RHBA-2014:1584 - Bug Fix Advisory

Topic

Updated hmaccalc packages that fix one bug are now available for Red Hat
Enterprise Linux 6.

Description

The hmaccalc packages contain tools to calculate HMAC (Hash-based Message
Authentication Code) values for files. The names and interfaces were designed to
mimic those of the sha1sum, sha256sum, sha384sum and sha512sum tools provided by
the coreutils package.

This update fixes the following bug:

• The .hmac files are used to check the kernel image at the boot time; if the

check fails, the boot process is expected to be halted. Previously, the hmaccalc
utility did not flag empty .hmac files as an error, allowing the system to boot
even if the boot was supposed to fail. With this update, a patch has been
provided to address this bug. As a result, the system is no longer allowed to
boot in the described scenario. (BZ#1016706)

Users of hmaccalc are advised to upgrade to these updated packages, which fix
this bug.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

CVEs

(none)

References

(none)