Patch-ID# 113719-16 Keywords: security gethostbyname rpc.nispasswdd rpc.nisd nisplus nis ldap Synopsis: SunOS 5.9_x86: libnsl rpc.nispasswdd Patch Date: Apr/14/2005 Install Requirements: Reboot immediately after patch is installed Install in Single User Mode Solaris Release: 9_x86 SunOS Release: 5.9_x86 Unbundled Product: Unbundled Release: Xref: This patch available for SPARC as patch 113319 Topic: SunOS 5.9_x86: libnsl rpc.nispasswdd Patch Relevant Architectures: i386 BugId's fixed with this patch: 4152876 4353836 4503714 4644308 4655472 4668699 4674036 4684558 4686960 4687778 4688447 4710928 4724357 4727726 4738852 4745909 4757387 4765506 4767276 4806914 4817833 4823553 4828271 4874895 4915053 4941669 4966526 4973536 4977978 4990222 4996337 4997108 5016629 5071759 5106725 5109439 Changes incorporated in this version: 4503714 4686960 4757387 4941669 4996337 4997108 5071759 5109439 Patches accumulated and obsoleted by this patch: 115166-05 115493-01 Patches which conflict with this patch: Patches required with this patch: 113988-07 (or greater) Obsoleted by: Files included with this patch: /usr/include/rpcsvc/nis.x /usr/include/rpcsvc/nislib.h /usr/lib/abi/abi_libnsl.so.1 /usr/lib/libnisdb.a /usr/lib/libnisdb.so.2 /usr/lib/libnsl.a /usr/lib/libnsl.so.1 /usr/lib/llib-lnsl /usr/lib/llib-lnsl.ln /usr/lib/nis/nisping /usr/sbin/rpc.nisd /usr/sbin/rpc.nispasswdd Problem Description: 4503714 rpc.nisd memory leaks and SEGVs 4686960 NIS+ replica/domain hangs if master is gone and TTL expires on replica 4757387 Several daemons die with same stack trace strlen/xdr_nis_name/xdr_directory_obj 4941669 getpwent() calls core dump. 4996337 Replica stuck sleeping in replica_update following nismkdir/nisrmdir 4997108 Spurious nis_db_sync_log errors in syslog (info level) 5071759 Minor memory bugs prevent effective use of libumem with rpc.nisd 5109439 rpc.nisd stuck looping in __nis_path() (from 113719-15) 5106725 netname to user resolution wont work for ldap (from 113719-14) 4644308 when public network is down, switching to a user using "su" hangs (from 113719-13) 4966526 Problem using RPC_SVC_CONNMAXREC_SET when using the rpc mode RPC_SVC_MT_USER (from 113719-12) 4817833 mountd randomly dumps core 4745909 _get_hostserv_inetnetdir_byname/NETDIR_BY may return success on failure 4915053 nss_setent() always fails for setpwent() 4973536 libnsl - t_getprotaddr memory leak 4977978 Application deadlock in t_snd (libnsl) library call (from 113719-11) 4738852 NIS: ypserv dev udp opened failed (from 113719-10) 4757387 Several daemons die with same stack trace strlen/xdr_nis_name/xdr_directory_obj (from 113719-09) 4684558 NIS server doesn't answer ypbind broadcast request on IPMP failed over interface (from 113719-08) 4765506 NIS+ password problems with Solaris 9 (from 113719-07) 4828271 clnt_create()/clnt_create_timed() don't timeout with unexpected UDP. (from 113719-06) 4874895 S9 x86 patches for 4353836 needs to be respun with correct dependencies (from 113719-05) 4353836 if more than 255 file descriptors are already open then gethostbyname fails 4152876 getspnam_r() fails due to use of fopen() in libnsl.so in applications under load (from 113719-04) 4767276 rpcbind can be killed remotely (from 113719-03) 4668699 buffer overflow in dbm_open and dbminit (except the one in libc) (from 113719-02) 4710928 rpcbind exits with segv on both cluster node (from 113719-01) 4727726 NIS+ user unable to change his/her passwd. (from 115166-05) 5016629 NIS+2LDAP: rpc.nisd does not re-BIND to DS after DS was restarted (from 115166-04) 4990222 ypxfrd does not consistently create netgroup maps (from 115166-03) 4724357 NIS+LDAPmapping: searches for creduser in ou=Hosts are causing high overload (from 115166-02) This patch revision was generated to accumulate and obsolete the changes introduced in Solaris Update s9u5 feature point patch 115493-01. (from 115166-01) 4655472 segv in rpc.nisd on x86 stc tests (from 115493-01) 4823553 NIS to LDAP transition project (N2L) 2001/282 4806914 Use of multiple domains corrupts data in the mapping elements while parsing 4687778 Parser cannot process blank lines with tab spaces. 4688447 Parser cannot parse lines with unescaped '#' 4674036 get_lhs_match frees __nis_mapping_element_t even though it contains useful data. Patch Installation Instructions: -------------------------------- For Solaris 2.0-2.6 releases, refer to the Install.info file and/or the README within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. For Solaris 7-10 releases, refer to the man pages for instructions on using 'patchadd' and 'patchrm' scripts provided with Solaris. Any other special or non-generic installation instructions should be described below as special instructions. The following example installs a patch to a standalone machine: example# patchadd /var/spool/patch/104945-02 The following example removes a patch from a standalone system: example# patchrm 104945-02 For additional examples please see the appropriate man pages. Special Install Instructions: ----------------------------- NOTE 1: To get a complete fix for the bug 4668699, please also install the following patches : 114570-01 (or newer ) libdbm Patch 114715-01 (or newer ) libdb2.so.1 Patch NOTE 2: To get the complete fix for the bugids 4353836 and 4874895, please install the following patches, in addition to this patch: (This libnsl patch must be the first patch to be installed.) 114354-04 (or newer) libresolv patch 115546-02 (or newer) nss_files patch 115551-02 (or newer) nss_user patch 115543-02 (or newer) nss_compat patch NOTE 3: To get the complete fix for the bug 4765506, please install the following patch in addition to this patch: 114242-04 (or newer) passwdutil.so.1 patch NOTE 4: To get the complete fix for the bug 4915053, please install the following patch in addition to this patch: 114432-13 (or newer) libthread.so.1 libc patch NOTE 5: To get the complete fix for BugID 4644308, please also install the following patch: 117432-01 (or newer) nss_nis Patch NOTE 6: To get the complete NIS to LDAP Transition Project, please also install the following patches: 114342-02 (or newer) YP components patch 115678-01 (or newer) idsconfig patch README -- Last modified date: Thursday, April 14, 2005