RHBA-2009:0453 - Bug Fix Advisory

Topic

Updated tcp_wrappers packages that fix a bug are now available.

Description

The tcp_wrappers package provides small daemon programs which can monitor
and filter incoming requests for systat, finger, FTP, telnet, rlogin, rsh,
exec, tftp, talk and other network services. It also contains the libwrap
library that adds the same filtering capabilities to programs linked
against it, like sshd and more.

These updated tcp_wrappers packages fix the following bug:

• when tcp_wrappers performed an ident query which failed, applications

which used tcp_wrappers were then unable to receive SIGALRM (alarm)
signals. This has been fixed by correctly restoring signal masks in this
update, so that applications using tcp_wrappers are now able to receive and
handle SIGALRM signals following a failed ident query.

All users of tcp_wrappers are advised to upgrade to these updated packages,
which resolve this issue.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 446103 - TCP wrappers leave SIGALRM blocked when ident fails

CVEs

(none)

References

(none)