Synopsis

tcp_wrappers bug fix update

Type/Severity

Bug Fix Advisory

Topic

Updated tcp_wrappers packages that fix several bugs are now available.

Description

The tcp_wrappers package provides small daemon programs which can monitor
and filter incoming requests for systat, finger, FTP, telnet, rlogin, rsh,
exec, tftp, talk and other network services. It also contains the libwrap
library that adds the same filtering capabilities to programs linked
against it, like sshd and more.

This update brings the following changes:

• localhost and localhost.localdomain are treated as being equivalent when
  comparing the client hostname and the list of allowed/denied hostnames.
  
• the hosts_ctl function uses the address parameter to get the ip address
  and resolve it to symbolic hostname, if not given.
  
• the behavior of signal handling when the "spawn" option is used has been
  changed to be transparent to the application using the library.
  

These fixes correct the behavior of certain applications, including
net-snmp and vsftpd.

Users should upgrade to this updated package, which resolves these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 241357 - allowed vsftp session hangs when tcp wrappers spawn is used
• BZ - 246216 - IPv6: bad interaction between tcp_wrappers and DNS, vsftpd

CVEs

• CVE-2009-0786

References

(none)

Red Hat Enterprise Linux Server 5

SRPM
tcp_wrappers-7.6-40.4.el5.src.rpm	SHA-256: 69661ef247f18bb2c518a910df1fe0070dfbf49b166d2a3478eb5465365cc013
x86_64
tcp_wrappers-7.6-40.4.el5.i386.rpm	SHA-256: b29b9aacbb45c5f5f55eeaebb84b1026fb3b79c14d797e1a7914520a03703cd9
tcp_wrappers-7.6-40.4.el5.x86_64.rpm	SHA-256: 314ea8298855a2fbed0128f65f68e0789610d5735c3f718c0c016609ce191372
ia64
tcp_wrappers-7.6-40.4.el5.ia64.rpm	SHA-256: 3105df32dfaa868721613adc1d5ad24a3d327d84fd3a29a07c3d8bcc0f060a21
i386
tcp_wrappers-7.6-40.4.el5.i386.rpm	SHA-256: b29b9aacbb45c5f5f55eeaebb84b1026fb3b79c14d797e1a7914520a03703cd9

Red Hat Enterprise Linux Workstation 5

SRPM
tcp_wrappers-7.6-40.4.el5.src.rpm	SHA-256: 69661ef247f18bb2c518a910df1fe0070dfbf49b166d2a3478eb5465365cc013
x86_64
tcp_wrappers-7.6-40.4.el5.i386.rpm	SHA-256: b29b9aacbb45c5f5f55eeaebb84b1026fb3b79c14d797e1a7914520a03703cd9
tcp_wrappers-7.6-40.4.el5.x86_64.rpm	SHA-256: 314ea8298855a2fbed0128f65f68e0789610d5735c3f718c0c016609ce191372
i386
tcp_wrappers-7.6-40.4.el5.i386.rpm	SHA-256: b29b9aacbb45c5f5f55eeaebb84b1026fb3b79c14d797e1a7914520a03703cd9

Red Hat Enterprise Linux Desktop 5

SRPM
tcp_wrappers-7.6-40.4.el5.src.rpm	SHA-256: 69661ef247f18bb2c518a910df1fe0070dfbf49b166d2a3478eb5465365cc013
x86_64
tcp_wrappers-7.6-40.4.el5.i386.rpm	SHA-256: b29b9aacbb45c5f5f55eeaebb84b1026fb3b79c14d797e1a7914520a03703cd9
tcp_wrappers-7.6-40.4.el5.x86_64.rpm	SHA-256: 314ea8298855a2fbed0128f65f68e0789610d5735c3f718c0c016609ce191372
i386
tcp_wrappers-7.6-40.4.el5.i386.rpm	SHA-256: b29b9aacbb45c5f5f55eeaebb84b1026fb3b79c14d797e1a7914520a03703cd9

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
tcp_wrappers-7.6-40.4.el5.src.rpm	SHA-256: 69661ef247f18bb2c518a910df1fe0070dfbf49b166d2a3478eb5465365cc013
s390x
tcp_wrappers-7.6-40.4.el5.s390.rpm	SHA-256: c46b344ebcbc72c8f38a65228bf3e1d9afd9c679e29244486f7421071774dba2
tcp_wrappers-7.6-40.4.el5.s390x.rpm	SHA-256: 4894617887c7782937abd5eba2e1a11ae9633a219e645a166b93a2ce41295015

Red Hat Enterprise Linux for Power, big endian 5

SRPM
tcp_wrappers-7.6-40.4.el5.src.rpm	SHA-256: 69661ef247f18bb2c518a910df1fe0070dfbf49b166d2a3478eb5465365cc013
ppc
tcp_wrappers-7.6-40.4.el5.ppc.rpm	SHA-256: 3d441493a9f192582484b11dd82d4cb1c5da59368b698f42fb94fbde8f54fed9
tcp_wrappers-7.6-40.4.el5.ppc64.rpm	SHA-256: 03b0c46d9671bb10e588d5a7df0294287dd3bf511cb09b52c791c6a10055d5df

Red Hat Enterprise Linux Server from RHUI 5

SRPM
tcp_wrappers-7.6-40.4.el5.src.rpm	SHA-256: 69661ef247f18bb2c518a910df1fe0070dfbf49b166d2a3478eb5465365cc013
x86_64
tcp_wrappers-7.6-40.4.el5.i386.rpm	SHA-256: b29b9aacbb45c5f5f55eeaebb84b1026fb3b79c14d797e1a7914520a03703cd9
tcp_wrappers-7.6-40.4.el5.x86_64.rpm	SHA-256: 314ea8298855a2fbed0128f65f68e0789610d5735c3f718c0c016609ce191372
i386
tcp_wrappers-7.6-40.4.el5.i386.rpm	SHA-256: b29b9aacbb45c5f5f55eeaebb84b1026fb3b79c14d797e1a7914520a03703cd9