OBSOLETE Patch-ID# 117725-10


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: nspr nss security jss
Synopsis: Obsoleted by: 119212-05 SunOS 5.9_x86: NSPR 4.5.1 / NSS 3.9.5 / JSS 4.0
Date: Feb/07/2005


Install Requirements: NA

Solaris Release: 9_x86

SunOS Release: 5.9_x86

Unbundled Product:

Unbundled Release:

Xref: This patch available for sparc as patch 117724

Topic:

Relevant Architectures: i386

Bugs fixed with this patch:

Sun CR # Bug #
506274712072403
506668012089966
506669212089965
506669612089971
506922512091049
506968312080574
507024612091051
507103512090878
507104012090304
507110212090939
507112312090764
507113512090319
507727312090985
507838012092674
508479812092727
508676112092215
509119712081738
509460712089231
509865312091932
510052612092700
510455412091663
510456112091412
510456212091659
510456612091660
510457212091744
510457412091745
510457612091522
510457912091657
510562612092870
510562912092897
510563212093015
510563512093016
510567212093019
510567712093486
510704112093983
617379412097012
617766112098031
617767112098033
617820512098180
618134112099030
618148012099067
618163812099107
618451812099921
618487112100006
618487312100007
618487412100008
618487512100009
618488012100013
621791612107254


Changes incorporated in this version: 6217916

Patches accumulated and obsoleted by this patch: 115927-11

Patches which conflict with this patch:

Patches required with this patch:

Obsoleted by: 119212-05

Files included with this patch:

