Patch-ID# 114980-12
Keywords: security lpstat buffer overrun exec_attr cftime cancel rbac conv_fix
Synopsis: SunOS 5.9_x86: lp Patch
Date: Aug/11/2004


Install Requirements: None                      
                      
Solaris Release: 9_x86

SunOS Release: 5.9_x86

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for SPARC as patch 113329

Topic: SunOS 5.9_x86: lp Patch

Relevant Architectures: i386

BugId's fixed with this patch: 4530499 4593031 4626542 4635978 4640976 4648825 4652453 4687458 4687483 4697460 4704146 4704153 4704157 4704303 4704376 4704377 4704786 4704793 4704798 4704812 4704824 4704921 4704926 4705611 4705626 4705635 4705663 4705665 4705899 4705910 4705911 4705915 4705933 4705937 4705943 4705947 4705948 4705950 4705957 4705959 4705977 4706351 4714952 4734301 4751570 4761753 4761791 4775108 4809082 4809690 4819203 4902916 4915855 4925015 4927784 4930119 4940032 4981362 4986866 5025203

Changes incorporated in this version: 

Patches accumulated and obsoleted by this patch: 115883-01 116240-01

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/etc/security/exec_attr
/usr/bin/cancel
/usr/bin/lp
/usr/bin/lpget
/usr/bin/lpset
/usr/bin/lpstat
/usr/lib/libprint.so.2
/usr/lib/lp/bin/getmakes
/usr/lib/lp/bin/getmodels
/usr/lib/lp/bin/getppdfile
/usr/lib/lp/bin/getppds
/usr/lib/lp/bin/lp.cat
/usr/lib/lp/bin/lp.tell
/usr/lib/lp/bin/netpr
/usr/lib/lp/bin/ppdfilename2mmp
/usr/lib/lp/local/accept
/usr/lib/lp/local/lp
/usr/lib/lp/local/lpadmin
/usr/lib/lp/local/lpmove
/usr/lib/lp/local/lpstat
/usr/lib/lp/local/lpsystem
/usr/lib/lp/lpsched
/usr/lib/lp/postscript/download
/usr/lib/lp/postscript/dpost
/usr/lib/lp/postscript/picpack
/usr/lib/lp/postscript/postcomm
/usr/lib/lp/postscript/postdaisy
/usr/lib/lp/postscript/postdmd
/usr/lib/lp/postscript/postio
/usr/lib/lp/postscript/postplot
/usr/lib/lp/postscript/postprint
/usr/lib/lp/postscript/postreverse
/usr/lib/lp/postscript/posttek
/usr/lib/print/bsd-adaptor/bsd_lpsched.so.1
/usr/lib/print/conv_fix
/usr/lib/print/in.lpd
/usr/lib/print/psm-lpsched.so
/usr/lib/print/psm-lpsched.so.1
/usr/sadm/admin/bin/printmgr
/usr/sadm/admin/printmgr/classes/pmclient.jar
/usr/sadm/admin/printmgr/classes/pmserver.jar
/usr/sadm/admin/printmgr/lib/libpmgr.so
/usr/sadm/admin/printmgr/lib/libpmgr.so.1
/usr/sbin/lpadmin
/usr/sbin/lpfilter
/usr/sbin/lpforms
/usr/sbin/lpmove
/usr/sbin/lpshut
/usr/sbin/lpusers
/usr/ucb/lpc

Problem Description:

Special patch install instructions replaces the need for a reconfiguration immediately after
patch installation.
 
