OBSOLETE Patch-ID# 106942-17
Keywords: security libnsl automountd nfsd rpc lookups rpc.nisd initgroups
Synopsis: Obsoleted by: 106942-18 SunOS 5.7: libnsl, rpc.nisd and nis_cachemgr patch
Date: Jun/28/2001

Solaris Release: 7

SunOS Release: 5.7

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 106943

Topic: SunOS 5.7: libnsl, rpc.nisd and nis_cachemgr patch
       NOTE:  Refer to Special Install Instructions section for 
              IMPORTANT specific information on this patch.

Relevant Architectures: sparc

BugId's fixed with this patch: 4055704 4055715 4055724 4055727 4124715 4152002 4157559 4161969 4162879 4165775 4186012 4202735 4216240 4222922 4232494 4233192 4239643 4240463 4246959 4280714 4283726 4295834 4296198 4302436 4302592 4305859 4318294 4326943 4327396 4336332 4354007 4374142 4428119

Changes incorporated in this version: 4283726 4302436 4327396 4354007 4428119

Patches accumulated and obsoleted by this patch: 107215-01

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/include/rpc/rpc_com.h
/usr/include/rpc/svc.h
/usr/lib/libnisdb.a
/usr/lib/libnisdb.so.2
/usr/lib/libnsl.a
/usr/lib/libnsl.so.1
/usr/lib/nis/nisopaccess
/usr/lib/nis/nisping
/usr/lib/sparcv9/libnsl.so.1
/usr/sbin/nis_cachemgr
/usr/sbin/rpc.nisd

Problem Description:

4283726 fsck hangs in phase 4 in getpwuid() call
4302436 getgrgid() hangs on large group lookups to NIS+
4327396 nis_modify_entry(): deadlock in rpc_fd_lock() with MT nis table modification
4354007 xdrmem_putbytes and xdrmem_putlong emit a syslog error message when the buffer isn't long enough
4428119 106942-15 breaks TLI with EOVERFLOW on Solaris 7
 
(from 106942-16)
 
4374142 RPC services using RPC_SVC_MT_AUTO can stop listening
 
(from 106942-15)
 
4336332 svc_getreqset (t_accept) returns illegal file descriptor in Solaris 7/8
 
(from 106942-14)
 
4280714 rpc.nisd hangs and consumes a lot of memory
4302592 TLI library is not fork-safe
4326943 Gets hundreds of __directory_object: Failed to lookup ... no such name
 
(from 106942-13)
 
4318294 Operations on NIS+ master slow when bug fix 4165775 is introduced
 
(from 106942-12)
 
4295834 NETPATH security problem in libnsl
4296198 NIS_OPTIONS sh vars (libnsl) security problem
 
(from 106942-11)
 
4305859 libnsl bug can cause application core dump due to ill-formed remote address.
 
(from 106942-10)
 
4232494 sendmail dumps core on autoclient machines running NISPLUS
 
(from 106942-09)
 
4124715 Denial of Service in connection oriented transports.
 
(from 106942-08)
 
4246959 rpc.nispasswdd leaks memory during normal use
 
(from 106942-07)
 
4202735 mountd hangs on server when file descriptor cache associated 
        with RPC connection expires.
4222922 mountd hangs waiting for nameservice because of deadlock 
	within nis_handle() 
 
(from 106942-06)
 
4233192 NIS+ stops responding to UDP requests
4165775 Replica servers may attempt to allocate huge amounts of memory.
4240463 checkpoint completes, but does not clear master's transaction log
 
(from 106942-05)
 
4239643 rgmd servers core dump when running low on memory due to non-robust RPC
 
(from 106942-04)
 
4055715 PSARC/1999/159 - NIS_PING not authenticated
4055704 PSARC/1999/159 - NIS_CALLBACK not authenticated
4055724 PSARC/1999/159 - NIS_CHECKPOINT not authenticated
4055727 PSARC/1999/159 - NIS_CPTIME not authenticated
4216240 nisd generates irrelevant messages  "isn't a directory"
 
(from 106942-03)
 
4186012 NIS+ replicas may lose synchronization with the NIS+ master
 
(from 106942-02)
 
4162879 After the TTL value of directory cache expires the subdomain client. root object
 
(from 106942-01)
 
4161969 passwd lookups via FOLLOW_LINK do not FOLLOW_PATH from linked table any further
4157559 automountd won't retry the Null call to nfsd in pingnfs()
 
(from 107215-01)
 
4152002 NIS+ groups do not work in the Solaris 2.6

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-8 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
----------------------------- 
 
	NOTE 1:   To get the complete fix for 4246959 (rpc.nispasswdd 
	          leaks memory during normal use) you also need to install
	          the following patch:
 
	      		108551-02  (or newer)  /usr/sbin/rpc.nispasswd patch
 
	NOTE 2:   To get the complete fix for bug 4124715 (DENIAL OF
		  SERVICE IN CONNECTION ORIENTED TRANSPORTS), one also
		  needs to install the following patches:
 
			107477-03  (or newer)   /usr/lib/nfs/mountd 
			108748-01  (or newer)	/usr/lib/nfs/statd
			108750-01  (or newer)	/usr/lib/netsvc/yp/ypbind
			108752-01  (or newer)	/usr/lib/netsvc/yp/ypserv
			108754-01  (or newer)	/usr/lib/netsvc/yp/ypxfrd
			108756-01  (or newer)	/usr/lib/netsvc/yp/rpc.ypupdated
			108758-01  (or newer)	/usr/sbin/keyserv
			108760-01  (or newer)	/usr/sbin/rpcbind
			108762-01  (or newer)	/usr/sbin/rpc.nisd_resolv
			108764-01  (or newer)	/usr/sbin/rpc.bootparamd
			108551-03  (or newer)	/usr/sbin/rpc.nispasswdd

README -- Last modified date:  Thursday, February 14, 2002

