RHBA-2013:0418 - Bug Fix Advisory

Topic

Updated tog-pegasus packages that fix several bugs and add various enhancements
are now available for Red Hat Enterprise Linux 6.

Description

OpenPegasus Web-Based Enterprise Management (WBEM) Services for Linux enables
management solutions that deliver increased control of enterprise resources.
WBEM is a platform and resource independent of Distributed Management Task Force
(DMTF) standard that defines a common information model and communication
protocol for monitoring and controlling resources from diverse sources.

The tog-pegasus package has been upgraded to upstream version 2.12.0, which
provides a number of bug fixes and enhancements over the previous version.
(BZ#739118, BZ#825471)

This update also fixes the following bugs:

• Previously, non-array properties of CMPI instances were not checked for NULL

values in the cimserver daemon (OpenPegasus CIM server). This led to an
unexpected termination of cimserver. This update provides an upstream patch for
cimserver. Now, cimserver correctly returns instances with non-array properties
including those containing NULL values. (BZ#812892)

• Prior to this update, all connections to cimserver were considered local host.

Consequently, cimsever could not discern between local and remote connections
and between granted and denied access. A patch has been provided to fix this
bug. Now, cimserver is again capable of recognizing whether, firstly,
connections are local or remote and, secondly, whether the access per user will
be granted or denied. (BZ#869664)

In addition, this update adds the following enhancement:

• The cimserver daemon uses all of well-known ports based on CIM/WBEM technology

for network communication. This update provides the user with an option to
configure, which interfaces have to be used and to restrict cimserver to listen
only on selected network interfaces. (BZ#716474)

Users of tog-pegasus are advised to upgrade to these updated packages, which fix
these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 759064 - wrong group ownership of symlinks in -libs subpackage
• BZ - 760187 - tog-pegasus consumes libraries from tog-pegasus-libs but does not have explicit package version requirement
• BZ - 800319 - Invocation of useradd without specifying a UID

CVEs

(none)

References

(none)