OBSOLETE Patch-ID# 113475-03


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: security crypt(3c) plugin password hashing algorithm blowfish
Synopsis: Obsoleted by: 112874-27 SunOS 5.9: usr/lib/security crypt Patch
Date: May/13/2004


Install Requirements: NA

Solaris Release: 9

SunOS Release: 5.9

Unbundled Product:

Unbundled Release:

Xref: This patch available for x86 as patch 113112

Topic: SunOS 5.9: usr/lib/security crypt Patch

Relevant Architectures: sparc

Bugs fixed with this patch:

Sun CR # Bug #
419282414976333
424843014991642
439005315044908
470060215111319
471556115115093
475614815126403
481840115146366
487749215163829
487825715164077
488160615165079
489476015169048
495040315184303
496117315187410


Changes incorporated in this version: 4756148 4818401 4877492 4878257 4881606 4894760 4950403 4961173

Patches accumulated and obsoleted by this patch: 113165-01

Patches which conflict with this patch:

Patches required with this patch: 112874-23 (or greater)

Obsoleted by: 112874-27

Files included with this patch:

/usr/lib/security/crypt_bsdbf.so.1
/usr/lib/security/crypt_bsdmd5.so.1
/usr/lib/security/crypt_sunmd5.so.1
/usr/lib/security/sparcv9/crypt_bsdbf.so.1
/usr/lib/security/sparcv9/crypt_bsdmd5.so.1
/usr/lib/security/sparcv9/crypt_sunmd5.so.1

Problem Description:

4756148 crypt(3c) processing of policy.conf doesn't follow case conventions
4818401 K2 uncovers sunmd5 bug
4877492 crypt() is unpredictable with unknown encryption algorithms
4878257 sunmd5:crypt_gensalt_impl() issues with undocumented rounds= param
4881606 crypt(3c) abuses the heap in many ways
4894760 Can't use crypt() after using strdtod() in same thread
4950403 crypt_alg_magic symbol not required
4961173 crypt modules are not actually lint-clean
 
(from 113475-02)
 
4715561 crypt_sunmd5 could have a better coin toss algorithm
 
(from 113475-01)
 
        This patch revision was generated to accumulate and obsolete
        the changes introduced in Solaris Update: s9u2
        feature point patches:  113165-01
 
(from 113165-01)
 
4390053 crypt(3c) needs to interoperate with *BSD and Linux
4248430 RFE: NIS+ should support alternate encryption algorithms for the user password
4192824 newkey/chkey should use a configurable crypt() to encrypt the users password
4700602 crypt_gensalt should be version SUNW_1.22 instead of SUNW_1.21


Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-9 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.


Special Install Instructions:
-----------------------------
 
In order for this patch to take effect, your system must be rebooted
immediately after the patch has been installed.
 
NOTE 1: To get the complete Flexible Crypt feature, please install the
        following patches:
 
        112874-06       (or newer)      libc
        113476-01       (or newer)      passwdutil.so.1
        113480-01       (or newer)      pam_unix Patch
        113481-01       (or newer)      nispasswdd
        113482-01       (or newer)      sbin/sulogin
        113483-01       (or newer)      rpc.ypasswdd


README -- Last modified date: Friday, November 9, 2012