OBSOLETE Patch-ID# 114354-11


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: security bind srchlist nslookup gethostbyname getspnam_r
Synopsis: Obsoleted by: 114265-12 SunOS 5.9_x86: libresolv patch
Date: Jun/05/2007


Install Requirements: Reboot after installing this patch to activate the changes delivered. An alternative may be specified in the Special Install Instructions.
Use Single User Mode (run level S) when installing this patch on an active boot environment. An alternative may be specified in the Special Install Instructions.

Solaris Release: 9_x86

SunOS Release: 5.9_x86

Unbundled Product:

Unbundled Release:

Xref: This patch available for SPARC as patch 112970

Topic: SunOS 5.9_x86: libresolv patch

Relevant Architectures: i386

Bugs fixed with this patch:

Sun CR # Bug #
435383615032080
470030515111249
477771515133084
479332715137855
479659615139019
480581215142295
481089315143950
486330715159863
487489515163046
492875815178716
620505615239844
624870015257533
630085315277823
631514315283514
633759515292372
652702015379909


Changes incorporated in this version: 6248700 6337595

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch:

Patches required with this patch: 113719-06 (or greater)

Obsoleted by: 114265-12

Files included with this patch:

/usr/include/arpa/nameser.h
/usr/include/arpa/nameser_compat.h
/usr/include/netdb.h
/usr/include/resolv.h
/usr/lib/abi/abi_libresolv.so.2
/usr/lib/dns/cylink.so.1
/usr/lib/dns/dnssafe.so.1
/usr/lib/dns/irs.so.1
/usr/lib/libresolv.so.2
/usr/lib/llib-lresolv
/usr/lib/llib-lresolv.ln
/usr/sbin/dig
/usr/sbin/dnskeygen
/usr/sbin/in.named
/usr/sbin/named-xfer
/usr/sbin/ndc
/usr/sbin/nslookup
/usr/sbin/nsupdate

Problem Description:

6248700 (rework) memory leak in libresolv
6337595 core dump - res_nsend() always assumes statp->_u._ext.ext not being NULL
 
(from 114354-10)
 
6300853 libresolv net_data_init should not increment once until it is done initializing
6527020 libresolv does not handle mutexes correctly
 
(from 114354-09)
 
6248700 memory leak in libresolv
 
(from 114354-08)
 
6315143 named could make unnecessary queries for glue if the additional section was full
 
(from 114354-07)
 
6205056 res_nint should return true when last interface has only 1 ip address and is deprecated
 
(from 114354-06)
 
4863307 nsupdate fails with more than 14 NS records for Bind 8.2.2 and 8.2.4
 
(from 114354-05)
 
4928758 Negative Cache Poison Attack
 
(from 114354-04)
 
4874895 S9 x86 patches for 4353836 needs to be respun with correct dependencies
 
(from 114354-03)
 
4353836 if more than 255 file descriptors are already open then gethostbyname fails
 
(from 114354-02)
 
4793327 BIND needs to be upgraded to BIND 8.3 to support IPv6
4796596 BIND 8.3.3 server handling of TSIG HMAC-MD5 broken
4805812 in.named version needs to reflect putback of BIND 8.3.3
4810893 UNIX98: *netdb.h* VSU test fails due to violation of X/Open namespace
 
(from 114354-01)
 
4777715 Multiple Remote Vulnerabilities in BIND - CERT Advisory CA-2002-31
4700305 nslookup does not follow its 'srchlist' under some circumstances


Patch Installation Instructions:
--------------------------------
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-10 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.


Special Install Instructions:
-----------------------------
 
NOTE 1:  To get the complete fix for bugids 4353836 (if more than 255 file
         descriptors are open then gethostbyname fails) and 4874895 (S9 x86
         patches for 4353836 need to be respun with correct dependencies),
         please also install the following patches:
 
         115546-02 (or greater)  nss_files patch
         115551-02 (or greater)  nss_user patch
         115543-02 (or greater)  nss_compat.so.1 patch


README -- Last modified date: Saturday, November 10, 2012