Patch-ID# 112960-12
Keywords: security libsldap ldap_cachemgr ldap sigbus buffer libldap
Synopsis: SunOS 5.9: patch libsldap ldap_cachemgr libldap
Date: Mar/17/2004


Install Requirements: Install in Single User Mode                      
                      Reboot immediately after patch is installed                      
                      
Solaris Release: 9

SunOS Release: 5.9

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 114241

Topic: SunOS 5.9: patch libsldap ldap_cachemgr libldap

Relevant Architectures: sparc

BugId's fixed with this patch: 4357827 4523936 4614945 4624458 4630226 4643366 4645604 4648140 4648146 4658569 4658625 4660019 4677591 4682120 4683522 4720818 4723361 4751386 4757282 4776571 4779333 4780109 4787488 4802414 4830525 4920444

Changes incorporated in this version: 4920444

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/include/ldap.h
/usr/lib/abi/abi_libldap.so.5
/usr/lib/abi/abi_libsldap.so.1
/usr/lib/abi/sparcv9/abi_libsldap.so.1
/usr/lib/ldap/ldap_cachemgr
/usr/lib/libldap.so.4
/usr/lib/libldap.so.5
/usr/lib/libsldap.so.1
/usr/lib/llib-lldap
/usr/lib/llib-lldap.ln
/usr/lib/llib-lsldap
/usr/lib/llib-lsldap.ln
/usr/lib/nss_ldap.so.1
/usr/lib/sparcv9/libldap.so.4
/usr/lib/sparcv9/libldap.so.5
/usr/lib/sparcv9/libsldap.so.1
/usr/lib/sparcv9/llib-lldap.ln
/usr/lib/sparcv9/llib-lsldap.ln
/usr/lib/sparcv9/nss_ldap.so.1

Problem Description:

4920444 libldap.so.4 ber encoding memory corruption
 
(from 112960-11)
 
4523936 mountd memory leak when using Native LDAP
 
(from 112960-10)
 
4787488 ldapaddent can only add ethers or bootparams for the same hosts, not both.
 
(from 112960-09)
 
4643366 Groups with no members broken
4779333 ldap get*ent requests may free already freed memory
4780109 __ns_ldap_firstEntry may return a cookie that is freed
4830525 Buffer overflow in nss_ldap.so.1
 
(from 112960-08)
 
4802414 Client does not follow referral without hostname.
4658569 Following referrals does not work in all cases
 
(from 112960-07)
 
4757282 ldapclient init fails with SIGBUS if SSD's are > 15 in profile
 
(from 112960-06)
 
4624458 if hostname is used in NS_LDAP_SERVERS, ldap goes into loop
4723361 log messages when resolving hostname for ldap_server
4776571 Applications running on SSL enabled native ldap clients may crash at termination
 
(from 112960-05)
 
4751386 ether_ntohost() fails with rc 1 when resolving data from LDAP
 
(from 112960-04)
 
4720818 LDAP naming services fails when domainname is greater than 23 characters
 
(from 112960-03)
 
4357827 pam_ldap should fully support password aging
4677591 implement PSARC/2002/241 - PAM binding control flag
4660019 nss_ldap.so may return non '-1' values for getspnam()
4682120 get/set_item conversation function tracing needs improvement.
4658625 pam_framework doesn't trace pam_chauthtok PAM_TRY_AGAIN return.
4683522 pam_get_data tracing could improve.
 
(from 112960-02)
 
4614945 Memleak in getgrent() when using against Native Ldap.
 
(from 112960-01)
 
4645604 A race condition in ldap_cachemgr cause ldapclient to fail
4630226 __s_api_requestServer fails when ldap_cachemgr is updating the profile
4648140 libsldap fails when NS_LDAP_CACHETTL = 0
4648146 __ns_ldap_getParam returned incorrect value for the NS_LDAP_EXP parameter

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-9 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
 
NOTE 1: To get the complete PAM LDAP feature, please install the
following patches:
 
        113476-01       (or newer)      pam_ldap

README -- Last modified date:  Wednesday, March 17, 2004

