 |
≫ |
|
|
|
パッチ名: PHSS_36361
パッチ摘要: 11.31 KRB5-Clientバージョン1.3.5.03累積パッチ
作成日: 07/05/02
公開日: 07/05/07
ハードウェアプラットフォームおよびOSリリース:
11.31
現象:
PHSS_36361:
1.(SR:8606475415 CR:JAGag29768)
KRB5-Client製品でサポートされる暗号化方式に関する説明がkrb5.conf(4)/
kerberos(5)に記載されていません。
2.(SR:8606481373 CR:JAGag35361)
KRB5-Clientがメッセージを検証できないことがあります。
3.(SR:8606486332 CR:JAGag39215)
KRB5-Clientではサポートされないkrb5_init6_context() APIに関する説明が
libkrb5のマンページに記載されています。
問題点の説明:
PHSS_36361:
1.(SR:8606475415 CR:JAGag29768)
KRB5-Client製品でサポートされる暗号化方式に関する説明がkrb5.conf(4)/
kerberos(5)に記載されていませんでした。
解決方法:
KRB5-Client製品でサポートされる暗号化方式に関する説明をkrb5.conf4)/
kerberos(5)のマンページに追加しました。
2.(SR:8606481373 CR:JAGag35361)
KRB5-Clientはメッセージを検証できないことがありました。
解決方法:
KRB5-Clientを修正しました。
3.(SR:8606486332 CR:JAGag39215)
KRB5-Clientではサポートされないkrb5_init6_context() APIに関する説明が
libkrb5のマンページに記載されていました。
解決方法:
krb5_init6_context() APIに関する説明をlibkrb5のマンページから削除しま
した。
-----------------------------------------------------------------------------
Patch Name: PHSS_36361
Patch Description: 11.31 KRB5-Client Version 1.3.5.03 Cumulative patch
Creation Date: 07/05/02
Post Date: 07/05/07
Hardware Platforms - OS Releases:
11.31
Products: N/A
Filesets:
KRB5-Client.KRB5-ENG-A-MAN,fr=B.11.31,fa=HP-UX_B.11.31_IA/PA,v=HP
KRB5-Client.KRB5-JPN-E-MAN,fr=B.11.31,fa=HP-UX_B.11.31_IA/PA,v=HP
KRB5-Client.KRB5-JPN-S-MAN,fr=B.11.31,fa=HP-UX_B.11.31_IA/PA,v=HP
KRB5-Client.KRB5-64SLIB,fr=B.11.31,fa=HP-UX_B.11.31_IA,v=HP
KRB5-Client.KRB5-IA32SLIB,fr=B.11.31,fa=HP-UX_B.11.31_IA,v=HP
KRB5-Client.KRB5-IA64SLIB,fr=B.11.31,fa=HP-UX_B.11.31_IA,v=HP
KRB5-Client.KRB5-SHLIB,fr=B.11.31,fa=HP-UX_B.11.31_IA,v=HP
KRB5-Client.KRB5-64SLIB,fr=B.11.31,fa=HP-UX_B.11.31_PA,v=HP
KRB5-Client.KRB5-SHLIB,fr=B.11.31,fa=HP-UX_B.11.31_PA,v=HP
Automatic Reboot?: No
Status: General Release
Critical: No
Category Tags:
defect_repair general_release
Path Name: /hp-ux_patches/11.X/PHSS_36361
Symptoms:
PHSS_36361:
( SR:8606475415 CR:JAGag29768 )
Information about supported encryption types in the
KRB5-Client product is missing from krb5.conf(4) and
kerberos(5) man pages.
( SR:8606481373 CR:JAGag35361 )
KRB5-Client unable to verify messages properly under
certain conditions.
( SR:8606486332 CR:JAGag39215 )
The libkrb5 manpage documents the krb5_init6_context() API,
which is not supported by KRB5-Client.
Defect Description:
PHSS_36361:
( SR:8606475415 CR:JAGag29768 )
Information about supported encryption types in the
KRB5-Client product is missing from krb5.conf(4) and
kerberos(5) man pages.
Resolution:
krb5.conf(4) and kerberos(5) man pages have been updated to
provide information about supported encryption types in
KRB5-Client product.
