Issued:

2012-04-05

Updated:

2012-06-20

RHBA-2012:0455 - libuser bug fix update

Synopsis

libuser bug fix update

Type/Severity

Bug Fix Advisory

Topic

Updated libuser packages that fix three bugs are now available for Red Hat Enterprise Linux 6.

Description

The libuser library implements a standardized interface for manipulating and administering user and group accounts. The library uses pluggable back-ends to interface to its data sources. Sample applications modeled after those included with the shadow password suite are included.

This update fixes the following bugs:

• When creating a user account in Lightweight Directory Access Protocol (LDAP), the libuser library used the value of the "gecos" attribute as the default value of the "cn" attribute. When the "gecos" attribute was empty, this made the value of "cn" invalid, and the creation of the user account failed. With this update, the user name of the account is stored in the "cn" attribute if the "gecos" attribute is empty, thus allowing successful creation of the user account. (BZ#670151)

• When populating a home directory by copying files from the /etc/skel directory, libuser ignored the "set user-id" and "set group-id" flags. This made it impossible to set up group-shared directories in a home directory. With this update, the "set user-id" and "set group-id" flags are preserved. (BZ#724987)

• Previously, when searching for the user or group account information in files of certain sizes, the libuser library could terminate unexpectedly with a segmentation fault. A patch has been applied to address this issue, and crashes no longer occur in the aforementioned scenario. (BZ#788521)

All users of libuser are advised to upgrade to these updated packages, which fix these bugs.

Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at This content is not included.https://access.redhat.com/kb/docs/DOC-11259

Affected Products

Updated Packages

• libuser-debuginfo-0.56.13-5.el6.ppc64.rpm
• libuser-devel-0.56.13-5.el6.i686.rpm
• libuser-python-0.56.13-5.el6.i686.rpm
• libuser-0.56.13-5.el6.x86_64.rpm
• libuser-0.56.13-5.el6.i686.rpm
• libuser-python-0.56.13-5.el6.x86_64.rpm
• libuser-devel-0.56.13-5.el6.x86_64.rpm
• libuser-python-0.56.13-5.el6.ppc64.rpm
• libuser-debuginfo-0.56.13-5.el6.ppc.rpm
• libuser-devel-0.56.13-5.el6.ppc64.rpm
• libuser-debuginfo-0.56.13-5.el6.x86_64.rpm
• libuser-debuginfo-0.56.13-5.el6.i686.rpm
• libuser-debuginfo-0.56.13-5.el6.s390x.rpm
• libuser-0.56.13-5.el6.ppc64.rpm
• libuser-0.56.13-5.el6.s390x.rpm
• libuser-devel-0.56.13-5.el6.s390.rpm
• libuser-debuginfo-0.56.13-5.el6.s390.rpm
• libuser-0.56.13-5.el6.src.rpm
• libuser-0.56.13-5.el6.s390.rpm
• libuser-devel-0.56.13-5.el6.ppc.rpm
• libuser-devel-0.56.13-5.el6.s390x.rpm
• libuser-0.56.13-5.el6.ppc.rpm
• libuser-python-0.56.13-5.el6.s390x.rpm

Fixes

• This content is not included.BZ - 670151

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.