RHBA-2015:1449 - Bug Fix Advisory

标题

Updated openhpi32 packages that fix several bugs and add various enhancements
are now available for Red Hat Enterprise Linux 6.

描述

OpenHPI is an open source project created with the intent of providing an
implementation of the SA Forum's Hardware Platform Interface (HPI). HPI provides
an abstracted interface to managing computer hardware, typically for chassis and
rack based servers. HPI includes resource modeling; access to and control over
sensor, control, watchdog, and inventory data associated with resources;
abstracted System Event Log interfaces; hardware events and alerts; and a
managed hot swap interface.

The openhpi32 packages have been upgraded to upstream version 3.4.0, which
provides a number of bug fixes and enhancements over the previous version. Among
others:

• Encryption of the configuration file is now allowed, so authentication

credentials for hardware management are no longer available in clear text on the
system

• Support for IPv6 has been fixed in the Onboard Administrator (OA) SOAP plug-in
• The uid_map file is no longer created as world-writable

(BZ#1127907)

This update also fixes the following bugs:

• Prior to this update, a data race condition was present in the Intelligent

Platform Management Interface (IPMI) plug-in within the multi-threaded daemon.
Consequently, the openhpid daemon could terminate unexpectedly with a
segmentation fault. This bug has been fixed, the data structures are now updated
in the correct order, and openhpid no longer crashes in this scenario.
(BZ#1069015)

• Network timeouts were handled incorrectly in the openhpid daemon. As a

consequence, network connections could fail when external plug-ins were used.
With this update, handling of network socket timeouts has been improved in
openhpid, and the described problem no longer occurs. (BZ#1105679)

Users of openhpi32 are advised to upgrade to these updated packages, which fix
these bugs and add these enhancements.

解决方案

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

受影响的产品

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

修复

CVE

(none)

参考

(none)