RHBA-2018:3057 - Bug Fix Advisory

Topic

An update for rsh is now available for Red Hat Enterprise Linux 7.

Description

The rsh packages contain programs which allow users to run commands on remote machines (the rsh utility), log on to other machines (the rlogin
utility), copy files between machines (the rcp utility), and programs which provide an alternate method of executing remote commands (the rexec utility). All of these programs are run by the xinetd service and can be configured using the Pluggable Authentication Modules (PAM) system and configuration files in the /etc/xinetd.d/ directory.

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.

Users of rsh are advised to upgrade to these updated packages.

Solution

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux for ARM 64 7 aarch64
• Red Hat Enterprise Linux for Power 9 7 ppc64le
• Red Hat Enterprise Linux for IBM System z (Structure A) 7 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

• BZ - 1338037 - rsh/rlogin sessions ignore SIGPIPE due to systemd, <service>@.service's need IgnoreSIGPIPE=no
• BZ - 1477207 - rlogin killed when changing run level
• BZ - 1505226 - have a proposed patch for rsh-0.17-76.el7_1.1 (rshd.c) ; need to contact the maintaner first

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index