Issued:

2013-02-20

Updated:

2013-02-20

RHBA-2013:0330 - ypserv bug fix update

Synopsis

ypserv bug fix update

Type/Severity

Bug Fix Advisory (none)

Topic

Updated ypserv packages that fix four bugs are now available for Red Hat Enterprise Linux 6.

Description

The ypserv packages provide the Network Information Service (NIS) server. NIS is a system that provides network information such as login names, passwords, home directories, and group information to all the machines on a network.

This update fixes the following bugs:

• Prior to this update, the NIS server was returning "0" (YP_FALSE) instead of "-1" (YP_NOMAP) after a request for a database not present in the server's domain. This behavior caused the autofs mount attempts to fail on Solaris clients. With this update, the return value has been fixed and the autofs mounts no longer fail on Solaris clients. (BZ#790812)

• Previously, when the crypt() function returned NULL, the yppasswd utility did not properly recognize the return value. This bug has been fixed, and the NULL return values of crypt() are now recognized and reported correctly by yppaswd. (BZ#816981)

• Previously, the ypserv utility allocated large amounts of virtual memory when parsing XDR requests, but failed to free that memory in case the request was not parsed successfully. Consequently, memory leaks occurred. With this update, a patch has been provided to free the already allocated memory when parsing of a request fails. As a result, the memory leaks no longer occur. (BZ#845283)

• Previously, the yppush(8) man page did not describe how to change settings of the yppush utility. The manual page has been amended to specify that the settings can be changed in the /var/yp/Makefile file. (BZ#863952)

All users of ypserv are advised to upgrade to these updated packages, which fix these bugs.

Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258

Affected Products

Updated Packages

• ypserv-2.19-26.el6.s390x.rpm
• ypserv-debuginfo-2.19-26.el6.x86_64.rpm
• ypserv-debuginfo-2.19-26.el6.s390x.rpm
• ypserv-2.19-26.el6.ppc64.rpm
• ypserv-2.19-26.el6.src.rpm
• ypserv-debuginfo-2.19-26.el6.ppc64.rpm
• ypserv-2.19-26.el6.x86_64.rpm
• ypserv-debuginfo-2.19-26.el6.i686.rpm
• ypserv-2.19-26.el6.i686.rpm

Fixes

• This content is not included.BZ - 816981
• This content is not included.BZ - 863952

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.