( SR:8606481373 CR:JAGag35361 )
KRB5-Client unable to verify messages properly under
certain conditions.
Resolution:
KRB5-Client has been fixed to resolve the problem.
( SR:8606486332 CR:JAGag39215 )
The libkrb5 manpage documents the krb5_init6_context() API,
which is not supported by KRB5-Client.
Resolution:
Information about the krb5_init6_context() API has been
removed from the libkrb5 manpage.
Enhancement:
No
SR:
8606475415 8606481373 8606486332
Patch Files:
KRB5-Client.KRB5-ENG-A-MAN,fr=B.11.31,
fa=HP-UX_B.11.31_IA/PA,v=HP:
/usr/share/man/man3.Z/libkrb5.3
/usr/share/man/man3.Z/libcom_err.3
/usr/share/man/man3.Z/libcom_err.sl.3
/usr/share/man/man3.Z/libcom_err.so.3
/usr/share/man/man3.Z/libk5crypto.3
/usr/share/man/man3.Z/libk5crypto.sl.3
/usr/share/man/man3.Z/libk5crypto.so.3
/usr/share/man/man3.Z/libkrb5.sl.3
/usr/share/man/man3.Z/libkrb5.so.3
/usr/share/man/man4.Z/krb5.conf.4
/usr/share/man/man5.Z/kerberos.5
KRB5-Client.KRB5-JPN-E-MAN,fr=B.11.31,
fa=HP-UX_B.11.31_IA/PA,v=HP:
/usr/share/man/ja_JP.eucJP/man3.Z/libkrb5.3
/usr/share/man/ja_JP.eucJP/man3.Z/libcom_err.3
/usr/share/man/ja_JP.eucJP/man3.Z/libcom_err.sl.3
/usr/share/man/ja_JP.eucJP/man3.Z/libcom_err.so.3
/usr/share/man/ja_JP.eucJP/man3.Z/libk5crypto.3
/usr/share/man/ja_JP.eucJP/man3.Z/libk5crypto.sl.3
/usr/share/man/ja_JP.eucJP/man3.Z/libk5crypto.so.3
/usr/share/man/ja_JP.eucJP/man3.Z/libkrb5.sl.3
/usr/share/man/ja_JP.eucJP/man3.Z/libkrb5.so.3
/usr/share/man/ja_JP.eucJP/man4.Z/krb5.conf.4
/usr/share/man/ja_JP.eucJP/man5.Z/kerberos.5
KRB5-Client.KRB5-JPN-S-MAN,fr=B.11.31,
fa=HP-UX_B.11.31_IA/PA,v=HP:
/usr/share/man/ja_JP.SJIS/man3.Z/libkrb5.3
/usr/share/man/ja_JP.SJIS/man3.Z/libcom_err.3
/usr/share/man/ja_JP.SJIS/man3.Z/libcom_err.sl.3
/usr/share/man/ja_JP.SJIS/man3.Z/libcom_err.so.3
/usr/share/man/ja_JP.SJIS/man3.Z/libk5crypto.3
/usr/share/man/ja_JP.SJIS/man3.Z/libk5crypto.sl.3
/usr/share/man/ja_JP.SJIS/man3.Z/libk5crypto.so.3
/usr/share/man/ja_JP.SJIS/man3.Z/libkrb5.sl.3
/usr/share/man/ja_JP.SJIS/man3.Z/libkrb5.so.3
/usr/share/man/ja_JP.SJIS/man4.Z/krb5.conf.4
/usr/share/man/ja_JP.SJIS/man5.Z/kerberos.5
KRB5-Client.KRB5-64SLIB,fr=B.11.31,fa=HP-UX_B.11.31_IA,v=HP:
/usr/lib/pa20_64/gss/libgssapi_krb5.1
KRB5-Client.KRB5-IA32SLIB,fr=B.11.31,fa=HP-UX_B.11.31_IA,
v=HP:
/usr/lib/hpux32/gss/libgssapi_krb5.so.1
KRB5-Client.KRB5-IA64SLIB,fr=B.11.31,fa=HP-UX_B.11.31_IA,
v=HP:
/usr/lib/hpux64/gss/libgssapi_krb5.so.1
KRB5-Client.KRB5-SHLIB,fr=B.11.31,fa=HP-UX_B.11.31_IA,v=HP:
/usr/lib/gss/libgssapi_krb5.1
KRB5-Client.KRB5-64SLIB,fr=B.11.31,fa=HP-UX_B.11.31_PA,v=HP:
