Patch-ID# 113329-08
Keywords: security lp slow-filtering print request cancel lpstat buffer
Synopsis: SunOS 5.9: lp Patch
Date: May/20/2004


Install Requirements: Reconfigure immediately after patch is installed                      
                      
Solaris Release: 9

SunOS Release: 5.9

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 114980

Topic: SunOS 5.9: lp Patch

Relevant Architectures: sparc

BugId's fixed with this patch: 4530499 4593031 4626542 4635978 4640166 4640976 4648825 4652453 4687458 4687483 4697460 4704146 4704153 4704157 4704303 4704376 4704377 4704786 4704793 4704798 4704812 4704824 4704921 4704926 4705611 4705626 4705635 4705663 4705665 4705899 4705910 4705911 4705915 4705933 4705937 4705943 4705947 4705948 4705950 4705957 4705959 4705977 4706351 4714952 4734301 4751570 4761753 4761791 4775108 4809082 4809690 4819203 4902916 4915855 4925015 4927784 4930119 4940032 4981362 5025203

Changes incorporated in this version: 

Patches accumulated and obsoleted by this patch: 114979-01 115882-01 116239-01

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/etc/security/exec_attr
/usr/bin/cancel
/usr/bin/lp
/usr/bin/lpget
/usr/bin/lpset
/usr/bin/lpstat
/usr/lib/libprint.so.2
/usr/lib/lp/bin/getmakes
/usr/lib/lp/bin/getmodels
/usr/lib/lp/bin/getppdfile
/usr/lib/lp/bin/getppds
/usr/lib/lp/bin/lp.cat
/usr/lib/lp/bin/lp.tell
/usr/lib/lp/bin/netpr
/usr/lib/lp/bin/ppdfilename2mmp
/usr/lib/lp/local/accept
/usr/lib/lp/local/lp
/usr/lib/lp/local/lpadmin
/usr/lib/lp/local/lpmove
/usr/lib/lp/local/lpstat
/usr/lib/lp/local/lpsystem
/usr/lib/lp/lpsched
/usr/lib/lp/postscript/download
/usr/lib/lp/postscript/dpost
/usr/lib/lp/postscript/picpack
/usr/lib/lp/postscript/postcomm
/usr/lib/lp/postscript/postdaisy
/usr/lib/lp/postscript/postdmd
/usr/lib/lp/postscript/postio
/usr/lib/lp/postscript/postplot
/usr/lib/lp/postscript/postprint
/usr/lib/lp/postscript/postreverse
/usr/lib/lp/postscript/posttek
/usr/lib/print/bsd-adaptor/bsd_lpsched.so.1
/usr/lib/print/conv_fix
/usr/lib/print/in.lpd
/usr/lib/print/psm-lpsched.so
/usr/lib/print/psm-lpsched.so.1
/usr/sadm/admin/bin/printmgr
/usr/sadm/admin/printmgr/classes/pmclient.jar
/usr/sadm/admin/printmgr/classes/pmserver.jar
/usr/sadm/admin/printmgr/lib/libpmgr.so
/usr/sadm/admin/printmgr/lib/libpmgr.so.1
/usr/sbin/lpadmin
/usr/sbin/lpfilter
/usr/sbin/lpforms
/usr/sbin/lpmove
/usr/sbin/lpshut
/usr/sbin/lpusers
/usr/ucb/lpc

Problem Description:

Patch respun to create /etc/lp/ppd directory during patchadd via postpatch script.
 
(from 113329-07)
 
4530499 invalid syslog message when printer does not exist.
4593031 receive NullPointerExceptions when selecting menu options quickly
4626542 lpshut ignores that it can't get a lock on FIFO and just continues to loop
4635978 in.lpd turns into a fork()/exec() bomb
4640976 client: generation of copyright file is dodgy
4652453 incorrect messaging in lp.cat
4687458 lpmove dumps core when *malloc* call returns NULL
4687483 netpr dumps core when *malloc* calls fail
4704146 lpforms: potential race condition creating temporary file
4704153 potential buffer overrun in in.lpd
4704157 lpadmin: bad use of gets()
4704303 lpsched: use of cftime() is dangerous
4704376 usr/src/cmd/lp/filter/postscript/common/misc.c error() should be varargs
4704377 usr/src/cmd/lp/filter/postscript/postcomm/postcomm.c error() should be varargs
4704786 lpsched: potential buffer overruns
4704793 lpsched: racy stat()
4704798 lpc: potential buffer overruns
4704921 lp: creates temporary files with fopen()
4704926 lp: potential buffer overruns
4705611 libprint:bsd_addr_create() should check result of malloc()
4705626 libprint:ns_cmn_kvp.c has memory issues
4705635 libprint:ns_printer_create() may not initialize memory
4705663 libprint:nss_ldap.c: unsafe use of strncpy()
4705665 libprint:nss_ldap.c: memory may not be initialized
4705910 libprint:job.c: makes unsafe use of open(O_CREAT)
4705915 libprint:job.c: doesn't check *alloc() results
4705933 libprint:misc.c:  unsafe use of cftime()
4705937 libprint:misc.c: unchecked *alloc() result
4705943 cancel: unchecked memory allocation
4705950 usr/src/cmd/lp/model/netpr/misc.c vsprintf to fixed buffer
4705957 lpstat: extraneous chdir, unchecked *alloc()
4705959 lpset: uncheck *alloc() returns
4705977 lp: calls tempnam()
4706351 lpadmin: no warning when creating a printer on a user-owned symlink
4734301 lp system fails POSIX VSC tests s10_16
4751570 lpc generates the core dump in solaris 8 2/02.
4761791 default timeout in netpr should be initialized
4775108 lp gives an error when file is NFS mounted and containing directory is 700
4809082 lpsched: R_INQUIRE_REQUEST_RANK does not include requests submitted to classes
4819203 Solaris printmgr generates warning with compile with javac 1.4.2
4930119 network printer timeout does not reset on fault clearance
4940032 Solaris should support IPP clients (LSARC/2001/259)
4981362 java 1.5 and printmgr problems
5025203 Solaris printing needs RIP functionality (on)
 
(from 113329-06)
 
4809690 submitted print jobs don't seem to disappear after printing
4915855 printmgr cannot admin print queues stored in an LDAP nameservice
 
(from 113329-05)
 
4697460 hanging printd should not block all printjobs to remote
 
(from 113329-04)
 
4927784 special patch is needed for bugid 4902916 and 4648825
 
(from 113329-03)
 
4925015 pullback of 4648825 fix took 4761753/4714952/4705911/4705899/4704812 with it
 
(from 113329-02)
 
4648825 Printer Management profile in exec_attr file is ineffective
4704812 lpstat: cftime() is deprecated in favor of strftime()
4705899 libprint:nss_write.c uses fopen() to create temp file
4705911 lib/print/job.c: makes unsafe use of access()
4714952 bsd-gw gives "dfAnnnhostname file exists" from a previous job
4761753 file descriptor "fd" is not closed in job_retrieve()
 
(from 113329-01)
 
4640166 lp: when hold a request during slow-filtering, a request could be canceled
 
(from 114979-01)
 
4704824 lpstat: potential buffer overrun
 
(from 115882-01)
 
4902916 cancel cmd does not work well with RBAC Printer Management
 
(from 116239-01)
 
4705948 conv_fix: unsafe use of fopen()
4705947 conv_fix: should use strlcat

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-9 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
 
None.

README -- Last modified date:  Thursday, May 20, 2004

