RHBA-2011:1706 - Bug Fix Advisory

Topic

Updated krb5-appl packages that fix two bugs and add one enhancement are now
available for Red Hat Enterprise Linux 6.

Description

The krb5-appl packages contain Kerberos-aware versions of clients and servers
for the telnet, FTP, rsh, and rlogin protocols.

This update fixes the following bugs:

• Prior to this update, the default PAM configuration for the FTP server

incorrectly attempted to use the pam_selinux.so module. As a result, users
failed to log in. This update corrects the supplied configuration. Now, the FTP
server works as expected. (BZ#713459)

• Prior to this update, the FTP server did not correctly parse lines in the

/etc/ftpusers file which specified user names in combination with the "restrict"
keyword. This update modifies the code so that the server parses the "restrict"
keyword correctly. (BZ#713521)

This update also adds the following enhancement:

• Prior to this update, the command-line FTP client in the krb5-appl-clients

package did not accept command lines longer than 500 characters. This update
removes this limitation. (BZ#665834, BZ#736364)

All users of krb5-appl are advised to upgrade to these updated packages, which
fix these bugs and add this enhancement.

Solution

Before applying this update, make sure all previously-released errata relevant
to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259/

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 713459 - missing rule for ftpd_t
• BZ - 713521 - krb5ftpd off by one error when reading /etc/ftpusers for restricted users

CVEs

(none)

References

(none)