Issued:

2015-07-22

Updated:

2015-07-22

RHBA-2015:1449 - openhpi32 bug fix and enhancement update

Synopsis

openhpi32 bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Topic

Updated openhpi32 packages that fix several bugs and add various enhancements are now available for Red Hat Enterprise Linux 6.

Description

OpenHPI is an open source project created with the intent of providing an implementation of the SA Forum's Hardware Platform Interface (HPI). HPI provides an abstracted interface to managing computer hardware, typically for chassis and rack based servers. HPI includes resource modeling; access to and control over sensor, control, watchdog, and inventory data associated with resources; abstracted System Event Log interfaces; hardware events and alerts; and a managed hot swap interface.

The openhpi32 packages have been upgraded to upstream version 3.4.0, which provides a number of bug fixes and enhancements over the previous version. Among others:

• Encryption of the configuration file is now allowed, so authentication credentials for hardware management are no longer available in clear text on the system

• Support for IPv6 has been fixed in the Onboard Administrator (OA) SOAP plug-in

• The uid_map file is no longer created as world-writable

(BZ#1127907)

This update also fixes the following bugs:

• Prior to this update, a data race condition was present in the Intelligent Platform Management Interface (IPMI) plug-in within the multi-threaded daemon. Consequently, the openhpid daemon could terminate unexpectedly with a segmentation fault. This bug has been fixed, the data structures are now updated in the correct order, and openhpid no longer crashes in this scenario. (BZ#1069015)

• Network timeouts were handled incorrectly in the openhpid daemon. As a consequence, network connections could fail when external plug-ins were used. With this update, handling of network socket timeouts has been improved in openhpid, and the described problem no longer occurs. (BZ#1105679)

Users of openhpi32 are advised to upgrade to these updated packages, which fix these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

Updated Packages

• openhpi32-3.4.0-2.el6.i686.rpm
• openhpi32-3.4.0-2.el6.src.rpm
• openhpi32-debuginfo-3.4.0-2.el6.s390.rpm
• openhpi32-devel-3.4.0-2.el6.ppc.rpm
• openhpi32-libs-3.4.0-2.el6.ppc.rpm
• openhpi32-devel-3.4.0-2.el6.x86_64.rpm
• openhpi32-libs-3.4.0-2.el6.s390x.rpm
• openhpi32-debuginfo-3.4.0-2.el6.x86_64.rpm
• openhpi32-3.4.0-2.el6.x86_64.rpm
• openhpi32-devel-3.4.0-2.el6.i686.rpm
• openhpi32-3.4.0-2.el6.ppc64.rpm
• openhpi32-libs-3.4.0-2.el6.ppc64.rpm
• openhpi32-libs-3.4.0-2.el6.x86_64.rpm
• openhpi32-debuginfo-3.4.0-2.el6.ppc.rpm
• openhpi32-devel-3.4.0-2.el6.s390x.rpm
• openhpi32-debuginfo-3.4.0-2.el6.s390x.rpm
• openhpi32-devel-3.4.0-2.el6.s390.rpm
• openhpi32-3.4.0-2.el6.s390x.rpm
• openhpi32-debuginfo-3.4.0-2.el6.ppc64.rpm
• openhpi32-libs-3.4.0-2.el6.i686.rpm
• openhpi32-libs-3.4.0-2.el6.s390.rpm
• openhpi32-debuginfo-3.4.0-2.el6.i686.rpm
• openhpi32-devel-3.4.0-2.el6.ppc64.rpm

Fixes

(none)

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at Security Contacts and Procedures.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.