RHBA-2010:0055 - Bug Fix Advisory

Topic

An updated hmaccalc package that fixes a self-test bug related to binary
prelinking is now available.

Description

The hmaccalc package contains tools to calculate HMAC (Hash-based Message
Authentication Code) values for files. The names and interfaces were
designed to mimic those of the sha1sum, sha256sum, sha384sum and sha512sum
tools provided by the coreutils package.

This updated hmaccalc package fixes the following bug:

• each time one of the tools in the hmaccalc package is used, it performs a

self-test by comparing the checksum of its own binary with the value which
was computed when the binary package was built. However, if an hmaccalc
binary had been prelinked using the "prelink" command, and that command was
not located in one of the directories listed in the PATH environment
variable, then that binary would be unable to use the prelink tool to
verify the checksum against an unmodified copy of itself. This update
contains a backported fix that allows hmaccalc to remember the location of
the prelink command that was available at build time, and to be able to use
it if necessary.

Note that this fix is required in order to build the Linux kernel with
FIPS-compliance (Federal Information Processing Standards) enabled.
(BZ#512275)

All users of hmaccalc are advised to upgrade to this updated package, which
resolves this issue.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 512275 - prelinking /usr/bin/sha512hmac causes self test to fail for non-root users

CVEs

(none)

References

(none)