RHBA-2012:1035 - Bug Fix Advisory

Topic

Updated telnet packages that fix four bugs are now available for Red Hat
Enterprise Linux 5.

Description

Telnet is a popular protocol for logging in to remote systems over the Internet.
The telnet service is disabled by default.

This update fixes following bugs:

• Prior to this update, the telnet.spec file used the "%{dist}" macro instead of

the "%{?dist}", which violated packaging guidelines. This update replaces the
macro with the correct one. (BZ#440614)

• Prior to this update, the telnet utility used the sockaddr structure as

storage for IPv6 addresses. As a consequence, telnet could emit incomplete IPv6
addresses because the sockaddr structure is to small to hold an IPv6 address.
This update modifies telnet to use the sockaddr_storage structure as IPv6
address storage and now emits complete IPv6 addresses. (BZ#678336)

• Prior to this update, the telnet utility could enter an infinite loop when the

user specified the "-b" parameter with a non-existing network interface. This
update modifies the telnet command to print errors when users specify a
non-existing network interface. (BZ#772860)

• Prior to this update, the in.telnetd daemon could fail to update information

in the /var/run/utmp directory when a deadlock occured in a telnet session. This
update modifies telnetd to update /var/run/utmp correctly. (BZ#825946)

All users of telnet are advised to upgrade to these updated packages, which fix
these bugs.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258/

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 440614 - there should be %{?dist} instead of %{dist} in the *.spec on the Release: line
• BZ - 678336 - telnetd sockaddr is too small for IPV6 connections

CVEs

(none)

References

(none)