RHBA-2008:0160 - Bug Fix Advisory

Topic

Updated tftp packages that fix several bugs are now available.

Description

The Trivial File Transfer Protocol (TFTP) is normally used only for booting
diskless workstations. The tftp package provides the user interface for
TFTP, which allows users to transfer files to and from a remote machine.
The tftp-server package provides the server for TFTP which allows users to
transfer files to and from a remote machine.

These updated packages fix the following bugs:

• when a tftp client sent a request to 255.255.255.255 (the limited

broadcast address) tftpd failed. tfptd would remember the address the
client sent the address to (255.255.255.255) and attempt to respond using
this as the source address. This is the right thing to do for multi-homed
tftp servers but failed because using the limited broadcast address as a
source address is not allowed. These updated packages fix this by changing
the source address used by tftpd when responding to such requests from
INADDR_BROADCAST to INADDR_ANY.

• tftp-server rejected "r" re-mapping rules (for re-writing a matched

string with a given pattern) incorrectly. Amongst other errors, this
prevented "\\" being re-mapped to "/", causing problems for Windows
clients. These updated packages no longer reject "r" rules incorrectly. As
well, they now return an informative error message when they correctly
reject a rule.

• the time stamp on tftp-server log files in /var/log/messages used UTC

rather than the local system time. The time stamp on log files produced by
these updated packages now uses the local system time.

All users of tftp-server should upgrade to these updated packages, which
resolve these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 242653 - tftp-server log in GMT instead of localtime

CVEs

(none)

References

(none)