Patch-ID# 106942-29
Keywords: security automountd nfsd rpc lookups rpc.nisd initgroups libdbm
Synopsis: SunOS 5.7: libnsl, rpc.nisd and nis_cachemgr Patch
Date: Apr/29/2005


Install Requirements: Reboot immediately after patch is installed                      
                      Install in Single User Mode                      
                      
Solaris Release: 7

SunOS Release: 5.7

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 106943

Topic: SunOS 5.7: libnsl, rpc.nisd and nis_cachemgr Patch
       NOTE:  Refer to Special Install Instructions section for
              IMPORTANT specific information on this patch.

Relevant Architectures: sparc

BugId's fixed with this patch: 1226166 4055704 4055715 4055724 4055727 4124715 4152002 4157559 4161969 4162879 4165775 4186012 4202735 4216240 4222922 4232494 4233192 4239643 4240463 4240833 4246959 4280714 4283726 4295834 4296198 4302436 4302592 4305859 4318294 4326943 4327396 4336332 4354007 4374142 4394576 4428119 4430473 4455896 4471041 4668699 4680691 4690775 4691127 4692229 4710928 4767276 4828271 5109439

Changes incorporated in this version: 5109439

Patches accumulated and obsoleted by this patch: 107215-01

Patches which conflict with this patch: 

Patches required with this patch: 106541-13 (or greater)

Obsoleted by: 

Files included with this patch: 

/etc/default/rpc.nisd
/usr/include/rpc/rpc_com.h
/usr/include/rpc/svc.h
/usr/lib/libnisdb.a
/usr/lib/libnisdb.so.2
/usr/lib/libnsl.a
/usr/lib/libnsl.so.1
/usr/lib/nis/nisopaccess
/usr/lib/nis/nisping
/usr/lib/sparcv9/libnsl.so.1
/usr/sbin/nis_cachemgr
/usr/sbin/rpc.nisd
/usr/ucblib/libdbm.a
/usr/ucblib/libdbm.so.1
/usr/ucblib/sparcv9/libdbm.so.1

Problem Description:

5109439 rpc.nisd stuck looping in __nis_path()
 
(from 106942-28)
 
4828271 clnt_create()/clnt_create_timed() don't timeout with unexpected UDP.
 
(from 106942-27)
 
4767276 rpcbind can be killed remotely
 
(from 106942-26)
 
4668699 buffer overflow in dbm_open and dbminit (except the one in libc)
 
(from 106942-25)
 
4710928 rpcbind exits with segv on both cluster node
 
(from 106942-24)
 
4680691 doctored rpc calls over UDP can bring down machines through rpcbind
 
(from 106942-23)
 
1226166 rpcbind does not bind with the correct network interface
4690775 nisplus_ldap_udt: rpcbind got killed and core dump during nisplus server setup
 
(from 106942-22)
 
4691127 Possible type overflow in xdr_array
4692229 gethostbyname_r mt inconsistency of result asking 'dot IP notation' as name
 
(from 106942-21)
 
4240833 RPC AUTH_DES credentials stays on stack.
 
(from 106942-20)
 
4455896 rpc.nispasswdd failed: RPC: .... NIS+ fatal error: 15
 
(from 106942-19)
 
4471041 rpc.nisd should accept rpc records > 9K for non-blocking transfers
4394576 nisgrpadm intermittently fails to update NIS+ group
 
(from 106942-18)
 
4430473 rpc.nisd: svc_getreqset: No transport handle for fd 291
 
(from 106942-17)
 
4283726 fsck hangs in phase 4 in getpwuid() call
4302436 getgrgid() hangs on large group lookups to NIS+
4327396 nis_modify_entry(): deadlock in rpc_fd_lock() with MT nis table modification
4354007 xdrmem_putbytes and xdrmem_putlong emit a syslog error message when the buffer isn't long enough
4428119 106942-15 breaks TLI with EOVERFLOW on 2.7
 
(from 106942-16)
 
4374142 RPC services using RPC_SVC_MT_AUTO can stop listening
 
(from 106942-15)
 
4336332 svc_getreqset (t_accept) returns illegal file descriptor in 2.7/2.8
 
(from 106942-14)
 
4280714 rpc.nisd hangs and consumes a lot of memory
4302592 TLI library is not fork-safe
4326943 Gets hundreds of __directory_object: Failed to lookup ... no such name
 
(from 106942-13)
 
4318294 2 3  Operations on NIS+ master slow when bug fix 4165775 is introduced
 
(from 106942-12)
 
4295834 NETPATH security problem in libnsl
4296198 NIS_OPTIONS sh vars (libnsl) security problem
 
(from 106942-11)
 
4305859 libnsl bug can cause application core dump due to ill-formed remote address.
 