(from 114980-11)
 
4986866 lpmove incorrectly reports usage error for remote print jobs
 
(from 114980-10)
 
Uprev'ed patch due to the missing package SUNWpsr - see bug 5045047
 
(from 114980-09)
 
4530499 invalid syslog message when printer does not exist
4593031 receive NullPointerExceptions when selecting menu options quickly
4626542 lpshut ignores that it can't get a lock on FIFO and just continues to loop
4635978 in.lpd turns into a fork()/exec() bomb
4640976 client: generation of copyright file is dodgy
4652453 incorrect messaging in lp.cat
4687458 lpmove dumps core when *malloc* call returns NULL
4687483 netpr dumps core when *malloc* calls fail
4704146 lpforms: potential race condition creating temporary file
4704153 potential buffer overrun in in.lpd
4704157 lpadmin: bad use of gets()
4704303 lpsched: use of cftime() is dangerous
4704376 usr/src/cmd/lp/filter/postscript/common/misc.c error() should be varargs
4704377 usr/src/cmd/lp/filter/postscript/postcomm/postcomm.c error() should be varargs
4704786 lpsched: potential buffer overruns
4704793 lpsched: racy stat()
4704798 lpc: potential buffer overruns
4704921 lp: creates temporary files with fopen()
4704926 lp: potential buffer overruns
4705611 libprint:bsd_addr_create() should check result of malloc()
4705626 libprint:ns_cmn_kvp.c has memory issues
4705635 libprint:ns_printer_create() may not initialize memory
4705663 libprint:nss_ldap.c: unsafe use of strncpy()
4705665 libprint:nss_ldap.c: memory may not be initialized
4705910 libprint:job.c: makes unsafe use of open(O_CREAT)
4705915 libprint:job.c: doesn't check *alloc() results
4705933 libprint:misc.c:  unsafe use of cftime()
4705937 libprint:misc.c: unchecked *alloc() result
4705943 cancel: unchecked memory allocation
4705950 usr/src/cmd/lp/model/netpr/misc.c vsprintf to fixed buffer
4705957 lpstat: extraneous chdir, unchecked *alloc()
4705959 lpset: uncheck *alloc() returns
4705977 lp: calls tempnam()
4706351 lpadmin: no warning when creating a printer on a user-owned symlink
4734301 lp system fails POSIX VSC tests
4751570 lpc generates the core dump in solaris 8 2/02.
4761791 default timeout in netpr should be initialized
4775108 lp gives an error when file is NFS mounted and containing directory is 700
4809082 lpsched: R_INQUIRE_REQUEST_RANK does not include requests submitted to classes
4819203 Solaris printmgr generates warning with compile with javac 1.4.2
4930119 network printer timeout does not reset on fault clearance
4940032 Solaris should support IPP clients (LSARC/2001/259)
4981362 java 1.5 and printmgr problems
5025203 Solaris printing needs RIP functionality (on)
 
(from 114980-08)
 
Respin due to missing binary
 
(from 114980-07)
 
4915855 printmgr cannot admin print queues stored in an LDAP nameservice
 
(from 114980-06)
 
4809690 submitted print jobs don't seem to disappear after printing
 
(from 114980-05)
 
4697460 hanging printd should not block all printjobs to remote
 
(from 114980-04)
 
4927784 special patch is needed for bugid 4902916 and 4648825
 
(from 114980-03)
 
4925015	pullback of 4648825 fix took 4761753/4714952/4705911/4705899/4704812 with it
 
(from 114980-02)
 
4648825 Printer Management profile in exec_attr file is ineffective
4704812 lpstat: cftime() is deprecated in favor of strftime()
4705899 libprint:nss_write.c uses fopen() to create temp file
4705911 lib/print/job.c: makes unsafe use of access()
4714952 bsd-gw gives "dfAnnnhostname file exists" from a previous job
4761753 filedescriptor "fd" is not closed in job_retrieve()
 
(from 114980-01)
 
4704824 lpstat: potential buffer overrun
 
(from 115883-01)
 
4902916 cancel cmd does not work well with RBAC Printer Management
 
(from 116240-01)
 
4705948 conv_fix: unsafe use of fopen()
4705947 conv_fix: should use strlcat

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-9 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
 
NOTE 1:  After Patch installation, the lpsched daemon should be stopped and restarted.
 
          As root:
                /etc/init.d/lp stop
                /etc/init.d/lp start

README -- Last modified date:  Wednesday, August 11, 2004

