RHBA-2014:1587 - Bug Fix Advisory

Topic

Updated autofs packages that fix several bugs are now available for Red Hat
Enterprise Linux 6.

Description

The autofs utility controls the operation of the automount daemon. The daemon
automatically mounts file systems when in use and unmounts them when they are
not busy.

This update fixes the following bugs:

• The am-utils package, which provides automatic mounting of maps in the amd

format,
is no longer supported in Red Hat Enterprise Linux 6. However, amd-formatted
maps are still needed for example when using keys containing the forward slash
(/), using wildcard matching for keys, or performing more complex actions after
the key is matched. This update adds a parser for amd-formatted maps to the
autofs utility. (BZ#994217)

• If an IPv6 link-local address contained the percent sign (%), the autofs

utility incorrectly reported the address as invalid. The mount location validity
check has been updated, and the incorrect reports no longer occur in the
described case. (BZ#1036032)

• When checking the mount option string, the automount daemon did not take into

account the length of the string, which led to incorrect comparisons. As a
consequence, the mount probes did not include NFS version 3 when the "-v" option
was used, and under some circumstances, the mounts were not created properly.
The option matching has been modified to account for option length, thus fixing
this bug. (BZ#1038696)

• Due to previous changes to the autofs utility, autofs was not properly

handling remote procedure calls (RPC) to probe server availability.
Consequently, autofs was not querying the portmapper service for NFS version 2
and NFS version 3 mounts correctly. The RPC handling in autofs has been updated,
and autofs now queries host availability properly. (BZ#1046164)

• The negative cache timeout was not handled properly by the autofs utility.

Consequently, autofs was not correctly reading included automounter maps. This
update fixes the handling of the negative cache in autofs. (BZ#1059549)

• The autofs utility did not apply mutual exclusion when using the

initialization and termination functions from the OpenLDAP library. As these
functions are not thread-safe, a double free error occurred and autofs
terminated unexpectedly. This bug has been fixed by adding a mutual exclusion
condition for the aforementioned OpenLDAP functions. (BZ#1068999, BZ#1081285)

• The autofs utility did not correctly process the output from the scandir()

function. Consequently, autofs could terminate unexpectedly with a segmentation
fault. The autofs utility has been modified to correctly read the scandir()
output. (BZ#1073197)

• If the standard I/O file descriptors were closed by a process that started the

autofs utility, autofs, before entering daemon state, could create file
descriptor corresponding to one of the standard I/O file descriptors. When
autofs entered daemon mode, these file descriptors were closed and autofs
terminated unexpectedly. Now, the device control file descriptor is closed after
the autofs file system version check and a new descriptor is opened after autofs
enters daemon mode. (BZ#1081479)

• The autofs utility did not properly check for entries that corresponded to

previously failed mount attempts, the so-called "negative entries".
Consequently, when the "autofs mount" command was specified with the "browse"
option, the autofs utility could create directories that did not correspond to
map entries within the corresponding automounter map. With this update, the
check for negative map entries has been fixed. (BZ#1083744)

• When calling the autofs parser, the scan buffer

was sometimes not properly reset for the next scan. Consequently, incorrect
success
returns occurred for subsequent operations. The autofs utility attempted to add
these returned entries, which led to a segmentation fault. This bug has been
fixed by adding a function that resets the parse buffer at the start of each map
entry scan. (BZ#1089576)

Users of autofs are advised to upgrade to these updated packages, which fix
these bugs.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 1036032 - with IPv6 link-local address parse err: invalid character "%"
• BZ - 1038696 - autofs-5.0.5-88.el6 breaks maps that have a -v in the options
• BZ - 1083744 - autofs can ghost non-existent map entries given the right timing
• BZ - 1089576 - segfault in automount

CVEs

(none)

References

(none)