Disclaimer: 

Please note: Although OBSOLETED patches are available on SunSolve, Sun recommends using the most recent patches and the most recent revision of those patches. OBSOLETED patches do not include the latest bug fixes and/or product enhancements, and may require the installation of additional patches as a corrective measure.

Status: OBSOLETE

Patch Id: 119784-05

***********************************************************************
READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT
FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU
AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE
TERMS, PROMPTLY DESTROY THE UNUSED SOFTWARE.
***********************************************************************

Summary: Obsoleted by: 119784-06 SunOS 5.10_x86 : bind patch

Date:  Aug/17/2007

Installation Requirements:

Reboot after installing this patch to activate the changes delivered.  An alternative may be specified in the Special Install Instructions.

Solaris Release: 10_x86

Sun OS Release: 5.10_x86

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for SPARC as patch 119783

Topic: 

SunOS 5.10_x86: bind patch

Relevant Architecture: i386

BugId's fixed with this patch:

6192028 6226796 6308420 6350145 6361078 6414518 6422073 6461587 6461591 6532492 6567532 6567534 6582717

Changes incorporated in this version:

6582717

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch: 

Required Patches:

119043-09 121902-01 (or greater)

Obsoleted by:

Files Included in this Patch: 

/lib/svc/method/dns-server
/usr/lib/dns/libbind9.so
/usr/lib/dns/libbind9.so.0
/usr/lib/dns/libbind9.so.0.0.8
/usr/lib/dns/libdns.so
/usr/lib/dns/libdns.so.16 (deleted)
/usr/lib/dns/libdns.so.16.0.0 (deleted)
/usr/lib/dns/libdns.so.22
/usr/lib/dns/libdns.so.22.1.0
/usr/lib/dns/libisc.so
/usr/lib/dns/libisc.so.11
/usr/lib/dns/libisc.so.11.1.1
/usr/lib/dns/libisc.so.7 (deleted)
/usr/lib/dns/libisc.so.7.1.5 (deleted)
/usr/lib/dns/libisccc.so
/usr/lib/dns/libisccc.so.0
/usr/lib/dns/libisccc.so.0.1.0 (deleted)
/usr/lib/dns/libisccc.so.0.2.2
/usr/lib/dns/libisccfg.so
/usr/lib/dns/libisccfg.so.0 (deleted)
/usr/lib/dns/libisccfg.so.0.0.11 (deleted)
/usr/lib/dns/libisccfg.so.1
/usr/lib/dns/libisccfg.so.1.0.6
/usr/lib/dns/liblwres.so
/usr/lib/dns/liblwres.so.1 (deleted)
/usr/lib/dns/liblwres.so.1.1.2 (deleted)
/usr/lib/dns/liblwres.so.9
/usr/lib/dns/liblwres.so.9.1.5
/usr/sbin/dig
/usr/sbin/dnssec-keygen
/usr/sbin/dnssec-makekeyset (deleted)
/usr/sbin/dnssec-signkey (deleted)
/usr/sbin/dnssec-signzone
/usr/sbin/host
/usr/sbin/named
/usr/sbin/named-checkconf
/usr/sbin/named-checkzone
/usr/sbin/nslookup
/usr/sbin/nsupdate
/usr/sbin/rndc
/usr/sbin/rndc-confgen
/usr/sfw/share/src/bind/bin/named/control.c
/usr/sfw/share/src/bind/bin/named/include/named/ns_smf_globals.h
/usr/sfw/share/src/bind/bin/named/main.c
/usr/sfw/share/src/bind/bin/named/server.c
/usr/sfw/share/src/bind/bin/named/unix/os.c
/usr/share/doc/bind/migration.txt
/usr/share/man/man1m/dnssec-signkey (deleted)
/var/svc/manifest/network/dns/server.xml

Problem Description: 

6582717 BIND 9: cryptographically weak query ids.
 
(from 119784-04)
 
6567532 Document BIND 9.3.4 check-names in migration.txt
6567534 remove obsoleted usr/sbin/dnssec-signkey from Solaris 10 patch
 
(from 119784-03)
 
This patch was generated to address incorrect dependencies on feature patches.
 
(from 119784-02)
 
6308420 DNS server should depend on fs-local instead of filesystem_minimal
6350145 dig can't handle refusal
6361078 bogus warnings on manifest upgrade from bind9
6414518 BIND 9.3 required to disable IPv4/IPv6 option
6422073 Solaris 10 nslookup does not append domains listed in search string to request with a period
6461587 named(1M) CLI options should have corresponding SMF properties
6461591 DNS server should not use its config file as a dependency
6532492 Solaris 10 bind vulnerable to DoS due to improperly handling malformed DNSSEC validation requests
 
(from 119784-01)
 
6226796 DNS server ends up being disabled on reboot
6192028 "rndc stop" doesn't work if "-t directory" (chroot directory) is specified with bind9 service

Revision History: 

119784-03 119784-01

Patch Installation Instructions: 

--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-10 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions: 

-----------------------------
 
NOTE 1: Reboot the system after patch installation.

README -- Last modified date:  Tuesday, July 8, 2008