Fedora 8 Update: autofs-5.0.2-31

updates at fedoraproject.org updates at fedoraproject.org
Fri Nov 21 10:54:51 UTC 2008


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-9528
2008-11-21 09:12:22
--------------------------------------------------------------------------------

Name        : autofs
Product     : Fedora 8
Version     : 5.0.2
Release     : 31
URL         : http://wiki.autofs.net/
Summary     : A tool for automatically mounting and unmounting filesystems
Description :
autofs is a daemon which automatically mounts filesystems when you use
them, and unmounts them later when you are not using them.  This can
include network filesystems, CD-ROMs, floppies, and so forth.

--------------------------------------------------------------------------------
ChangeLog:

* Tue Nov 11 2008 Ian Kent <kent at redhat.com> - 5.0.2-31
- correct buffer length setting in autofs-5.0.3-fix-ifc-buff-size-fix.patch.
* Mon Nov 10 2008 Ian Kent <ikent at redhat.com> - 5.0.2-30
- sync. with F-9 bug fixes.
  - fix lexer ambiguity in match when map type name is included in map name.
  - check for nohide mounts.
  - ignore nsswitch sources that aren't supported.
  - don't abuse the ap->ghost field on NFS mount.
  - multi-map doesn't pickup NIS updates automatically.
  - eliminate redundant DNS name lookups.
  - mount thread create condition handling fix.
  - allow directory create on NFS root.
  - check direct mount path length.
  - fix incorrect in check in get user info.
  - fix a couple of memory leaks.
  - don't close file handle for rootless direct mounti-mount at mount.
  - wait submount expire thread completion when expire successful.
  - add inadvertantly ommitted server list locking in LDAP module.
  - add map-type-in-map-name fix patch to sync with upstream and RHEL.
  - don't readmap on HUP for new mount.
  - add NIS_PARTIAL to map entry not found check and fix use after free bug.
  - fix fd leak at multi-mount non-fatal mount fail.
  - fix incorrect multi-mount mountpoint calcualtion.
  - add upstream bug fixes
  - bug fix for mtab check.
  - bug fix for zero length nis key.
  - update for ifc buffer handling.
  - bug fix for kernel automount handling.
  - add command line option to override is running check.
  - don't use proc fs for is running check.
  - fix fail on included browse map not found.
  - fix incorrect multi source messages.
  - clear stale flag on map read.
  - fix proximity other rpc ping timeout.
  - refactor mount request vars code.
  - make handle_mounts startup condition distinct.
  - fix submount shutdown handling.
  - try not to block on expire.
  - add configuration paramter UMOUNT_WAIT.
  - fix multi mount race.
  - fix nfs4 colon escape handling.
  - check replicated list after probe.
  - add replicated server selection debug logging.
  - update replicated server selection documentation.
  - use /dev/urandom instead of /dev/random.
  - check for mtab pointing to /proc/mounts.
  - fix interface config buffer size.
  - fix percent hack heap corruption.
  - fix segv during library re-open.
  - fix incorrect pthreads condition handling for expire requests.
* Wed Apr 23 2008 Ian Kent <ikent at redhat.com> - 5.0.2-29
- fix incorrect pthreads condition handling for mount requests.
* Thu Mar 20 2008 Ian Kent <ikent at redhat.com> - 5.0.2-28
- add patch to initialize sasl callbacks unconditionally on autofs
  LDAP lookup library load.
* Thu Feb 14 2008 Ian Kent <ikent at redhat.com> - 5.0.2-27
- re-order and update patches to sync with upstream.
  - located missing patch.
  - replaced couple of patches previously altered due to incorrect ordering.
- add patches for upstream issues - synced with 5.0.3.
  - fix incorrect read/write size of startup status token (Matthias Koenig).
  - fix off-by-one error for lookup of map keys exactly 255 characters long.
  - improve handling of server not available.
  - fix LDAP_URI server selection.
  - add authentication option for using an external credential cache.
  - expand support for the "%" hack.
  - fix to quoting for exports gathered by hosts map.
  - use mount option "nosuid" for "-hosts" map unless "suid" is explicily specified.
  - second attempt fixing quoting for exports gathered by hosts map.
  - quell annoying "cannot open mount module" message.
  - fix for improve handling of server not available.
  - use mount option "nodev" for "-hosts" map unless "dev" is explicily specified.
  - add LDAP paged query handling to deal with query size restrictions (Edward Newman).
  - add additional case for "mark map instances stale so they aren't "cleaned" during updates".
  - fix race during sub-mount shutdown.
  - fix add SEARCH_BASE configuration option.
- add patches for upstream issues - post 5.0.3.
  - correct configure test for ldapr page control functions.
  - catch "-xfn" map type and issue "no supported" message.
  - correction for handling of LDAP base dns with spaces.
  - avoid using UDP for probing NFSv4 mount requests.
  - use libldap instead of libldap_r (Guillaume Rousse).
  - another fix for don't fail on empty master map.
  - fix expire working harder than needed.
  - fix unlink of mount tree incorrectly causing autofs mount fail.
* Sun Feb  3 2008 Ian Kent <ikent at redhat.com> - 5.0.2-25
- Bug 397591 SELinux is preventing /sbin/rpc.statd (rpcd_t) "search" to <Unknown> (sysctl_fs_t).
  - remove this patch.
* Fri Dec 21 2007 Ian Kent <ikent at redhat.com> - 5.0.2-24
- Bug 426400: CVE-2007-6285 autofs default doesn't set nodev in /net [f8]
  - use mount option "nodev" for "-hosts" map unless "dev" is explicily specified.
* Tue Dec 18 2007 Ian Kent <ikent at redhat.com> - 5.0.2-22
- Bug 397591 SELinux is preventing /sbin/rpc.statd (rpcd_t) "search" to <Unknown> (sysctl_fs_t).
  - prevent fork between fd open and setting of FD_CLOEXEC.
* Thu Dec 13 2007 Ian Kent <ikent at redhat.com> - 5.0.2-20
- Bug 409701: CVE-2007-5964 Privilege Escalation (from local system) through /net autofs mount configuration bug
  - use mount option "nosuid" for "-hosts" map unless "suid" is explicily specified.
* Tue Nov 20 2007 Ian Kent <ikent at redhat.com> - 5.0.2-17
- fix schema selection in LDAP schema discovery.
- check for "*" when looking up wildcard in LDAP.
- fix couple of edge case parse fails of timeout option.
- add SEARCH_BASE configuration option.
- add random selection as a master map entry option.
- re-read config on HUP signal.
- add LDAP_URI, LDAP_TIMEOUT and LDAP_NETWORK_TIMEOUT configuration options.
- fix deadlock in submount mount module.
- fix lack of ferror() checking when reading files.
- fix typo in autofs(5) man page.
- fix map entry expansion when undefined macro is present.
- remove unused export validation code.
- add dynamic logging (adapted from v4 patch from Jeff Moyer).
- fix recursive loopback mounts (Matthias Koenig).
- add map re-load to verbose logging.
- fix handling of LDAP base dns with spaces.
- handle MTAB_NOTUPDATED status return from mount.
- when default master map, auto.master, is used also check for auto_master.
- update negative mount timeout handling.
- fix large group handling (Ryan Thomas).
- fix for dynamic logging breaking non-sasl build (Guillaume Rousse).
- eliminate NULL proc ping for singleton host or local mounts.
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update autofs' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------




More information about the Fedora-package-announce mailing list