OBSOLETE Patch-ID# 115926-07
Keywords: nspr nss security jss
Synopsis: Obsoleted by: 115926-08 SunOS 5.9: NSPR 4.1.6 / NSS 3.3.9 / JSS 3.1.3
Date: May/26/2004


Install Requirements: None                      
                      
Solaris Release: 9

SunOS Release: 5.9

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for x86 as patch 115927

Topic: 

Relevant Architectures: sparc

BugId's fixed with this patch: 4885952 4886464 4888311 4903564 4933535 4945089 4972840 4991529 5004563 5011517 5016498

Changes incorporated in this version: 5016498

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

/usr/lib/mps/secv1/64
/usr/lib/mps/secv1/cpu/sparcv8plus/libnspr_flt4.so
/usr/lib/mps/secv1/libfreebl_hybrid_3.so
/usr/lib/mps/secv1/libfreebl_pure32_3.so
/usr/lib/mps/secv1/libjss3.so
/usr/lib/mps/secv1/libnspr4.so
/usr/lib/mps/secv1/libnss3.so
/usr/lib/mps/secv1/libnssckbi.so
/usr/lib/mps/secv1/libplc4.so
/usr/lib/mps/secv1/libplds4.so
/usr/lib/mps/secv1/libsmime3.so
/usr/lib/mps/secv1/libssl3.so
/usr/lib/mps/secv1/sparcv9/libjss3.so
/usr/lib/mps/secv1/sparcv9/libnspr4.so
/usr/lib/mps/secv1/sparcv9/libnss3.so
/usr/lib/mps/secv1/sparcv9/libnssckbi.so
/usr/lib/mps/secv1/sparcv9/libplc4.so
/usr/lib/mps/secv1/sparcv9/libplds4.so
/usr/lib/mps/secv1/sparcv9/libsmime3.so
/usr/lib/mps/secv1/sparcv9/libssl3.so
/usr/sfw/bin/certutil
/usr/sfw/bin/cmsutil
/usr/sfw/bin/crlutil
/usr/sfw/bin/modutil
/usr/sfw/bin/pk12util
/usr/sfw/bin/signtool
/usr/sfw/bin/signver
/usr/sfw/bin/ssltap
/usr/share/lib/mps/secv1/jss3.jar
/usr/share/lib/mps/secv1/sparcv9/jss3.jar

Problem Description:

5016498 patch 115926-06 not built correctly
 
(from 115926-06)
 
5011517 SUNWtlsu tools are missing/corrupt on SPARC and x86 Solaris
 
(from 115926-05)
 
4991529 - improve NSS error messages - serviceability issue
5004563 - Web Server crashes when client presents an invalid cert
 
(from 115926-04)
 
4972840 - potential DOS target on NSS libraries
 
(from 115926-03)
 
4933535 - JSS client certificate callback API allows one to have a successful handshake
4945089 - ASN1 Decoder can suffer denial of service attacks
 
(from 115926-02)
 
4888311 CertStore.delete certificate does not work for CA certificate
4886464 SSL Client authentication is not working
4885952 JVM crash occuring during SSLSocket.read()
 
(from 115926-01)
 
4903564 Security libraries (3.3.5+) for Orion should install in new location

Patch Installation Instructions:
-------------------------------------------- 
For Solaris 2.6, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 8, refer to the man pages for instructions on
using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/115926-07
 
The following example removes a patch from a standalone system:
 
       example# patchrm 115926-07
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
--------------------
None.

README -- Last modified date:  Friday, May 28, 2004

