Patch-ID# 115927-08
Keywords: nspr nss security jss
Synopsis: SunOS 5.9_x86: NSPR 4.1.6 / NSS 3.3.10 / JSS 3.1.3
Date: May/28/2004


Install Requirements: None                      
                      
Solaris Release: 9_x86

SunOS Release: 5.9_x86

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for sparc as patch 115926

Topic: 

Relevant Architectures: i386

BugId's fixed with this patch: 4885952 4886464 4888311 4903564 4933535 4945089 4972840 4991529 5004563 5011517 5016209 5016498

Changes incorporated in this version: 5016209

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/lib/mps/secv1/libjss3.so
/usr/lib/mps/secv1/libnspr4.so
/usr/lib/mps/secv1/libnss3.so
/usr/lib/mps/secv1/libnssckbi.so
/usr/lib/mps/secv1/libplc4.so
/usr/lib/mps/secv1/libplds4.so
/usr/lib/mps/secv1/libsmime3.so
/usr/lib/mps/secv1/libssl3.so
/usr/sfw/bin/certutil
/usr/sfw/bin/cmsutil
/usr/sfw/bin/crlutil
/usr/sfw/bin/modutil
/usr/sfw/bin/pk12util
/usr/sfw/bin/signtool
/usr/sfw/bin/signver
/usr/sfw/bin/ssltap
/usr/share/lib/mps/secv1/jss3.jar

Problem Description:

5016209 - Crash in DER_UTCTimeToTime with corrupt certificate
 
(from 115927-07)
 
5016498 Patch 115927-06 not built correctly
 
(from 115927-06)
 
5011517 SUNWtlsu tools are missing/corrupt on SPARC and x86 Solaris
 
(from 115927-05)
 
4991529 - Improve NSS error messages - serviceability issue
5004563 - Web Server crashes when client presents an invalid cert
 
(from 115927-04)
 
4972840 - Potential DOS target on NSS libraries
 
(from 115927-03)
 
4933535 - The JSS client certificate callback API allows one to have a successful handshake
4945089 - ASN1 Decoder can suffer denial of service attacks
 
(from 115927-02)
 
4888311 CertStore.delete certificate does not work for CA certificate
4886464 SSL Client authentication is not working
4885952 JVM crash occuring during SSLSocket.read()
 
(from 115927-01)
 
4903564 Security libraries (3.3.5+) for Orion should install in new
	location

Patch Installation Instructions:
-------------------------------- 
Refer to the man pages for instructions on using 'patchadd' and 
'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/115927-08
 
The following example removes a patch from a standalone system:
 
       example# patchrm 115927-08
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
--------------------
None.

README -- Last modified date:  Friday, May 28, 2004