/usr/lib/pa20_64/gss/libgssapi_krb5.1
KRB5-Client.KRB5-SHLIB,fr=B.11.31,fa=HP-UX_B.11.31_PA,v=HP:
/usr/lib/gss/libgssapi_krb5.1
what(1) Output:
KRB5-Client.KRB5-ENG-A-MAN,fr=B.11.31,
fa=HP-UX_B.11.31_IA/PA,v=HP:
/usr/share/man/man3.Z/libkrb5.3:
None
/usr/share/man/man3.Z/libcom_err.3:
None
/usr/share/man/man3.Z/libcom_err.sl.3:
None
/usr/share/man/man3.Z/libcom_err.so.3:
None
/usr/share/man/man3.Z/libk5crypto.3:
None
/usr/share/man/man3.Z/libk5crypto.sl.3:
None
/usr/share/man/man3.Z/libk5crypto.so.3:
None
/usr/share/man/man3.Z/libkrb5.sl.3:
None
/usr/share/man/man3.Z/libkrb5.so.3:
None
/usr/share/man/man4.Z/krb5.conf.4:
None
/usr/share/man/man5.Z/kerberos.5:
None
KRB5-Client.KRB5-JPN-E-MAN,fr=B.11.31,
fa=HP-UX_B.11.31_IA/PA,v=HP:
/usr/share/man/ja_JP.eucJP/man3.Z/libkrb5.3:
None
/usr/share/man/ja_JP.eucJP/man3.Z/libcom_err.3:
None
/usr/share/man/ja_JP.eucJP/man3.Z/libcom_err.sl.3:
None
/usr/share/man/ja_JP.eucJP/man3.Z/libcom_err.so.3:
None
/usr/share/man/ja_JP.eucJP/man3.Z/libk5crypto.3:
None
/usr/share/man/ja_JP.eucJP/man3.Z/libk5crypto.sl.3:
None
/usr/share/man/ja_JP.eucJP/man3.Z/libk5crypto.so.3:
None
/usr/share/man/ja_JP.eucJP/man3.Z/libkrb5.sl.3:
None
/usr/share/man/ja_JP.eucJP/man3.Z/libkrb5.so.3:
None
/usr/share/man/ja_JP.eucJP/man4.Z/krb5.conf.4:
None
/usr/share/man/ja_JP.eucJP/man5.Z/kerberos.5:
None
KRB5-Client.KRB5-JPN-S-MAN,fr=B.11.31,
fa=HP-UX_B.11.31_IA/PA,v=HP:
/usr/share/man/ja_JP.SJIS/man3.Z/libkrb5.3:
None
/usr/share/man/ja_JP.SJIS/man3.Z/libcom_err.3:
None
/usr/share/man/ja_JP.SJIS/man3.Z/libcom_err.sl.3:
None
/usr/share/man/ja_JP.SJIS/man3.Z/libcom_err.so.3:
None
/usr/share/man/ja_JP.SJIS/man3.Z/libk5crypto.3:
None
/usr/share/man/ja_JP.SJIS/man3.Z/libk5crypto.sl.3:
None
/usr/share/man/ja_JP.SJIS/man3.Z/libk5crypto.so.3:
None
/usr/share/man/ja_JP.SJIS/man3.Z/libkrb5.sl.3:
None
/usr/share/man/ja_JP.SJIS/man3.Z/libkrb5.so.3:
None
/usr/share/man/ja_JP.SJIS/man4.Z/krb5.conf.4:
None
/usr/share/man/ja_JP.SJIS/man5.Z/kerberos.5:
None
KRB5-Client.KRB5-64SLIB,fr=B.11.31,fa=HP-UX_B.11.31_IA,v=HP:
/usr/lib/pa20_64/gss/libgssapi_krb5.1:
HP Kerberos V5 1.3.5 Module: libgssapi_krb5.1 Date:
May 2 2007 10:41:07
$Revision: @(#) krbclnt R11.31_BL2007_0502_2 PATCH_1
1.31 PHSS_36361
KRB5-Client.KRB5-IA32SLIB,fr=B.11.31,fa=HP-UX_B.11.31_IA,
v=HP:
/usr/lib/hpux32/gss/libgssapi_krb5.so.1:
$Revision: @(#) krbclnt R11.31_BL2007_0502_2 PATCH_1
1.31 PHSS_36361
KRB5-Client.KRB5-IA64SLIB,fr=B.11.31,fa=HP-UX_B.11.31_IA,
v=HP:
/usr/lib/hpux64/gss/libgssapi_krb5.so.1:
$Revision: @(#) krbclnt R11.31_BL2007_0502_2 PATCH_1
