Patch-ID# 109328-07


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: security ypserv ypxfr clnt_call ypserv_resolv ypxfrd map handling
Synopsis: SunOS 5.8: ypserv, ypxfr and ypxfrd patch
Date: Feb/20/2007


Install Requirements: Perform a reconfigure reboot after installing this patch to activate the changes delivered. An alternative may be specified in the Special Install Instructions.

Solaris Release: 8

SunOS Release: 5.8

Unbundled Product:

Unbundled Release:

Xref: This patch available for x86 as patch 109329

Topic: SunOS 5.8: ypserv, ypxfr and ypxfrd patch

Relevant Architectures: sparc

Bugs fixed with this patch:

Sun CR # Bug #
420398914979076
437336515039155
473741715120825
488252815165358
489053015167714
495139915184614
633290615290401


Changes incorporated in this version: 4882528

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch:

Patches required with this patch:

Obsoleted by:

Files included with this patch:

/usr/lib/netsvc/yp/ypserv
/usr/lib/netsvc/yp/ypxfr
/usr/lib/netsvc/yp/ypxfrd

Problem Description:

4882528 ypserv segfaults when connection to resolver can't be established
 
(from 109328-06)
 
6332906 Corrupt yp requests may cause ypserv to hang or dump core
 
(from 109328-05)
 
4951399 ypserv prints do_accept : can't open connection : Interrupted system call
 
(from 109328-04)
 
4890530 ypserv should only answer bind requests from clients in /var/yp/securenets
 
(from 109328-03)
 
4737417 ypxfrd security issue with map handling
 
(from 109328-02)
 
4373365 ypserv responds on the incorrect port
 
(from 109328-01)
 
4203989 ypserv on SS20 with 100 meg card running Solaris 7 or higher spawns hundreds of ypserv processes


Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-10 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.


Special Install Instructions:
-----------------------------
 
Please stop and restart the yp services after patch installation.
 
	As root:
		# /usr/lib/netsvc/yp/ypstop
		# /usr/lib/netsvc/yp/ypstart


README -- Last modified date: Friday, November 9, 2012