RHBA-2018:3070 - Bug Fix Advisory

标题

An update for gssproxy is now available for Red Hat Enterprise Linux 7.

描述

The gssproxy packages provide a daemon to manage access to GSSAPI credentials, as well as a GSSAPI interposer plug-in.

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.

Users of gssproxy are advised to upgrade to these updated packages.

解决方案

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

受影响的产品

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux for ARM 64 7 aarch64
• Red Hat Enterprise Linux for Power 9 7 ppc64le
• Red Hat Enterprise Linux for IBM System z (Structure A) 7 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

修复

• BZ - 1505741 - [gssproxy] Error when reading config directory: File /etc/gssproxy/gssproxy.conf did not match provided patterns
• BZ - 1549684 - [Regression] KRB5_BAD_ENCTYPE in gp_decrypt_buffer when keytab first permitted entry is not ENCTYPE_AES256_CTS_HMAC_SHA1_96
• BZ - 1553819 - [7.5 Beta] gssproxy RSS usage slowly increasing over time (memory leak)
• BZ - 1554249 - debug level man page + behaviour

CVE

(none)

参考

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index