1.31 PHSS_36361
KRB5-Client.KRB5-SHLIB,fr=B.11.31,fa=HP-UX_B.11.31_IA,v=HP:
/usr/lib/gss/libgssapi_krb5.1:
$Revision: @(#) krbclnt R11.31_BL2007_0502_2 PATCH_1
1.31 PHSS_36361
HP Kerberos V5 1.3.5 Module: libgssapi_krb5.1 Date:
May 2 2007 10:40:33
KRB5-Client.KRB5-64SLIB,fr=B.11.31,fa=HP-UX_B.11.31_PA,v=HP:
/usr/lib/pa20_64/gss/libgssapi_krb5.1:
HP Kerberos V5 1.3.5 Module: libgssapi_krb5.1 Date:
May 2 2007 10:41:07
$Revision: @(#) krbclnt R11.31_BL2007_0502_2 PATCH_1
1.31 PHSS_36361
KRB5-Client.KRB5-SHLIB,fr=B.11.31,fa=HP-UX_B.11.31_PA,v=HP:
/usr/lib/gss/libgssapi_krb5.1:
$Revision: @(#) krbclnt R11.31_BL2007_0502_2 PATCH_1
1.31 PHSS_36361
HP Kerberos V5 1.3.5 Module: libgssapi_krb5.1 Date:
May 2 2007 10:40:33
cksum(1) Output:
KRB5-Client.KRB5-ENG-A-MAN,fr=B.11.31,
fa=HP-UX_B.11.31_IA/PA,v=HP:
592901020 5605 /usr/share/man/man3.Z/libkrb5.3
592901020 5605 /usr/share/man/man3.Z/libcom_err.3
592901020 5605 /usr/share/man/man3.Z/libcom_err.sl.3
592901020 5605 /usr/share/man/man3.Z/libcom_err.so.3
592901020 5605 /usr/share/man/man3.Z/libk5crypto.3
592901020 5605 /usr/share/man/man3.Z/libk5crypto.sl.3
592901020 5605 /usr/share/man/man3.Z/libk5crypto.so.3
592901020 5605 /usr/share/man/man3.Z/libkrb5.sl.3
592901020 5605 /usr/share/man/man3.Z/libkrb5.so.3
3190496628 9287 /usr/share/man/man4.Z/krb5.conf.4
4268080593 3211 /usr/share/man/man5.Z/kerberos.5
KRB5-Client.KRB5-JPN-E-MAN,fr=B.11.31,
fa=HP-UX_B.11.31_IA/PA,v=HP:
3551961663 6271 /usr/share/man/ja_JP.eucJP/man3.Z/libkrb5.3
3551961663 6271 /usr/share/man/ja_JP.eucJP/man3.Z/
libcom_err.3
3551961663 6271 /usr/share/man/ja_JP.eucJP/man3.Z/
libcom_err.sl.3
3551961663 6271 /usr/share/man/ja_JP.eucJP/man3.Z/
libcom_err.so.3
3551961663 6271 /usr/share/man/ja_JP.eucJP/man3.Z/
libk5crypto.3
3551961663 6271 /usr/share/man/ja_JP.eucJP/man3.Z/
libk5crypto.sl.3
3551961663 6271 /usr/share/man/ja_JP.eucJP/man3.Z/
libk5crypto.so.3
3551961663 6271 /usr/share/man/ja_JP.eucJP/man3.Z/
libkrb5.sl.3
3551961663 6271 /usr/share/man/ja_JP.eucJP/man3.Z/
libkrb5.so.3
1260580847 10147 /usr/share/man/ja_JP.eucJP/man4.Z/
krb5.conf.4
1875765872 3491 /usr/share/man/ja_JP.eucJP/man5.Z/kerberos.5
KRB5-Client.KRB5-JPN-S-MAN,fr=B.11.31,
fa=HP-UX_B.11.31_IA/PA,v=HP:
232190282 6295 /usr/share/man/ja_JP.SJIS/man3.Z/libkrb5.3
232190282 6295 /usr/share/man/ja_JP.SJIS/man3.Z/libcom_err.3
232190282 6295 /usr/share/man/ja_JP.SJIS/man3.Z/
libcom_err.sl.3
232190282 6295 /usr/share/man/ja_JP.SJIS/man3.Z/
libcom_err.so.3
232190282 6295 /usr/share/man/ja_JP.SJIS/man3.Z/
libk5crypto.3
232190282 6295 /usr/share/man/ja_JP.SJIS/man3.Z/
