Patch Name: PHCO_28605 Patch Description: s700_800 11.11 libnss_files cumulative patch Creation Date: 03/07/31 Post Date: 03/09/09 Hardware Platforms - OS Releases: s700: 11.11 s800: 11.11 Products: N/A Filesets: OS-Core.CORE-64SLIB,fr=B.11.11,fa=HP-UX_B.11.11_32/64,v=HP OS-Core.CORE-SHLIBS,fr=B.11.11,fa=HP-UX_B.11.11_32/64,v=HP Automatic Reboot?: No Status: General Release Critical: Yes PHCO_28605: ABORT PHCO_25568: CORRUPTION Category Tags: defect_repair enhancement general_release critical halts_system corruption Path Name: /hp-ux_patches/s700_800/11.X/PHCO_28605 Symptoms: PHCO_28605: ( SR:8606258815 CR:JAGae23135 ) Daemon programs do not recognize changes made to the system database files. ( SR:8606290452 CR:JAGae54360 ) If gethostbyaddr(3C) is invoked with an IP address which is not present in the hosts system database file "/etc/hosts" and the last entry in "/etc/hosts" file is not terminated with '\n', application may cause memory fault and abort. PHCO_25568: ( SR:8606214737 CR:JAGad83929 ) DNS performance is slow when files backend is used for resolving name service switch requests. ( SR:8606170767 CR:JAGad40031 ) gethostbyname() returns garbage in hostname. PHCO_25505: ( SR:8606221280 CR:JAGad90414 ) Enhancement providing pre-enablement for a future release of shadow password functionality. This is one of several enhancement patches providing pre-enablement, or partial implementation, of shadow passwords. The change in this patch will have no affect on your system until activated by a future patch. This future patch will be clearly labeled as enabling shadow passwords and will list all patches required to enable this new feature. PHCO_24401: ( SR:8606145537 CR:JAGad14873 ) Enhancement to support new APIs getipnodebyname() and getipnodebyaddr() specified in RFC 2553 Defect Description: PHCO_28605: ( SR:8606258815 CR:JAGae23135 ) NSS files backend rewinds the database file when a call to setXent() is made followed by endXent(). But the stdio buffers associated with the database files are not flushed. Due to this even though the database file is modified, the changes are not reflected during the execution of the program. Resolution: NSS files backend is modified so that the stdio buffers are flushed whenever a call to setXent() is made followed by endXent(). ( SR:8606290452 CR:JAGae54360 ) NSS files backend assumes that all entries in the hosts database file "/etc/hosts" are terminated with '\n'. So if the last entry in "/etc/hosts" is not terminated with '\n', gethostbyaddr(3C) causes memory fault if invoked with an IP address which is not present in "/etc/hosts". Resolution: NSS files backend library has been modified so that even if the last entry in "/etc/hosts" is not terminated with '\n', the functionality of the API gethostbyaddr(3C) will not be affected. PHCO_25568: ( SR:8606214737 CR:JAGad83929 ) Locking was done for reading every character in _nss_files_read_line() resulting in performance degradation. Resolution: Reduced locking granularity in the routine _nss_files_read_line(). ( SR:8606170767 CR:JAGad40031 ) Host file aliases cause static buffer allocation overrun. Resolution: gethostbyname(3) returns garbage in hostname because of the static buffer overflow which is used to hold aliases for the hostname. To fix this, logic was changed to display only the aliases in first line when there is a buffer overrun. PHCO_25505: ( SR:8606221280 CR:JAGad90414 ) The current implementation of libnss_files does not include support for /etc/shadow. Resolution: This module has been made aware of the existence of the /etc/shadow file and will take the appropriate actions when activated by a future patch. PHCO_24401: ( SR:8606145537 CR:JAGad14873 ) This is an enhancement. Files backend is enhanced to support the new APIs getipnodebyname() and getipnodebyaddr() specified in RFC 2553. Resolution: Added support for getipnodebyname() and getipnodebyaddr() Enhancement: No (superseded patches contained enhancements) PHCO_28605: Enhancements were delivered in a patch this one has superseded. Please review the Defect Description text for more information. SR: 8606145537 8606170767 8606214737 8606221280 8606258815 8606290452 Patch Files: OS-Core.CORE-64SLIB,fr=B.11.11,fa=HP-UX_B.11.11_32/64,v=HP: /usr/lib/pa20_64/libnss_files.1 OS-Core.CORE-SHLIBS,fr=B.11.11,fa=HP-UX_B.11.11_32/64,v=HP: /usr/lib/libnss_files.1 what(1) Output: OS-Core.CORE-64SLIB,fr=B.11.11,fa=HP-UX_B.11.11_32/64,v=HP: /usr/lib/pa20_64/libnss_files.1: $ PATCH_11.11/PHCO_28605 Jul 31 2003 03:09:41 $ OS-Core.CORE-SHLIBS,fr=B.11.11,fa=HP-UX_B.11.11_32/64,v=HP: /usr/lib/libnss_files.1: $ PATCH_11.11/PHCO_28605 Jul 31 2003 03:09:31 $ cksum(1) Output: OS-Core.CORE-64SLIB,fr=B.11.11,fa=HP-UX_B.11.11_32/64,v=HP: 1284991505 56320 /usr/lib/pa20_64/libnss_files.1 OS-Core.CORE-SHLIBS,fr=B.11.11,fa=HP-UX_B.11.11_32/64,v=HP: 1989366565 53248 /usr/lib/libnss_files.1 Patch Conflicts: None Patch Dependencies: s700: 11.11: PHCO_24402 s800: 11.11: PHCO_24402 Hardware Dependencies: None Other Dependencies: None Supersedes: PHCO_25568 PHCO_25505 PHCO_24401 Equivalent Patches: None Patch Package Size: 70 KBytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHCO_28605 5. Run swinstall to install the patch: swinstall -x autoreboot=true -x patch_match_target=true \ -s /tmp/PHCO_28605.depot By default swinstall will archive the original software in /var/adm/sw/save/PHCO_28605. If you do not wish to retain a copy of the original software, include the patch_save_files option in the swinstall command above: -x patch_save_files=false WARNING: If patch_save_files is false when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. For future reference, the contents of the PHCO_28605.text file is available in the product readme: swlist -l product -a readme -d @ /tmp/PHCO_28605.depot To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHCO_28605.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: If libnss_files patches are installed without rebooting, applications currently running which are linked shared against libnss_files will still continue using the former version of libnss_files. If this presents a problem to any applications, you should reboot.