(from 106942-10)
 
4232494 sendmail dumps core on autoclient machines running NISPLUS
 
(from 106942-09)
 
4124715 Denial of Service in connection oriented transports.
 
(from 106942-08)
 
4246959 rpc.nispasswdd leaks memory during normal use
 
(from 106942-07)
 
4202735 mountd hangs on server when file descriptor cache associated
        with RPC connection expires.
4222922 mountd hangs waiting for nameservice because of deadlock
	within nis_handle()
 
(from 106942-06)
 
4233192 NIS+ stops responding to UDP requests
4165775 Replica servers may attempt to allocate huge amounts of memory.
4240463 checkpoint completes, but does not clear master's transaction log
 
(from 106942-05)
 
4239643 rgmd servers core dump when running low on memory due to non-robust RPC
 
(from 106942-04)
 
4055715 PSARC/1999/159 - NIS_PING not authenticated
4055704 PSARC/1999/159 - NIS_CALLBACK not authenticated
4055724 PSARC/1999/159 - NIS_CHECKPOINT not authenticated
4055727 PSARC/1999/159 - NIS_CPTIME not authenticated
4216240 nisd generates irrelevant messages  "isn't a directory"
 
(from 106942-03)
 
4186012 NIS+ replicas may lose synchronization with the NIS+ master
 
(from 106942-02)
 
4162879 After the TTL value of directory cache expires the subdomain client. root object
 
(from 106942-01)
 
4161969 passwd lookups via FOLLOW_LINK do not FOLLOW_PATH from linked table any further
4157559 automountd won't retry the Null call to nfsd in pingnfs()
 
(from 107215-01)
 
4152002 NIS+ groups do not work in the Solaris 2.6

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-9 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
Install patch in Single User Mode.
Reboot the system after patch installation.
 
        NOTE 1:   To get the complete fix for 4246959 (rpc.nispasswdd
                  leaks memory during normal use) one also needs to install
                  the following patch:
 
                  108551-03 (or greater)  /usr/sbin/rpc.nispasswd patch
 
        NOTE 2:   To get the complete fix for bug 4124715 (DENIAL OF
                  SERVICE IN CONNECTION ORIENTED TRANSPORTS), one also
                  needs to install the following patches:
 
                  106541-21 (or greater)  kernel update patch
                  107477-04 (or greater)  /usr/lib/nfs/mountd
                  108748-02 (or greater)  /usr/lib/nfs/statd
                  108750-02 (or greater)  /usr/lib/netsvc/yp/ypbind
                  108754-01 (or greater)  /usr/lib/netsvc/yp/ypxfrd
                  108756-01 (or greater)  /usr/lib/netsvc/yp/rpc.ypupdated
                  108758-01 (or greater)  /usr/sbin/keyserv
                  108760-01 (or greater)  /usr/sbin/rpcbind
                  108762-01 (or greater)  /usr/sbin/rpc.nisd_resolv
                  108764-01 (or greater)  /usr/sbin/rpc.bootparamd
                  108551-03 (or greater)  /usr/sbin/rpc.nispasswdd
 
        NOTE 3:   In order to obtain the complete fix for bugid 4691127 
                  (possible type overflow in xdr_array), one also needs to 
                  install the following patch:
 
                  108451-06 (or greater)  rpcmod patch
 
        NOTE 4:   In order to obtain the complete fix for bugid 1226166 
                  (rpcbind does not bind with the correct network interface), 
                  one also needs to install the following patch:
 
                  108760-02 (or greater)  rpcbind patch  
 
        NOTE 5:   The fix for bugID# 4680691 uncovered a bug (4775198) in
                  the SUNWjbcp package. A patch for this bug has been released
                  as PatchID# 114151-01. This patch or a later revision of it
                  has to be installed if you use the SUNWjbcp package.
 
        NOTE 6:   In order to obtain the complete fix for bugid 4668699 (buffer
                  overflow in dbm_open and dbminit, except the one in libc)
                  one also needs to install the following patch:
 
                  106949-03 (or greater)  BCP patch  
 
        NOTE 7:   In order to obtain the complete fix for bug 5109439, rpc.nisd 
                  stuck looping in __nis_path(), one also needs to install the
                  following patch:
 
                  106938-09 (or greater)  libresolv, libadm & nslookup patch

README -- Last modified date:  Friday, April 29, 2005

