RHBA-2017:1377 - Bug Fix Advisory

Topic

Updated rsh packages that fix one bug are now available for Red Hat Enterprise Linux 6.

Description

The rsh packages contain programs which allow users to run commands on remote machines (the rsh utility), log on to other machines (the rlogin
utility), copy files between machines (the rcp utility), and programs which provide an alternate method of executing remote commands (the rexec utility). All of these programs are run by the xinetd service and can be configured using the Pluggable Authentication Modules (PAM) system and configuration files in the /etc/xinetd.d/ directory.

This update fixes the following bug:

• Previously, using the rlogin utility to log to a remote machine, the connection was closed on the remote side most of the time. This was caused by the forkpty() function which combines the openpty(), fork(), and login_tty() functions. When the child process handling the connection executed /bin/login, all open file descriptors got closed. This bug has been fixed, and now openpty(), fork(), and login_tty() are used separately instead of forkpty(). As a result, if needed, the parent process keeps the file descriptor of the child process open. (BZ#1450821)

Users of rsh are advised to upgrade to these updated packages, which fix this bug.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 1450821 - rlogin fails to connect rsh-server after updating util-linux-ng from version 2.17.2-12.18.el6 to 2.17.2-12.24.el6

CVEs

(none)

References

(none)