Patch-ID# 112536-04
Keywords: kerberos mech_krb5.so.1 kmech_krb5 gss mech security
Synopsis: SEAM 1.0: Patch for Solaris 7
Date: Nov/05/2003


Install Requirements: Additional instructions may be listed below                      
                      
Solaris Release: 7

SunOS Release: 5.7

Unbundled Product: Solaris Enterprise Authentication Mechanism

Unbundled Release: 1.0

Xref: This patch available for x86 as patch 112537

Topic: 

Relevant Architectures: sparc

BugId's fixed with this patch: 4338622 4691352 4836676

Changes incorporated in this version: 4836676

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/kernel/misc/kgss/do_kmech_krb5
/kernel/misc/kgss/gl_kmech_krb5
/kernel/misc/kgss/sparcv9/do_kmech_krb5
/kernel/misc/kgss/sparcv9/gl_kmech_krb5
/usr/lib/gss/do/mech_krb5.so
/usr/lib/gss/do/mech_krb5.so.1
/usr/lib/gss/gl/mech_krb5.so
/usr/lib/gss/gl/mech_krb5.so.1
/usr/lib/sparcv9/gss/do/mech_krb5.so
/usr/lib/sparcv9/gss/do/mech_krb5.so.1
/usr/lib/sparcv9/gss/gl/mech_krb5.so
/usr/lib/sparcv9/gss/gl/mech_krb5.so.1

Problem Description:

4836676 Bounds checks not in place for princs in krbv5
 
(from 112536-03)
 
4691352 Multiple Kerberos vulnerabilities need to be fixed (rework)
 
(from 112536-02)
 
4691352 Multiple Kerberos vulnerabilities need to be fixed
 
(from 112536-01)
 
4338622 BUFFER OVERRUN VULNERABILITIES IN KERBEROS (SEAM)

Patch Installation Instructions:
--------------------------------
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-8 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
For Bug ID 4338622, the complete fix requires
patch 110057-05 or newer. Although patches 112536-01
and 110057-05 do not require/depend on each other,
the complete resolution for the bug requires both.
 
For Bug ID 4836676, the complete fix requires
patch 110057-07 or newer. Although patches 112536-04
and 110057-07 do not require/depend on each other,
the complete resolution for the bug requires both.

README -- Last modified date:  Wednesday, November 5, 2003

