Patch-ID# 103663-02
Keywords: security DNS libresolv.so.2 CERT BIND 4.9.3 in.named named-xfer
Synopsis: SunOS 5.5.1: libresolv, in.named, named-xfer, nslookup & nstest patch
Date: Dec/18/96

Solaris Release: 2.5.1

SunOS Release: 5.5.1

Unbundled Product:

Unbundled Release:

Xref: This patch available for x86 as patch 103663
Xref: This patch available for PPC as patch 103664

Topic: SunOS 5.5.1: libresolv, in.named, named-xfer, nslookup & nstest patch

BugId's fixed with this patch: 1238679 1247019

Changes incorporated in this version: 1247019

Relevant Architectures: sparc

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch:

Patches required with this patch:

Obsoleted by:

Files included with this patch:

/usr/include/arpa/nameser.h
/usr/include/netdb.h
/usr/include/resolv.h
/usr/lib/libresolv.so
/usr/lib/libresolv.so.1
/usr/lib/libresolv.so.2
/usr/lib/nslookup.help
/usr/sbin/in.named
/usr/sbin/named-xfer
/usr/sbin/nslookup
/usr/sbin/nstest

Problem Description:

1247019 nslookup takes 90 seconds if /etc/resolv.conf file is missing

(from 103663-01)

1238679 DNS spoofing is possible per Cern ca-96.02

Patch Installation Instructions:
--------------------------------
Refer to the Install.info file within the patch for instructions on
using the generic 'installpatch' and 'backoutpatch' scripts provided
with each patch. Any other special or non-generic installation
instructions should be described below.

Special Install Instructions:
-----------------------------

Please refer to the file called BIND_493 that came with this patch.
This document will describe the difference between libresolv.so.1 and 
libresolv.so.2 and it should provide the BIND 4.9.3 man pages.

It is recommended to install the following patches:

	103594-03 or higher 	sendmail patch
	103680-01 or higher	nscd/nscd_nischeck rebuild for BIND 4.9.3
	103683-01 or higher	nss_dns.so.1 rebuild for BIND 4.9.3
	103686-01 or higher	rpc.nisd_resolv rebuild for BIND 4.9.3