHBA-2011:1429
    MD5: 772d56ca8e7e37d9bcc72a2715696cb7
rsh-server-0.17-40.el5.x86_64.rpm
File outdated by:  RHBA-2011:1429
    MD5: b62c95915b96b392cc31a13173da27cb
 
Red Hat Enterprise Linux Desktop (v. 5 client)

SRPMS:
rsh-0.17-40.el5.src.rpm
File outdated by:  RHBA-2011:1429
    MD5: a5540711fd8aaad7485beb0b3271629d
 
IA-32:
rsh-0.17-40.el5.i386.rpm
File outdated by:  RHBA-2011:1429
    MD5: 6f90d4dcd68abf124ee1913771fc242c
rsh-server-0.17-40.el5.i386.rpm
File outdated by:  RHBA-2011:1429
    MD5: 0b3d6736b5cbfbf49282dbd27c9d6b06
 
x86_64:
rsh-0.17-40.el5.x86_64.rpm
File outdated by:  RHBA-2011:1429
    MD5: 772d56ca8e7e37d9bcc72a2715696cb7
rsh-server-0.17-40.el5.x86_64.rpm
File outdated by:  RHBA-2011:1429
    MD5: b62c95915b96b392cc31a13173da27cb
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

434938 - [PATCH] rshd access pam_env
436748 - rexec username limit is 16 characters, not 14
461903 - rcp does not return ENOSPC error on full NFS-File system


Keywords

nfs, pam_env, username


These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/