Patch-ID# 112915-06


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: security snoop packet tunneling ripv2 wan-capable network boot install
Synopsis: SunOS 5.9: snoop Patch
Date: Jan/06/2009


Install Requirements: NA

Solaris Release: 9

SunOS Release: 5.9

Unbundled Product:

Unbundled Release:

Xref: This patch available for x86 as patch 114262

Topic: SunOS 5.9: snoop Patch

Relevant Architectures: sparc

Bugs fixed with this patch:

Sun CR # Bug #
114881314873151
124064514911676
407505414945387
425914914995223
432716815020881
432845215021394
434134415027012
439669715046964
441764715053789
442578615056482
447358315069479
447592115070336
447979415071652
453280515088896
453280815088897
453286015088920
455900115090095
458743415090212
459287615090418
463576615096431
463733015096826
463778815096951
464829915099326
464838815099344
467623015105965
474424815122906
476363115128618
487467215162994
502447615204211
665516815453405
670960715484565
674843115508451


Changes incorporated in this version: 6748431

Patches accumulated and obsoleted by this patch: 112699-02 115516-01

Patches which conflict with this patch:

Patches required with this patch:

Obsoleted by:

Files included with this patch:

/usr/sbin/snoop

Problem Description:

6748431 Solaris 9 snoop patch should not require rebootafter and singleuser mode
 
(from 112915-05)
 
6655168 snoop has problems capturing and displaying SMB traffic
6709607 interpret_netbios_ses calls interpret_smb with wrong data length
 
(from 112915-04)
 
5024476 snoop: dlpromisconreq: strgetmsg: MOREDATA
4874672 snoop: can drive into the ditch while parsing bogus DNS packets
4328452 snoop: simple filter expression can cause infinite loop
 
(from 112915-03)
 
4676230 Signal 11 errors (sigsegv) when snooping ldap port(389)
 
(from 112915-02)
 
        This revision accumulates S9U5 feature point patch 115516-01.
 
(from 112915-01)
 
        This revision accumulates S9U1 feature point patch 112699-02.
 
(from 112699-02)
 
        This revision synchronizes package version strings between S9 and S9U1.
 
(from 112699-01)
 
1148813 subnet routes turn into host routes (routed)
1240645 in.routed: add support for subnet number of all 0's or all 1's per RFC 1812
4075054 Solaris 2.6 doesn't deliver routing deamon to support variable length subnet
4327168 in.routed replies for RIP cmd request with norip option
4341344 in.rdisc does not generate advertisements with a lifetime of zero
4475921 in.routed rtlookup in addrouteforif() has poor error checking
4532805 ip_icmp.h is missing some necessary definitions
4532808 in.routed is not lint-clean
4532860 snoop should support RIPv2
4559001 <protocols/routed.h> needs RIP-2 definitions
4587434 net/route.h should have latest BSD RTAX_* defines
4637330 new in.routed rdisc behavior is bad
4635766 in.routed loses control when ripped off
4637788 in.routed aggregating away learned routes because of static default route
4648299 in.routed fails to discover default router on multi-homed host via discovery
4479794 can't configure tunnels over IPv6
4396697 IPv6 tunnel support needed
4425786 ifconfig prints tunnel addresses incorrectly
4417647 snoop handles unknown IPv6 destination options incorrectly
4592876 in.ndpd daemonizes too soon
4648388 snoop's parsing of tunnel encap limit dst opts goes off into the weeds
 
(from 115516-01)
 
4259149 WAN-capable network boot/install
4744248 boot argument processing is broken on sparcv9
4763631 boot code could be cleaned up
4473583 boot: 64-bit stat on 32-bit kernels


Patch Installation Instructions:
--------------------------------
 
Please refer to the man pages for instructions on using 'patchadd'
and 'patchrm' scripts provided with Solaris.
 
The following example installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/123456-07
 
The following example removes a patch from a standalone system:
 
       example# patchrm 123456-07
 
For additional examples please see the appropriate man pages. Any
other special or non-generic installation instructions should be
described below as special instructions.


Special Install Instructions:
-----------------------------
 
NOTE 1:  To get the complete Packet Tunneling over IPv6 feature, please
         also install the following patches:
 
         112902-01 (or greater)  ip driver patch
         112903-01 (or greater)  tun patch
         112911-01 (or greater)  ifconfig patch
         112912-01 (or greater)  libinetcfg.so.1 patch
         112928-01 (or greater)  in.ndpd patch
 
NOTE 2:  To get the complete RIPv2 feature, please install the following
         patches:
 
         112914-01 (or greater)  in.routed patch
         112916-01 (or greater)  rtquery patch
         112918-01 (or greater)  route.h patch
         112929-01 (or greater)  RIPv2 headers patch
 
NOTE 3:  To get the complete WAN-capable network boot/install feature,
         please install the following patches:
 
         112233-09 (or greater)  Kernel Update patch
         113457-04 (or greater)  ufs headers patch
         113981-03 (or greater)  devfsadm patch
         113026-11 (or greater)  meta command files patch
         114131-02 (or greater)  libadm.so.1 patch
         114349-02 (or greater)  dhcpagent & libdhcputil patch
         115685-01 (or greater)  netstrategy patch
         115683-01 (or greater)  WAN boot header files patch


README -- Last modified date: Friday, November 9, 2012