Fedora 8 Update: autofs-5.0.2-27

Sat Feb 16 02:15:21 UTC 2008

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-1752
2008-02-15 21:21:31
--------------------------------------------------------------------------------

Name        : autofs
Product     : Fedora 8
Version     : 5.0.2
Release     : 27
URL         : http://wiki.autofs.net/
Summary     : A tool for automatically mounting and unmounting filesystems
Description :
autofs is a daemon which automatically mounts filesystems when you use
them, and unmounts them later when you are not using them.  This can
include network filesystems, CD-ROMs, floppies, and so forth.

--------------------------------------------------------------------------------
ChangeLog:

* Thu Feb 14 2008 Ian Kent <ikent at redhat.com> - 5.0.2-27
- re-order and update patches to sync with upstream.
  - located missing patch.
  - replaced couple of patches previously altered due to incorrect ordering.
- add patches for upstream issues - synced with 5.0.3.
  - fix incorrect read/write size of startup status token (Matthias Koenig).
  - fix off-by-one error for lookup of map keys exactly 255 characters long.
  - improve handling of server not available.
  - fix LDAP_URI server selection.
  - add authentication option for using an external credential cache.
  - expand support for the "%" hack.
  - fix to quoting for exports gathered by hosts map.
  - use mount option "nosuid" for "-hosts" map unless "suid" is explicily specified.
  - second attempt fixing quoting for exports gathered by hosts map.
  - quell annoying "cannot open mount module" message.
  - fix for improve handling of server not available.
  - use mount option "nodev" for "-hosts" map unless "dev" is explicily specified.
  - add LDAP paged query handling to deal with query size restrictions (Edward Newman).
  - add additional case for "mark map instances stale so they aren't "cleaned" during updates".
  - fix race during sub-mount shutdown.
  - fix add SEARCH_BASE configuration option.
- add patches for upstream issues - post 5.0.3.
  - correct configure test for ldapr page control functions.
  - catch "-xfn" map type and issue "no supported" message.
  - correction for handling of LDAP base dns with spaces.
  - avoid using UDP for probing NFSv4 mount requests.
  - use libldap instead of libldap_r (Guillaume Rousse).
  - another fix for don't fail on empty master map.
  - fix expire working harder than needed.
  - fix unlink of mount tree incorrectly causing autofs mount fail.
* Sun Feb  3 2008 Ian Kent <ikent at redhat.com> - 5.0.2-25
- Bug 397591 SELinux is preventing /sbin/rpc.statd (rpcd_t) "search" to <Unknown> (sysctl_fs_t).
  - remove this patch.
* Fri Dec 21 2007 Ian Kent <ikent at redhat.com> - 5.0.2-24
- Bug 426400: CVE-2007-6285 autofs default doesn't set nodev in /net [f8]
  - use mount option "nodev" for "-hosts" map unless "dev" is explicily specified.
* Tue Dec 18 2007 Ian Kent <ikent at redhat.com> - 5.0.2-22
- Bug 397591 SELinux is preventing /sbin/rpc.statd (rpcd_t) "search" to <Unknown> (sysctl_fs_t).
  - prevent fork between fd open and setting of FD_CLOEXEC.
* Thu Dec 13 2007 Ian Kent <ikent at redhat.com> - 5.0.2-20
- Bug 409701: CVE-2007-5964 Privilege Escalation (from local system) through /net autofs mount configuration bug
  - use mount option "nosuid" for "-hosts" map unless "suid" is explicily specified.
* Tue Nov 20 2007 Ian Kent <ikent at redhat.com> - 5.0.2-17
- fix schema selection in LDAP schema discovery.
- check for "*" when looking up wildcard in LDAP.
- fix couple of edge case parse fails of timeout option.
- add SEARCH_BASE configuration option.
- add random selection as a master map entry option.
- re-read config on HUP signal.
- add LDAP_URI, LDAP_TIMEOUT and LDAP_NETWORK_TIMEOUT configuration options.
- fix deadlock in submount mount module.
- fix lack of ferror() checking when reading files.
- fix typo in autofs(5) man page.
- fix map entry expansion when undefined macro is present.
- remove unused export validation code.
- add dynamic logging (adapted from v4 patch from Jeff Moyer).
- fix recursive loopback mounts (Matthias Koenig).
- add map re-load to verbose logging.
- fix handling of LDAP base dns with spaces.
- handle MTAB_NOTUPDATED status return from mount.
- when default master map, auto.master, is used also check for auto_master.
- update negative mount timeout handling.
- fix large group handling (Ryan Thomas).
- fix for dynamic logging breaking non-sasl build (Guillaume Rousse).
- eliminate NULL proc ping for singleton host or local mounts.
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update autofs' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------