Red Hat Product Errata RHBA-2014:0587 - Bug Fix Advisory
Issued:
2014-06-02
Updated:
2014-10-13

RHBA-2014:0587 - Bug Fix Advisory

Synopsis

finger bug fix update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated finger packages that fix one bug are now available for Red Hat
Enterprise Linux 6.

Description

The finger utility allows users to display information about users on the
system, including their login names, full names, and the time they logged in to
the system.

The update fixes the following bug:

  • When the "compat" method is specified in the nsswitch.conf file, special

entries containing the "+" or "-" characters are allowed to be used in the
/etc/passwd file. Previously, when the finger utility was run with a "username"
argument on a host that had the special entries in /etc/passwd, finger
terminated with a segmentation fault. With this update, the code that handles
the "username" argument has been fixed to perform the necessary checks and the
finger utility no longer crashes in the described scenario. (BZ#816328)

All users of finger are advised to upgrade to these updated packages, which fix
this bug.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
  • Red Hat Enterprise Linux Workstation 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 i386
  • Red Hat Enterprise Linux Desktop 6 x86_64
  • Red Hat Enterprise Linux Desktop 6 i386
  • Red Hat Enterprise Linux for IBM z Systems 6 s390x
  • Red Hat Enterprise Linux for Power, big endian 6 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 6 x86_64
  • Red Hat Enterprise Linux Server from RHUI 6 x86_64
  • Red Hat Enterprise Linux Server from RHUI 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

  • BZ - 816328 - finger segfaults if pw->pw_gecos is NULL.

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 6

SRPM
finger-0.17-40.el6.src.rpm SHA-256: 83c8cfb9ce044032e41d8390b2d5bb18b5ae47292442d51c0c45c463ff2812a3
x86_64
finger-0.17-40.el6.x86_64.rpm SHA-256: 18dc32038497e1aa367a306552cc83574279bf6b8ec38a4e660d8e69a90209e1
finger-0.17-40.el6.x86_64.rpm SHA-256: 18dc32038497e1aa367a306552cc83574279bf6b8ec38a4e660d8e69a90209e1
finger-debuginfo-0.17-40.el6.x86_64.rpm SHA-256: 00ca8dd22082f813060628ad4109273a9ee7a5b765bc32d0549f8a2d5d14d527
finger-debuginfo-0.17-40.el6.x86_64.rpm SHA-256: 00ca8dd22082f813060628ad4109273a9ee7a5b765bc32d0549f8a2d5d14d527
finger-server-0.17-40.el6.x86_64.rpm SHA-256: 75dacc9905ba63cfe07834fa95cc6744eeb8dd63a0065e0a25c05a0b083c13b3
finger-server-0.17-40.el6.x86_64.rpm SHA-256: 75dacc9905ba63cfe07834fa95cc6744eeb8dd63a0065e0a25c05a0b083c13b3
i386
finger-0.17-40.el6.i686.rpm SHA-256: 3ed8ea7179d4d1ac8e8fe07bbea3d99f0682657b0e6a1dba463c426bb2581b05
finger-debuginfo-0.17-40.el6.i686.rpm SHA-256: 1a192a363db556488852ee9a428a104b81537262da18356091ef17c45ebbebc6
finger-server-0.17-40.el6.i686.rpm SHA-256: 81a5ee4265209b5511dd28fd30d25c32a212e8172e6cb41888377e0b50c01092

Red Hat Enterprise Linux Server - Extended Life Cycle Support 6

SRPM
finger-0.17-40.el6.src.rpm SHA-256: 83c8cfb9ce044032e41d8390b2d5bb18b5ae47292442d51c0c45c463ff2812a3
x86_64
finger-0.17-40.el6.x86_64.rpm SHA-256: 18dc32038497e1aa367a306552cc83574279bf6b8ec38a4e660d8e69a90209e1
finger-debuginfo-0.17-40.el6.x86_64.rpm SHA-256: 00ca8dd22082f813060628ad4109273a9ee7a5b765bc32d0549f8a2d5d14d527
finger-server-0.17-40.el6.x86_64.rpm SHA-256: 75dacc9905ba63cfe07834fa95cc6744eeb8dd63a0065e0a25c05a0b083c13b3
i386
finger-0.17-40.el6.i686.rpm SHA-256: 3ed8ea7179d4d1ac8e8fe07bbea3d99f0682657b0e6a1dba463c426bb2581b05
finger-debuginfo-0.17-40.el6.i686.rpm SHA-256: 1a192a363db556488852ee9a428a104b81537262da18356091ef17c45ebbebc6
finger-server-0.17-40.el6.i686.rpm SHA-256: 81a5ee4265209b5511dd28fd30d25c32a212e8172e6cb41888377e0b50c01092

