autofs-5.0.5-113.AXS4
エラータID: AXSA:2015-269:02
autofs is a daemon which automatically mounts filesystems when you use
them, and unmounts them later when you are not using them. This can
include network filesystems, CD-ROMs, floppies, and so forth.
Security issues fixed with this release:
CVE-2014-8169
Fixed bugs:
* If the "ls *" command was executed before a valid mount, the autofs program
failed on further mount attempts inside the mount point, whether the mount point
was valid or not. While attempting to mount, the "ls *" command of the root
directory of an indirect mount was executed, which led to an attempt to mount
"*", causing it to be added to the negative map entry cache. This bug has been
fixed with this update.
* The autofs program by design did not mount host map entries that were
duplicate exports in an NFS server export list. The duplicate entries in a
multi-mount map entry were recognized as a syntax error and autofs refused to
perform mounts when the duplicate entries occurred. With this update, fixed the problem.
* The autofs program did not recognize the yp map type in the master map. This
was caused by another change in the master map parser to fix a problem with
detecting the map format associated with mapping the type in the master map. The
change led to an incorrect length for the type comparison of yp maps that
resulted in a match operation failure. This bug has been fixed by correcting the
length which is used for the comparison.
* The autofs program did not update the export list of the Sun-format maps of
the network shares exported from an NFS server. This happened due to a change of
the Sun-format map parser leading to the hosts map update to stop working on the
map re-read operation. The bug has been now fixed by selectively preventing this
type of update only for the Sun-formatted maps.
* Within changes made for adding of the Sun-format maps, an incorrect check was
added that caused a segmentation fault in the Sun-format map parser in certain
circumstances. The bug was fixed with this update.
* A bug in the autofs program map lookup module caused an incorrect map format
type comparison. The incorrect comparison affected the Sun-format program maps
where it led to the unused macro definitions. With this update, fixed it.
Update packages.
automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values instead of the values for the user used to run the mapped program, which allows local users to gain privileges via a Trojan horse program in the user home directory.
N/A
SRPMS
- autofs-5.0.5-113.AXS4.src.rpm
MD5: fe390efab8a386661eb84047bf311a3a
SHA-256: 3619e831a00e7363e0b632b6cdf315b2713c201210a903256e5ada41a53d2b20
Size: 861.14 kB
Asianux Server 4 for x86
- autofs-5.0.5-113.AXS4.i686.rpm
MD5: 289ef77d408bca97a8e697d0bcc0fc23
SHA-256: 93b93294b90667693cda8dcb3976cf40c8b94d05814f4d0f51ed327eee4451b4
Size: 725.77 kB
Asianux Server 4 for x86_64
- autofs-5.0.5-113.AXS4.x86_64.rpm
MD5: 1cf8880ebb9f4f87aaf7c3ec6be02f07
SHA-256: 44286d83ca1d53a8176ece1e9d2e6f5fb0a6e73724f016f8b78f98c94d19b228
Size: 728.06 kB