libk5crypto.sl.3
232190282 6295 /usr/share/man/ja_JP.SJIS/man3.Z/
libk5crypto.so.3
232190282 6295 /usr/share/man/ja_JP.SJIS/man3.Z/libkrb5.sl.3
232190282 6295 /usr/share/man/ja_JP.SJIS/man3.Z/libkrb5.so.3
2896878210 10179 /usr/share/man/ja_JP.SJIS/man4.Z/
krb5.conf.4
934491349 3506 /usr/share/man/ja_JP.SJIS/man5.Z/kerberos.5
KRB5-Client.KRB5-64SLIB,fr=B.11.31,fa=HP-UX_B.11.31_IA,v=HP:
3380740424 258304 /usr/lib/pa20_64/gss/libgssapi_krb5.1
KRB5-Client.KRB5-IA32SLIB,fr=B.11.31,fa=HP-UX_B.11.31_IA,
v=HP:
1897149204 432220 /usr/lib/hpux32/gss/libgssapi_krb5.so.1
KRB5-Client.KRB5-IA64SLIB,fr=B.11.31,fa=HP-UX_B.11.31_IA,
v=HP:
134114575 443456 /usr/lib/hpux64/gss/libgssapi_krb5.so.1
KRB5-Client.KRB5-SHLIB,fr=B.11.31,fa=HP-UX_B.11.31_IA,v=HP:
1257600962 225280 /usr/lib/gss/libgssapi_krb5.1
KRB5-Client.KRB5-64SLIB,fr=B.11.31,fa=HP-UX_B.11.31_PA,v=HP:
3380740424 258304 /usr/lib/pa20_64/gss/libgssapi_krb5.1
KRB5-Client.KRB5-SHLIB,fr=B.11.31,fa=HP-UX_B.11.31_PA,v=HP:
1257600962 225280 /usr/lib/gss/libgssapi_krb5.1
Patch Conflicts: None
Patch Dependencies: None
Hardware Dependencies: None
Other Dependencies: None
Supersedes: None
Equivalent Patches: None
Patch Package Size: 690 KBytes
Installation Instructions:
Please review all instructions and the Hewlett-Packard
SupportLine User Guide or your Hewlett-Packard support terms
and conditions for precautions, scope of license,
restrictions, and, limitation of liability and warranties,
before installing this patch.
------------------------------------------------------------
1. Back up your system before installing a patch.
2. Login as root.
3. Copy the patch to the /tmp directory.
4. Move to the /tmp directory and unshar the patch:
cd /tmp
sh PHSS_36361
5. Run swinstall to install the patch:
swinstall -x autoreboot=true -x patch_match_target=true \
-s /tmp/PHSS_36361.depot
By default swinstall will archive the original software in
/var/adm/sw/save/PHSS_36361. If you do not wish to retain a
copy of the original software, include the patch_save_files
option in the swinstall command above:
-x patch_save_files=false
WARNING: If patch_save_files is false when a patch is installed,
the patch cannot be deinstalled. Please be careful
when using this feature.
For future reference, the contents of the PHSS_36361.text file is
available in the product readme:
swlist -l product -a readme -d @ /tmp/PHSS_36361.depot
To put this patch on a magnetic tape and install from the
tape drive, use the command:
dd if=/tmp/PHSS_36361.depot of=/dev/rmt/0m bs=2k
Special Installation Instructions: None
|
