Red Hat ENTERPRISE 5.4 RELEASE NOTES, Manual

Page: 238 / 466

Chapter 1. Package Updates
220
An opt-in mechanism to enable a stricter mode of patching on a per-spec basis has been introduced
to help packagers notice these cases early in the package-building process. (
BZ#471005
1515
)
• on 64-bit multilib systems, RPM permitted installation of packages for incompatible architectures.
RPM now validates package architecture compatibility on all platforms. (
BZ#472065
1516
)
• an extra "/" character in source file paths could have caused RPM version 4.4.2.3 to abort builds on
packages that were previously able to be built during the debug-information extraction stage. This
update reverts the error to a warning to let such packages continue to build. (
BZ#482903
1517
)
• RPM incorrectly calculated the fingerprint of some GPG public keys, causing false "key not
present" errors on package signature-checking. This update includes a fix to correct the fingerprint
calculation in these cases. (
BZ#493777
1518
)
• recent RPM versions could fail to verify a valid RSA signature on a package due to different
padding behavior of the low-level cryptography library now used. RPM now performs the additional
zero-padding itself when necessary, thus allowing RSA signatures to be correctly verified.
(
BZ#502791
1519
)
• RPM output an invalid Japanese error message when run in a Japanese locale. The error message
translation has been corrected. (
BZ#387321
1520
)
All users of rpm are advised to upgrade to these updated packages, which resolve these issues.
1.196. rsh
1.196.1. RHBA-2009:0423: bug fix update
Note
This update has already been released (prior to the GA of this release) as FASTRACK
errata
RHBA-2009:0423
1521
Updated rsh packages that resolve several issues are now available.
The rsh-server package contains programs which allow users to run commands on remote machines,
log in to other machines, copy files between machines (rsh, rlogin and rcp), and provides an alternate
method of executing remote commands (rexec). All of these programs are run by xinetd and can be
configured through the Pluggable Authentication Modules (PAM) system, and through configuration
files in the /etc/xinetd.d/ directory.
These updated rsh packages provide fixes for the following bugs:
• rsh did not set any of the environment variables listed in the /etc/security/pam_env.conf
configuration file, and thus rsh users did not have access to that environment. With this update,
rsh correctly reads and sets the environment variables listed in /etc/security/pam_env.conf, thus
resolving the issue.
• the rexec(1) man page stated that the maximum length of the username on the remote system
was restricted to 16 characters. Internally, however, rexec limited the maximum username length
to 14 characters. rexec's maximum username length has been increased to 16 characters, which
corresponds to the value given in the manual page, and which resolves the issue.