RHBA-2009:0250 - Bug Fix Advisory

Topic

Updated tog-pegasus package that fix various bugs and add enhancements
is now available.

Description

OpenPegasus WBEM Services for Linux enables management solutions that
deliver increased control of enterprise resources. WBEM is a platform and
resource independent DMTF standard that defines a common information model
and communication protocol for monitoring and controlling resources from
diverse sources.

These updated packages upgrade tog-pegasus to the more recent upstream
version 2.7.1, which provides a number of bug fixes and enhancements over
the previous packaged version.

In addition, these updated packages provide fixes for the following bugs:

• installing the tog-pegasus packages did not set up the InterOp namespace

correctly. When installing these updated packages, a post-install script
sets up the InterOp namespace correctly, thus resolving this issue.

• the tog-pegasus init script returned an incorrect exit status when the

service was stopped and either a pid or a lock file existed. In these
updated packages, the tog-pegasus init script has been made compliant with
Linux Standard Base (LSB) guidelines, thus resolving the issue.

• a bug in the setElementAt() function when used with a CMPIValue of type

CMPI_chars led to a dangling pointer if the character data had a shorter
lifetime than that of the array, which could have caused CMPI providers--or
even the CIM Server--to crash. This pointer error has been fixed in these
updated packages so that the setElementAt() function works correctly, thus
resolving the issue.

• the CMPI spec states that MI factories "may return a NULL pointer

indicating that a particular MI type is not supported, despite the fact
that the factory is found". Previous tog-pegasus package did not adhere to
the CMPI spec, which meant that CMPI providers returning such errors were
unloadable by tog-pegasus. This updated tog-pegasus package resolves this
issue, and CMPI providers that return errors as per the CMPI standard are
now able to be unloaded under tog-pegasus.

• tog-pegasus did not include a "Content-Length" header when sending an

HTTP 401 (Unauthorized) response, which led to a situation in which clients
became unresponsive and possibly causing local authentication to fail. In
these updated packages, tog-pegasus includes a "Content-Length: 0" header
when sending HTTP 401 (Unauthorized) responses, thus resolving this issue.

• although the environment variable PEGASUS_USE_NET_SNMP was set to true in

the previous packages, the library for the SNMP Indication Handler was not
included in the package. The correct SNMP Indication Handler shared object
file (and a "versioned" symbolic link to it) has been added to these
updated packages, thus enabling tog-pegasus to use Net-SNMP as was intended.

Users are advised to upgrade to these updated tog-pegasus packages, which
resolve these issues and add these enhancements.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 326281 - Wrong return code from init script
• BZ - 447823 - No cimsub binary in tog-pegasus RPM
• BZ - 452930 - SNMP Indication Handler not included in 2.7 package
• BZ - 454589 - setElementAt() doesn't copy value of CMPI_char parameter
• BZ - 454590 - CMPI MI factories that return errors are unsupported
• BZ - 454591 - HTTP 401 responses lack Content-Length headers

CVEs

(none)

References

(none)