/usr/include/mps/base64.h
/usr/include/mps/blapit.h
/usr/include/mps/cert.h
/usr/include/mps/certdb.h
/usr/include/mps/certt.h
/usr/include/mps/ciferfam.h
/usr/include/mps/cmmf.h
/usr/include/mps/cmmft.h
/usr/include/mps/cms.h
/usr/include/mps/cmsreclist.h
/usr/include/mps/cmst.h
/usr/include/mps/crmf.h
/usr/include/mps/crmft.h
/usr/include/mps/cryptohi.h
/usr/include/mps/cryptoht.h
/usr/include/mps/ecl-exp.h
/usr/include/mps/hasht.h
/usr/include/mps/jar-ds.h
/usr/include/mps/jar.h
/usr/include/mps/jarfile.h
/usr/include/mps/key.h
/usr/include/mps/keyhi.h
/usr/include/mps/keyt.h
/usr/include/mps/keythi.h
/usr/include/mps/nspr.h
/usr/include/mps/nss.h
/usr/include/mps/nssb64.h
/usr/include/mps/nssb64t.h
/usr/include/mps/nssbase.h
/usr/include/mps/nssbaset.h
/usr/include/mps/nssckbi.h
/usr/include/mps/nssckepv.h
/usr/include/mps/nssckft.h
/usr/include/mps/nssckfw.h
/usr/include/mps/nssckfwc.h
/usr/include/mps/nssckfwt.h
/usr/include/mps/nssckg.h
/usr/include/mps/nssckmdt.h
/usr/include/mps/nssckt.h
/usr/include/mps/nssilckt.h
/usr/include/mps/nssilock.h
/usr/include/mps/nsslocks.h
/usr/include/mps/nssrwlk.h
/usr/include/mps/nssrwlkt.h
/usr/include/mps/obsolete/protypes.h
/usr/include/mps/ocsp.h
/usr/include/mps/ocspt.h
/usr/include/mps/p12.h
/usr/include/mps/p12plcy.h
/usr/include/mps/p12t.h
/usr/include/mps/pk11func.h
/usr/include/mps/pk11pqg.h
/usr/include/mps/pk11sdr.h
/usr/include/mps/pkcs11.h
/usr/include/mps/pkcs11f.h
/usr/include/mps/pkcs11n.h
/usr/include/mps/pkcs11p.h
/usr/include/mps/pkcs11t.h
/usr/include/mps/pkcs11u.h
/usr/include/mps/pkcs12.h
/usr/include/mps/pkcs12t.h
/usr/include/mps/pkcs7t.h
/usr/include/mps/plarena.h
/usr/include/mps/plarenas.h
/usr/include/mps/plbase64.h
/usr/include/mps/plerror.h
/usr/include/mps/plgetopt.h
/usr/include/mps/plhash.h
/usr/include/mps/plresolv.h
/usr/include/mps/plstr.h
/usr/include/mps/portreg.h
/usr/include/mps/pratom.h
/usr/include/mps/prbit.h
/usr/include/mps/prclist.h
/usr/include/mps/prcmon.h
/usr/include/mps/prcountr.h
/usr/include/mps/prcpucfg.h
/usr/include/mps/prcvar.h
/usr/include/mps/prdtoa.h
/usr/include/mps/preenc.h
/usr/include/mps/prenv.h
/usr/include/mps/prerr.h
/usr/include/mps/prerror.h
/usr/include/mps/prinet.h
/usr/include/mps/prinit.h
/usr/include/mps/prinrval.h
/usr/include/mps/prio.h
/usr/include/mps/pripcsem.h
/usr/include/mps/prlink.h
/usr/include/mps/prlock.h
/usr/include/mps/prlog.h
/usr/include/mps/prlong.h
/usr/include/mps/prmem.h
/usr/include/mps/prmon.h
/usr/include/mps/prmwait.h
/usr/include/mps/prnetdb.h
/usr/include/mps/prolock.h
/usr/include/mps/prpdce.h
/usr/include/mps/prprf.h
/usr/include/mps/prproces.h
/usr/include/mps/prrng.h
/usr/include/mps/prrwlock.h
/usr/include/mps/prshm.h
/usr/include/mps/prshma.h
/usr/include/mps/prsystem.h
/usr/include/mps/prthread.h
/usr/include/mps/prtime.h
/usr/include/mps/prtpool.h
/usr/include/mps/prtrace.h
/usr/include/mps/prtypes.h
/usr/include/mps/prvrsion.h
/usr/include/mps/prwin16.h
/usr/include/mps/secasn1.h
/usr/include/mps/secasn1t.h
/usr/include/mps/seccomon.h
/usr/include/mps/secder.h
/usr/include/mps/secdert.h
/usr/include/mps/secdig.h
/usr/include/mps/secdigt.h
/usr/include/mps/secerr.h
/usr/include/mps/sechash.h
/usr/include/mps/secitem.h
/usr/include/mps/secmime.h
/usr/include/mps/secmod.h
/usr/include/mps/secmodt.h
/usr/include/mps/secoid.h
/usr/include/mps/secoidt.h
/usr/include/mps/secpkcs5.h
/usr/include/mps/secpkcs7.h
/usr/include/mps/secport.h
/usr/include/mps/shsign.h
/usr/include/mps/smime.h
/usr/include/mps/ssl.h
/usr/include/mps/sslerr.h
/usr/include/mps/sslproto.h
/usr/include/mps/sslt.h
/usr/include/mps/swfort.h
/usr/include/mps/swfortt.h
/usr/include/mps/watcomfx.h
/usr/lib/mps/secv1/libjss3.so
/usr/lib/mps/secv1/libjss4.so
/usr/lib/mps/secv1/libnspr4.so
/usr/lib/mps/secv1/libnss3.so
/usr/lib/mps/secv1/libnssckbi.so
/usr/lib/mps/secv1/libplc4.so
/usr/lib/mps/secv1/libplds4.so
/usr/lib/mps/secv1/libsmime3.so
/usr/lib/mps/secv1/libsoftokn3.chk
/usr/lib/mps/secv1/libsoftokn3.so
/usr/lib/mps/secv1/libssl3.so
/usr/sfw/bin/certutil
/usr/sfw/bin/cmsutil
/usr/sfw/bin/crlutil
/usr/sfw/bin/modutil
/usr/sfw/bin/pk12util
/usr/sfw/bin/signtool
/usr/sfw/bin/signver
/usr/sfw/bin/ssltap
/usr/share/lib/mps/secv1/jss3.jar
/usr/share/lib/mps/secv1/jss4.jar

