OBSOLETE Patch-ID# 112874-16
Keywords: security buffer overflow dbm_open getutxent_frec looping setuid umem
Synopsis: Obsoleted by: 112874-18 SunOS 5.9: patch libc
Date: Sep/03/2003


Install Requirements: Install in Single User Mode                      
                      Reboot immediately after patch is installed                      
                      
Solaris Release: 9

SunOS Release: 5.9

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 113988

Topic: SunOS 5.9: patch libc

Relevant Architectures: sparc

BugId's fixed with this patch: 1258570 4152876 4192824 4221365 4248430 4254013 4318178 4353836 4390053 4444569 4503048 4510326 4518988 4530367 4533712 4635556 4661997 4669963 4683320 4694626 4700602 4704190 4705942 4709984 4749274 4756113 4767215 4770160 4772960

Changes incorporated in this version: 4152876 4353836

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 112233-05 or greater

Obsoleted by: 

Files included with this patch: 

/etc/security/crypt.conf
/etc/security/policy.conf
/usr/include/ucontext.h
/usr/lib/abi/abi_libc.so.1
/usr/lib/abi/sparcv9/abi_libc.so.1
/usr/lib/libc.a
/usr/lib/libc.so.1
/usr/lib/libp/libc.a
/usr/lib/libp/sparcv9/libc.so.1
/usr/lib/llib-lc
/usr/lib/llib-lc.ln
/usr/lib/pics/libc_pic.a
/usr/lib/pics/sparcv9/libc_pic.a
/usr/lib/sparcv9/libc.so.1
/usr/lib/sparcv9/llib-lc.ln

Problem Description:

4353836 if more than 255 file descriptors are already open then gethostbyname fails
4152876 getspnam_r() fails due to use of fopen() in libnsl.so in applications under load
 
(from 112874-15)
 
4705942 invoke_utmp_update(): buffer-overflow bug and pad field written to utmpx wrong
 
(from 112874-14)
 
4530367 After retry timeout - nss_search() no longer retries lookups
4749274 MT-Safe functions such as syslog(3C) and wordexp(3C) cannot use fork()
 
(from 112874-13)
 
4254013 need a better mechanism to detect multi-threaded user stack overflow
4533712 makecontext breaks in 64-bit mode
4518988 We should ship libumem
4709984 findleaks warns about partial read failure
4694626 putenv calls realloc with locks held
 
(from 112874-12)
 
4767215 Incorrect output with kP format, losing significant digits.
 
(from 112874-11)
 
4221365 readdir_r() is not POSIX compliant
 
(from 112874-10)
 
4772960	Several patches have pkginfo and patchinfo files that fail consistency checking
 
(from 112874-09)
 
4770160	compile fails with unknown file type message
 
(from 112874-08)
 
4669963 Strong security checks in catgets(3C) break setuid application
 
(from 112874-07)
 
4510326 strfmon may cause a stack buffer overflow
4756113 libc version number is incorrect in s9u2
 
(from 112874-06)
 
4390053 crypt(3c) needs to interoperate with *BSD and Linux
4248430 RFE: NIS+ should support alternate encryption algorithms for the user password
4192824 newkey/chkey should use a configurable crypt() to encrypt the users password
4700602 crypt_gensalt should be version SUNW_1.22 instead of SUNW_1.21
 
(from 112874-05)
 
1258570 qsort performs poorly with multiple identical keys
4635556 *atexit* atexit() does not scale. Can cause very slow startup of C++ programs.
 
(from 112874-04)
 
4683320 S9 gettext(3c) does not recognize mo files built on 2.6 as a valid message
4704190 Remove clientusr/clientroot from SUNW_PATCH_PROPERTIES for 112837 & 112874-02
 
(from 112874-03)
 
4503048 getutxent_frec sends init looping
 
(from 112874-02)
 
4318178 wordexp puts automatic string into environment.
4444569 Purify reports memory leaks in wordexp(3C)
 
(from 112874-01)
 
4661997 buffer overflow in dbm_open

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-9 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
 
NOTE 1:	To get the complete fix for bugid 4503048, please install
	the following patch:
 
	113032-01 (or newer) /usr/sbin/init patch
 
NOTE 2: To get the complete Flexible Crypt feature, please install the
        following patches:
 
        113475-01 (or newer) libsecurity crypt
        113476-01 (or newer) passwdutil.so.1
        113480-01 (or newer) pam_unix Patch
        113481-01 (or newer) nispasswdd
        113482-01 (or newer) sbin/sulogin
        113483-01 (or newer) rpc.ypasswdd
 
NOTE 3: To get the complete "umem: A Userland Slab Allocator" feature, please
        install the following additional patches:
 
        114370-01 (or newer) libumem.so.1
        114371-01 (or newer) libumem; mdb components patch
        114372-01 (or newer) llib-lumem patch
        114373-01 (or newer) abi_libumem.so.1 patch
 
NOTE 4: To get the complete Stack Update feature, please install the following
        patches:
 
        112839-03 (or newer) libthread.so.1 patch
        113471-02 (or newer) truss patch
        112233-05 (or newer) KU patch
        113275-02 (or newer) procfs patch
 
NOTE 5: To get the complete fix for the bugid 4353836, please install
        the following patches, in addition to this patch:
 
        113319-12 (or newer) libnsl patch
        112970-05 (or newer) libresolv patch
        115545-01 (or newer) nss_files patch
        115542-01 (or newer) nss_user patch
        115544-01 (or newer) nss_compat patch

README -- Last modified date:  Friday, January 30, 2004

