RHBA-2008:0330 - Bug Fix Advisory

Topic

Updated OpenIPMI packages that fix several bugs and add enhancements are
now available.

Description

OpenIPMI (Intelligent Platform Management Interface) provides command line
tools and utilities to access platform information, allowing system
administrators to monitor system health and manage systems.

These updated packages fix the following bugs:

• running the "ipmitool user help" command displayed a "priv" command;

however, the "ipmitool" man page was missing a description for "priv". In
these updated packages, the "ipmitool" man page has been updated with
descriptions for the "priv" command.

• running the "ipmitool sol help" command displayed a "looptest" command;

however, the "ipmitool" man page was missing a description for "looptest".
In these updated packages, the "ipmitool" man page has been updated with
descriptions for the "looptest" command.

• in certain cases, SOL packets could be missed, causing

"ipmi_lan_poll_recv()" to return a NULL pointer. If a user set up a SOL
session in one window, for example, using "sol activate", and then
deactivated the SOL session in different window, for example, using "sol
deactivate", the SOL session in the first window appeared to hang, and then
a segmentation fault occurred. In these updated packages, a check has been
added for these situations, which resolves this issue.

• the OpenIPMI-python package contained a spelling mistake in the RPM

description. Running the "rpm -qi OpenIPMI-python" command returned "The
OpenIPMI-perl package...". In these updated packages, the correct name,
"OpenIPMI-python", is returned.

As well, these updated packages add the following enhancements:

• when using "ipmitool", a user can use the "-a" option to prompt for the

password, and not have the password visible in the "ps" output; however,
when using a key, users were never prompted for the key to use, and the key
was always visible in the "ps" output. In these updated packages, a new
"ipmitool" option, "-K", has been added, so that users can be prompted for
the key to use, and so that the key is not displayed in the "ps" output.

• when running "ipmicmd", it was not possible to hide user passwords if

they were passed as an "ipmicmd" option. The "ps" command could be used to
display user passwords. In these updated packages, a new "ipmicmd" option,
"-p", has been added, so that users can supply a password, without having
it be exposed by the "ps" command. This option is similar to running
"ipmitool" with the "-a" option.

Users of OpenIPMI are advised to upgrade to these updated packages, which
resolve these issues and add these enhancements.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 238970 - ipmitool doesn't propose to hide the key as '-a' does for password.
• BZ - 242403 - manpage for ipmitool needs to document loopback feature of sol
• BZ - 306941 - ipmitool SOL session segfaults
• BZ - 314031 - Typo in OpenIPMI-python package description

CVEs

(none)

References

(none)