RHBA-2011:0823 - Bug Fix Advisory

Topic

An updated shadow-utils package that fixes three bugs is now available for Red
Hat Enterprise Linux 5.

Description

The shadow-utils package includes programs for converting UNIX password files to
the shadow password format, as well as tools for managing user and group
accounts.

This update fixes the following bugs:

• When a new user is created, the content of the /etc/skel/ directory is copied

to the user's home directory. Previously, an attempt to copy these files and
directories from a file system with the support for access control lists (ACLs)
enabled to a file system with ACLs disabled failed with an error, and some files
were not copied. With this update, a patch has been applied to address this
issue, and when a new user is created, the content of the /etc/skel/ directory
is now successfully copied without an error. (BZ#690829)

• Due to incorrect handling of large user and group identifiers (that is, UIDs

and GIDs) on 32-bit systems, the pwconv and pwunconv utilities changed all
identifiers greater than 2147483647 to this value. With this update, the
underlying source code has been adapted to ensure the pwconv and pwunconv
utilities no longer alter the GIDs and UIDs. (BZ#690830)

• Previously, the faillog utility executed command line options as they were

passed instead of parsing all options first. This update applies a patch that
corrects the utility to parse all command line options before executing the
commands. (BZ#690831)

All users of shadow-utils are advised to upgrade to this updated package, which
fixes these bugs.

Solution

Before applying this update, make sure that all previously-released errata
relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.6 ia64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.6 i386
• Red Hat Enterprise Linux Server - AUS 5.6 x86_64
• Red Hat Enterprise Linux Server - AUS 5.6 ia64
• Red Hat Enterprise Linux Server - AUS 5.6 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.6 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.6 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 5.6 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 5.6 i386

Fixes

• BZ - 690829 - No file in /etc/skel is copied by useradd
• BZ - 690830 - pwconv and pwunconv alter uids over 2147483647
• BZ - 690831 - faillog excutes during argument parsing

CVEs

(none)

References

(none)