RHBA-2018:2899 - Bug Fix Advisory

Topic

Updated ypserv packages that fix one bug are now available for Red Hat Enterprise Linux 6.

Description

The ypserv utility provides network information (login names, passwords, home directories, group information) to all of the machines on a network. It can enable users to log in on any machine on the network as long as the machine has the Network Information Service (NIS) client programs running and the user's password is recorded in the NIS passwd database. NIS was formerly known as Sun Yellow Pages (YP).

This update fixes the following bug:

• Previously, when a user run the ypchsh command on a NIS client with the NIS server set up to support the passwd.adjunct map, the yppasswdd daemon overwrote the user's password hash inside passwd.adjunct with the "##username" string while updating the user's shell information. As a consequence, the affected user did not log in due to a corrupted password hash. With this update, yppasswdd does not update the hash when the user shell is modified if NIS uses passwd.adjunct. As a result, users now can log in after changing shell with ypchsh. (BZ#1614090)

Users of ypserv are advised to upgrade to these updated packages, which fix this bug.

Solution

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

CVEs

(none)

References

(none)