Red Hat Enterprise Linux Workstation 6

SRPM
finger-0.17-40.el6.src.rpm SHA-256: 83c8cfb9ce044032e41d8390b2d5bb18b5ae47292442d51c0c45c463ff2812a3
x86_64
finger-0.17-40.el6.x86_64.rpm SHA-256: 18dc32038497e1aa367a306552cc83574279bf6b8ec38a4e660d8e69a90209e1
finger-debuginfo-0.17-40.el6.x86_64.rpm SHA-256: 00ca8dd22082f813060628ad4109273a9ee7a5b765bc32d0549f8a2d5d14d527
finger-server-0.17-40.el6.x86_64.rpm SHA-256: 75dacc9905ba63cfe07834fa95cc6744eeb8dd63a0065e0a25c05a0b083c13b3
i386
finger-0.17-40.el6.i686.rpm SHA-256: 3ed8ea7179d4d1ac8e8fe07bbea3d99f0682657b0e6a1dba463c426bb2581b05
finger-debuginfo-0.17-40.el6.i686.rpm SHA-256: 1a192a363db556488852ee9a428a104b81537262da18356091ef17c45ebbebc6
finger-server-0.17-40.el6.i686.rpm SHA-256: 81a5ee4265209b5511dd28fd30d25c32a212e8172e6cb41888377e0b50c01092

Red Hat Enterprise Linux Desktop 6

SRPM
finger-0.17-40.el6.src.rpm SHA-256: 83c8cfb9ce044032e41d8390b2d5bb18b5ae47292442d51c0c45c463ff2812a3
x86_64
finger-0.17-40.el6.x86_64.rpm SHA-256: 18dc32038497e1aa367a306552cc83574279bf6b8ec38a4e660d8e69a90209e1
finger-debuginfo-0.17-40.el6.x86_64.rpm SHA-256: 00ca8dd22082f813060628ad4109273a9ee7a5b765bc32d0549f8a2d5d14d527
finger-server-0.17-40.el6.x86_64.rpm SHA-256: 75dacc9905ba63cfe07834fa95cc6744eeb8dd63a0065e0a25c05a0b083c13b3
i386
finger-0.17-40.el6.i686.rpm SHA-256: 3ed8ea7179d4d1ac8e8fe07bbea3d99f0682657b0e6a1dba463c426bb2581b05
finger-debuginfo-0.17-40.el6.i686.rpm SHA-256: 1a192a363db556488852ee9a428a104b81537262da18356091ef17c45ebbebc6
finger-server-0.17-40.el6.i686.rpm SHA-256: 81a5ee4265209b5511dd28fd30d25c32a212e8172e6cb41888377e0b50c01092

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
finger-0.17-40.el6.src.rpm SHA-256: 83c8cfb9ce044032e41d8390b2d5bb18b5ae47292442d51c0c45c463ff2812a3
s390x
finger-0.17-40.el6.s390x.rpm SHA-256: ee6825eed0abf1674ece3ce13dfbee36927bcf7e6e5fb92235ebcdc3ed9300d3
finger-debuginfo-0.17-40.el6.s390x.rpm SHA-256: d6e48287f20b71d25ac095a863929a520a61bdb7b7fe319d9326a391ec64bb30
finger-server-0.17-40.el6.s390x.rpm SHA-256: 2a02ecad5d6e34450880624b4953136b3e9279d84fd56e44b3e07cff367c0add

Red Hat Enterprise Linux for Power, big endian 6

SRPM
finger-0.17-40.el6.src.rpm SHA-256: 83c8cfb9ce044032e41d8390b2d5bb18b5ae47292442d51c0c45c463ff2812a3
ppc64
finger-0.17-40.el6.ppc64.rpm SHA-256: 28457debcc31ce3302a1a400f8010a9a272c86cd910722a7393c7b451a167132
finger-debuginfo-0.17-40.el6.ppc64.rpm SHA-256: e4ac73844972113e90b6ec1b16a5e60881deaaf50d4a60b15eebae30bd864293
finger-server-0.17-40.el6.ppc64.rpm SHA-256: a3f93c56e9825a855e1fdfd1954f4b933a34d2d5094e29e5080b0ecfdeb247dc

