RHBA-2015:1032 - Bug Fix Advisory

Topic

Updated pam packages that fix one bug are now available for Red Hat Enterprise
Linux 5.

Description

Pluggable Authentication Modules (PAM) provide a system to set up authentication
policies without the need to recompile programs to handle authentication.

This update fixes the following bug:

• Previously, when a system with a large .rhosts file used the rsh shell to

connect to a rlogind server, the authentication took very long to process or
failed due to a timeout. This update adjusts the pam_rhosts_auth module so that
it performs DNS lookups for host names only in .rhosts entries with matching
users. As a result, rlogind authentication with large .rhosts files is in most
cases significantly faster, and no longer times out. (BZ#1217181)

Users of PAM are advised to upgrade to these updated packages, which fix this
bug.

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

CVEs

(none)

References

(none)