Patch-ID# 107972-02
Keywords: security rcp LC_MESSAGES buffer overflow
Synopsis: SunOS 5.7: /usr/sbin/static/rcp patch
Date: Mar/26/2001

Solaris Release: 7

SunOS Release: 5.7

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 107973

Topic: SunOS 5.7: /usr/sbin/static/rcp patch
	NOTE:  Refer to Special Install Instructions section for 
               IMPORTANT specific information on this patch.

Relevant Architectures: sparc

BugId's fixed with this patch: 4240566 4366956 4375449

Changes incorporated in this version: 4366956 4375449

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/sbin/static/rcp

Problem Description:

4366956 NLSPATH gettext introduces problems when used printf format specifier
4375449 dtmail crashes when calling catgets with NULL default message
 
(from 107972-01)
 
4240566 security: LC_MESSAGES buffer overflow

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-8 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
----------------------------- 
 
	NOTE:	To get the complete fix for 4240566 (security: LC_MESSAGES 
		buffer overflow), we recommend installing the following
		patches:
 
		106541-06 (or newer)	kernel update
		106793-03 (or newer)	ufsdump and ufsrestore patch
 
        NOTE 3: To get the complete fix for 4366956 (NLSPATH gettext
                introduces problems when used printf format specifier),
                we recommend installing the following patches:
 
                106793-07 (or newer)   /usr/lib/fs/ufs/ufsrestore 
                107475-02 (or newer)   /usr/sbin/in.telnetd
                106541-15 (or newer)   /usr/include/nl_types.h 
                                       /usr/lib/libc.a 
                                       /usr/lib/libc.so.1
                                       /usr/lib/libp/libc.a
                                       /usr/lib/libp/sparcv9/libc.so.1
                                       /usr/lib/sparcv9/libc.so.1
                                       /usr/lib/pics/libc_pic.a
                                       /usr/lib/pics/sparcv9/libc_pic.a

README -- Last modified date:  Monday, March 26, 2001

