RHBA-2012:0455 - Bug Fix Advisory

Topic

Updated libuser packages that fix three bugs are now available for Red Hat
Enterprise Linux 6.

Description

The libuser library implements a standardized interface for manipulating and
administering user and group accounts. The library uses pluggable back-ends to
interface to its data sources. Sample applications modeled after those included
with the shadow password suite are included.

This update fixes the following bugs:

• When creating a user account in Lightweight Directory Access Protocol (LDAP),

the libuser library used the value of the "gecos" attribute as the default value
of the "cn" attribute. When the "gecos" attribute was empty, this made the value
of "cn" invalid, and the creation of the user account failed. With this update,
the user name of the account is stored in the "cn" attribute if the "gecos"
attribute is empty, thus allowing successful creation of the user account.
(BZ#670151)

• When populating a home directory by copying files from the /etc/skel

directory, libuser ignored the "set user-id" and "set group-id" flags. This made
it impossible to set up group-shared directories in a home directory. With this
update, the "set user-id" and "set group-id" flags are preserved. (BZ#724987)

• Previously, when searching for the user or group account information in files

of certain sizes, the libuser library could terminate unexpectedly with a
segmentation fault. A patch has been applied to address this issue, and crashes
no longer occur in the aforementioned scenario. (BZ#788521)

All users of libuser are advised to upgrade to these updated packages, which fix
these bugs.

Solution

Before applying this update, make sure all previously-released errata relevant
to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 670151 - Traceback when adding user via ldap

CVEs

(none)

References

(none)