RHBA-2006:0035 - Bug Fix Advisory

Topic

An updated shadow-utils package that fixes various bugs is now available.

Description

The shadow-utils package includes the necessary programs for converting
UNIX password files to the shadow password format, as well as programs for
managing user and group accounts.

This update fixes the following issues:

• Chage.1 and chage -l give incorrect information about sp_inact.
• Useradd segfaults if there are many users in one group.
• The command usermod -p did not change the password last changed

field in the shadow file

• The audit record emitted from userdel when a user's mail file is

removed incorrectly states that the operation failed even when it
succeeded.

All users of shadow-utils are advised to upgrade to this updated package,
which resolves these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 125510 - useradd segfaults if too many users in one group
• BZ - 137498 - chage.1 gives incorrect information about sp_inact
• BZ - 174392 - incorrect audit record in userdel

CVEs

(none)

References

(none)