Patch-ID# 112874-09
Keywords: security buffer overflow dbm_open getutxent_frec looping setuid
Synopsis: SunOS 5.9: patch libc
Date: 30/Oct/02

Solaris Release: 9

SunOS release: 5.9

Unbundled Product: 

Unbundled Release: 

Topic: SunOS 5.9: patch libc

BugId's fixed with this patch: 1258570 4192824 4248430 4318178 4390053 4444569 4503048 4510326 4635556 4661997 4669963 4683320 4700602 4704190 4756113 4770160

Changes incorporated in this version: 4770160

Relevant Architectures: sparc

Patches accumulated and obsoleted by this patch:  

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch:

/etc/security/crypt.conf
/etc/security/policy.conf
/usr/lib/abi/abi_libc.so.1
/usr/lib/abi/sparcv9/abi_libc.so.1
/usr/lib/libc.a
/usr/lib/libc.so.1
/usr/lib/libp/libc.a
/usr/lib/libp/sparcv9/libc.so.1
/usr/lib/llib-lc.ln
/usr/lib/pics/libc_pic.a
/usr/lib/pics/sparcv9/libc_pic.a
/usr/lib/sparcv9/libc.so.1
/usr/lib/sparcv9/llib-lc.ln

Problem Description:

4770160	compile fails with unknown file type message

(from 112874-08)

4669963 Strong security checks in catgets(3C) break setuid application

(from 112874-07)

4510326 strfmon may cause a stack buffer overflow
4756113 libc version number is incorrect in s9u2 and s10

(from 112874-06)

4390053 crypt(3c) needs to interoperate with *BSD and Linux
4248430 RFE: NIS+ should support alternate encryption algorithms for the user password
4192824 newkey/chkey should use a configurable crypt() to encrypt the users password
4700602 crypt_gensalt should be version SUNW_1.22 instead of SUNW_1.21

(from 112874-05)

1258570 qsort performs poorly with multiple identical keys
4635556 *atexit* atexit() does not scale. Can cause very slow startup of C++ programs.

(from 112874-04)

4683320 S9 gettext(3c) does not recognize mo files built on 2.6 as a valid message
4704190 Remove clientusr/clientroot from SUNW_PATCH_PROPERTIES for 112837 & 112874-02

(from 112874-03)

4503048 getutxent_frec sends init looping

(from 112874-02)

4318178 wordexp puts automatic string into environment.
4444569 Purify reports memory leaks in wordexp(3C)

(from 112874-01)

4661997 buffer overflow in dbm_open

Patch Installation Instructions:
--------------------------------

For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.

For Solaris 7-9 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:

       example# patchadd /var/spool/patch/104945-02

The following example removes a patch from a standalone system:

       example# patchrm 104945-02

For additional examples please see the appropriate man pages.

Special Install Instructions: 
----------------------------- 

NOTE 1:	To get the complete fix for bugid 4503048, please install
	the following patch:      

	113032-01 (or newer)	/usr/sbin/init patch

NOTE 2: To get the complete Flexible Crypt feature, please install the
        following patches:

        113475-01       (or newer)      libsecurity crypt
        113476-01       (or newer)      passwdutil.so.1
        113480-01       (or newer)      pam_unix Patch
        113481-01       (or newer)      nispasswdd
        113482-01       (or newer)      rpc.ypasswd
        113483-01       (or newer)      sbin/sulogin

