<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">OBSOLETE Patch-ID# 112874-10
Keywords: security buffer overflow dbm_open getutxent_frec looping setuid
Synopsis: Obsoleted by: 112874-12 SunOS 5.9: patch libc
Date: Jan/24/2003

Install Requirements: Install in Single User Mode                      
                      Reboot immediately after patch is installed                      
                      
Solaris Release: 9

SunOS Release: 5.9

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 113988

Topic: SunOS 5.9: patch libc

Relevant Architectures: sparc

BugId's fixed with this patch: 1258570 4192824 4248430 4318178 4390053 4444569 4503048 4510326 4635556 4661997 4669963 4683320 4700602 4704190 4756113 4770160 4772960

Changes incorporated in this version: 4772960

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/etc/security/crypt.conf
/etc/security/policy.conf
/usr/lib/abi/abi_libc.so.1
/usr/lib/abi/sparcv9/abi_libc.so.1
/usr/lib/libc.a
/usr/lib/libc.so.1
/usr/lib/libp/libc.a
/usr/lib/libp/sparcv9/libc.so.1
/usr/lib/llib-lc.ln
/usr/lib/pics/libc_pic.a
/usr/lib/pics/sparcv9/libc_pic.a
/usr/lib/sparcv9/libc.so.1
/usr/lib/sparcv9/llib-lc.ln

Problem Description:

4772960	Several patches have pkginfo and patchinfo files that fail consistency checking
 
(from 112874-09)
 
4770160	compile fails with unknown file type message
 
(from 112874-08)
 
4669963 Strong security checks in catgets(3C) break setuid application
 
(from 112874-07)
 
4510326 strfmon may cause a stack buffer overflow
4756113 libc version number is incorrect in s9u2
 
(from 112874-06)
 
4390053 crypt(3c) needs to interoperate with *BSD and Linux
4248430 RFE: NIS+ should support alternate encryption algorithms for the user password
4192824 newkey/chkey should use a configurable crypt() to encrypt the users password
4700602 crypt_gensalt should be version SUNW_1.22 instead of SUNW_1.21
 
(from 112874-05)
 
1258570 qsort performs poorly with multiple identical keys
4635556 *atexit* atexit() does not scale. Can cause very slow startup of C++ programs.
 
(from 112874-04)
 
4683320 S9 gettext(3c) does not recognize mo files built on 2.6 as a valid message
4704190 Remove clientusr/clientroot from SUNW_PATCH_PROPERTIES for 112837 &amp; 112874-02
 
(from 112874-03)
 
4503048 getutxent_frec sends init looping
 
(from 112874-02)
 
4318178 wordexp puts automatic string into environment.
4444569 Purify reports memory leaks in wordexp(3C)
 
(from 112874-01)
 
4661997 buffer overflow in dbm_open

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-9 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
 
NOTE 1:	To get the complete fix for bugid 4503048, please install
	the following patch:
 
	113032-01 (or newer)	/usr/sbin/init patch
 
NOTE 2: To get the complete Flexible Crypt feature, please install the
        following patches:
 
        113475-01       (or newer)      libsecurity crypt
        113476-01       (or newer)      passwdutil.so.1
        113480-01       (or newer)      pam_unix Patch
        113481-01       (or newer)      nispasswdd
        113482-01       (or newer)      sbin/sulogin
        113483-01       (or newer)      rpc.ypasswdd

README -- Last modified date:  Tuesday, January 28, 2003

</pre></body></html>