RHBA-2013:0330 - Bug Fix Advisory

Topic

Updated ypserv packages that fix four bugs are now available for Red Hat
Enterprise Linux 6.

Description

The ypserv packages provide the Network Information Service (NIS) server. NIS is
a system that provides network information such as login names, passwords, home
directories, and group information to all the machines on a network.

This update fixes the following bugs:

• Prior to this update, the NIS server was returning "0" (YP_FALSE) instead of

"-1" (YP_NOMAP) after a request for a database not present in the server's
domain. This behavior caused the autofs mount attempts to fail on Solaris
clients. With this update, the return value has been fixed and the autofs mounts
no longer fail on Solaris clients. (BZ#790812)

• Previously, when the crypt() function returned NULL, the yppasswd utility did

not properly recognize the return value. This bug has been fixed, and the NULL
return values of crypt() are now recognized and reported correctly by yppaswd.
(BZ#816981)

• Previously, the ypserv utility allocated large amounts of virtual memory when

parsing XDR requests, but failed to free that memory in case the request was not
parsed successfully. Consequently, memory leaks occurred. With this update, a
patch has been provided to free the already allocated memory when parsing of a
request fails. As a result, the memory leaks no longer occur. (BZ#845283)

• Previously, the yppush(8) man page did not describe how to change settings of

the yppush utility. The manual page has been amended to specify that the
settings can be changed in the /var/yp/Makefile file. (BZ#863952)

All users of ypserv are advised to upgrade to these updated packages, which fix
these bugs.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 816981 - yppasswdd doesn't handle crypt() returning NULL
• BZ - 863952 - Enhance yppush man page with port number specification

CVEs

(none)

References

(none)