Problem Description:

6217916 Disable ECC code from NSS
 
(from 117725-09)
 
6181638 Need to merge prcpucfg.h for 32 and 64 bit
6181341 SIGSEGV in pk11_forceTokenAttribute in softoken
6181480 Exception in thread "main" org.mozilla.jss.crypto.TokenException
6184871 suspicious cast in prnetdb on Solaris AMD64
6184873 compiler warnings in pki3hack on Solaris AMD64
6184874 cmsutil core dumps with invalid option set.
6184875 SECMOD_FindSlot always returns NULL
6184880 count should be CK_ULONG in SECMOD_UpdateSlotList
6184518 certutil hangs when unlimited file descriptor
 
(from 117725-08)
 
6177661 REGRESSION, CRLs without nextUpdate fields don't decode
6177671 Add SSLSocket.enableTLS and SSLSocket.enableTLSDefault
6173794 jss4.jar must be signed
6178205 support for SHA-256, SHA-384, and SHA-512 signature and digest algorithms.
 
(from 117725-07)
 
5091197 java exception for console in ssl mode
5098653 Don't install NSPR/NSS/JSS on S10
5094607 Could not login to Solaris after installing JES3 on S10 / bfu to build 66
5100526 need to fix rpath for libnss3 to find libsoftokn3 in suid applications
5104554 TLS handshakes fail when server DHE params exceed NSS size limits
5078380 NSS_NoDB_Init hang on RedHat Linux 2.1 server
5104561 Add Unizeto Certum CA certificates to NSS
5104562 Add ipsCA root certificates to NSS
5104566 Add Comodo CA certs to NSS
5104572 Add new functions PK11_PrivDecryptPKCS1 and PK11_PubEncryptPKCS1
5104574 Export CERT_ConvertAndDecodeCertificate and SEC_PKCS7EncodeItem
5104576 Add a VERSIONINFO resource to nssckbi.dll.
5104579 use pdb files for debug symbols
5105626 cache->searchedObjectType[] should always be cleared in clear_cache()
5084798 Assertion failure in jSS native code
5105629 MEM Leak in callbacks.c using SSL_RevealURL
5105632 Mem leak in Java_org_mozilla_jss_ssl_SSLSocket_getStatus
5105635 JSS version should be bumped to 4.0 for next release
5105672 JSS cannot be built with JDK 1.5 due to new keywords
5105677 CipherContentProxy finalize must call super.finalize
5107041 New PK11_PubEncryptPKCS1 function always fails
 
(from 117725-06)
 
5086761 PK11_FindKeyByAnyCert always returns a key object even if there is no key
 
(from 117725-05)
 
5069225 Orion3. IS did not start with SUNWjss 3.5 (shared package).
 
(from 117725-04)
 
5077273 Patch 117725-03 for Orion3 x86 has version strings that match the SPARC, not x86
 
(from 117725-03)
 
5069683 SSL2 exploitable buffer overflow
5070246 Switch JSS to version 3.5 into Security 3.9.3
5071035 SUNWtls 3.9.2 Beta2 package for Solaris 10 has a bad layout
5071040 sun-nss-3.9.2-1.i386.rpm (Security 3.9.2 Beta2) should not contain libjss3.so
5071102 Remove extra include files from sun-nspr-devel
5071123 sun-nss-devel contains extra files
5071135 SUNWtlsd missing ecl-exp.h
 
(from 117725-02)
 
5066680 secport.h has PORT_Strdup in C++ unsafe section
5066692 nss_InitLock not atomic
5066696 NSS tools should have an rpath of /usr/lib/mps/secv1
 
(from 117725-01)
 
5062747 Switch to Security 3.9.2


Patch Installation Instructions:
-------------------------------- 
Refer to the man pages for instructions on using 'patchadd' and
'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.


Special Install Instructions:
-----------------------------
None.


README -- Last modified date: Saturday, November 10, 2012