Patch-ID# 115924-08
Keywords: nspr nss security jss
Synopsis: SunOS 5.8: NSPR 4.1.6 / NSS 3.3.10 / JSS 3.1.3
Date: Jun/01/2004


Install Requirements: None                      
                      
Solaris Release: 8

SunOS Release: 5.8

Unbundled Product: NSS/JSS/NSPR

Unbundled Release: 3.3.10

Xref: 

Topic: 

Relevant Architectures: sparc

BugId's fixed with this patch: 4885952 4886464 4888311 4903564 4933535 4945089 4972840 4991529 5004563 5011517 5016209 5016498

Changes incorporated in this version: 5016209

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/lib/mps/secv1/64
/usr/lib/mps/secv1/cpu/sparcv8plus/libnspr_flt4.so
/usr/lib/mps/secv1/libfreebl_hybrid_3.so
/usr/lib/mps/secv1/libfreebl_pure32_3.so
/usr/lib/mps/secv1/libjss3.so
/usr/lib/mps/secv1/libnspr4.so
/usr/lib/mps/secv1/libnss3.so
/usr/lib/mps/secv1/libnssckbi.so
/usr/lib/mps/secv1/libplc4.so
/usr/lib/mps/secv1/libplds4.so
/usr/lib/mps/secv1/libsmime3.so
/usr/lib/mps/secv1/libssl3.so
/usr/lib/mps/secv1/sparcv9/libjss3.so
/usr/lib/mps/secv1/sparcv9/libnspr4.so
/usr/lib/mps/secv1/sparcv9/libnss3.so
/usr/lib/mps/secv1/sparcv9/libnssckbi.so
/usr/lib/mps/secv1/sparcv9/libplc4.so
/usr/lib/mps/secv1/sparcv9/libplds4.so
/usr/lib/mps/secv1/sparcv9/libsmime3.so
/usr/lib/mps/secv1/sparcv9/libssl3.so
/usr/sfw/bin/certutil
/usr/sfw/bin/cmsutil
/usr/sfw/bin/crlutil
/usr/sfw/bin/modutil
/usr/sfw/bin/pk12util
/usr/sfw/bin/signtool
/usr/sfw/bin/signver
/usr/sfw/bin/ssltap
/usr/share/lib/mps/secv1/jss3.jar
/usr/share/lib/mps/secv1/sparcv9/jss3.jar

Problem Description:

5016209 - Crash in DER_UTCTimeToTime with corrupt certificate
 
(from 115924-07)
 
5016498 Patch 115924-06 not built correctly
 
(from 115924-06)
 
5011517 SUNWtlsu tools are missing/corrupt on SPARC and x86 Solaris
 
(from 115924-05)
 
4991529 - Improve NSS error messages - serviceability issue
5004563 - Web Server crashes when client presents an invalid cert
 
(from 115924-04)
 
4972840 - Potential DOS target on NSS libraries
 
(from 115924-03)
 
4933535 - The JSS client certificate callback API allows one to have a successful handshake
4945089 - ASN1 Decoder can suffer denial of service attacks
 
(from 115924-02)
 
4888311 CertStore.delete certificate does not work for CA certificate
4886464 SSL Client authentication is not working
4885952 JVM crash occuring during SSLSocket.read()
 
(from 115924-01)
 
4903564 Security libraries (3.3.5+) for Orion should install in new
	location

Patch Installation Instructions:
-------------------------------- 
Refer to the man pages for instructions on using 'patchadd' and 
'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/115924-08
 
The following example removes a patch from a standalone system:
 
       example# patchrm 115924-08
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
--------------------
None.

README -- Last modified date:  Tuesday, June 1, 2004