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
finger-0.17-40.el6.src.rpm SHA-256: 83c8cfb9ce044032e41d8390b2d5bb18b5ae47292442d51c0c45c463ff2812a3
x86_64
finger-0.17-40.el6.x86_64.rpm SHA-256: 18dc32038497e1aa367a306552cc83574279bf6b8ec38a4e660d8e69a90209e1
finger-debuginfo-0.17-40.el6.x86_64.rpm SHA-256: 00ca8dd22082f813060628ad4109273a9ee7a5b765bc32d0549f8a2d5d14d527
finger-server-0.17-40.el6.x86_64.rpm SHA-256: 75dacc9905ba63cfe07834fa95cc6744eeb8dd63a0065e0a25c05a0b083c13b3

Red Hat Enterprise Linux Server from RHUI 6

SRPM
finger-0.17-40.el6.src.rpm SHA-256: 83c8cfb9ce044032e41d8390b2d5bb18b5ae47292442d51c0c45c463ff2812a3
x86_64
finger-0.17-40.el6.x86_64.rpm SHA-256: 18dc32038497e1aa367a306552cc83574279bf6b8ec38a4e660d8e69a90209e1
finger-debuginfo-0.17-40.el6.x86_64.rpm SHA-256: 00ca8dd22082f813060628ad4109273a9ee7a5b765bc32d0549f8a2d5d14d527
finger-server-0.17-40.el6.x86_64.rpm SHA-256: 75dacc9905ba63cfe07834fa95cc6744eeb8dd63a0065e0a25c05a0b083c13b3
i386
finger-0.17-40.el6.i686.rpm SHA-256: 3ed8ea7179d4d1ac8e8fe07bbea3d99f0682657b0e6a1dba463c426bb2581b05
finger-debuginfo-0.17-40.el6.i686.rpm SHA-256: 1a192a363db556488852ee9a428a104b81537262da18356091ef17c45ebbebc6
finger-server-0.17-40.el6.i686.rpm SHA-256: 81a5ee4265209b5511dd28fd30d25c32a212e8172e6cb41888377e0b50c01092

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6

SRPM
finger-0.17-40.el6.src.rpm SHA-256: 83c8cfb9ce044032e41d8390b2d5bb18b5ae47292442d51c0c45c463ff2812a3
s390x
finger-0.17-40.el6.s390x.rpm SHA-256: ee6825eed0abf1674ece3ce13dfbee36927bcf7e6e5fb92235ebcdc3ed9300d3
finger-debuginfo-0.17-40.el6.s390x.rpm SHA-256: d6e48287f20b71d25ac095a863929a520a61bdb7b7fe319d9326a391ec64bb30
finger-server-0.17-40.el6.s390x.rpm SHA-256: 2a02ecad5d6e34450880624b4953136b3e9279d84fd56e44b3e07cff367c0add

Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6

SRPM
finger-0.17-40.el6.src.rpm SHA-256: 83c8cfb9ce044032e41d8390b2d5bb18b5ae47292442d51c0c45c463ff2812a3
x86_64
finger-0.17-40.el6.x86_64.rpm SHA-256: 18dc32038497e1aa367a306552cc83574279bf6b8ec38a4e660d8e69a90209e1
finger-debuginfo-0.17-40.el6.x86_64.rpm SHA-256: 00ca8dd22082f813060628ad4109273a9ee7a5b765bc32d0549f8a2d5d14d527
finger-server-0.17-40.el6.x86_64.rpm SHA-256: 75dacc9905ba63cfe07834fa95cc6744eeb8dd63a0065e0a25c05a0b083c13b3
i386
finger-0.17-40.el6.i686.rpm SHA-256: 3ed8ea7179d4d1ac8e8fe07bbea3d99f0682657b0e6a1dba463c426bb2581b05
finger-debuginfo-0.17-40.el6.i686.rpm SHA-256: 1a192a363db556488852ee9a428a104b81537262da18356091ef17c45ebbebc6
finger-server-0.17-40.el6.i686.rpm SHA-256: 81a5ee4265209b5511dd28fd30d25c32a212e8172e6cb41888377e0b50c01092

Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6

SRPM
finger-0.17-40.el6.src.rpm SHA-256: 83c8cfb9ce044032e41d8390b2d5bb18b5ae47292442d51c0c45c463ff2812a3
s390x
finger-0.17-40.el6.s390x.rpm SHA-256: ee6825eed0abf1674ece3ce13dfbee36927bcf7e6e5fb92235ebcdc3ed9300d3
finger-debuginfo-0.17-40.el6.s390x.rpm SHA-256: d6e48287f20b71d25ac095a863929a520a61bdb7b7fe319d9326a391ec64bb30
finger-server-0.17-40.el6.s390x.rpm SHA-256: 2a02ecad5d6e34450880624b4953136b3e9279d84fd56e44b3e07cff367c0add

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.