Patch-ID# 108976-10

NOTE:
***********************************************************************
READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT
FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU
AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE
TERMS, PROMPTLY DESTROY THE UNUSED SOFTWARE.
***********************************************************************

Keywords: security rmformat removable media format jaz adaptec 2903b
Synopsis: SunOS 5.8_x86: /usr/bin/rmformat and /usr/sbin/format patch
Date: Aug/18/2006


Install Requirements: Reconfigure after installation                      
                      
Solaris Release: 8_x86

SunOS Release: 5.8_x86

Unbundled Product: 

Unbundled Release: 

Xref: This patch available for SPARC as patch 108975

Topic: SunOS 5.8_x86: /usr/bin/rmformat and /usr/sbin/format patch
	NOTE:	Refer to Special Install Instructions section for
		IMPORTANT specific information on this patch.

Relevant Architectures: i386

BugId's fixed with this patch: 4035460 4146130 4242879 4292212 4304790 4308431 4311553 4322206 4328893 4362287 4397736 4475614 4484419 4742992 4776340 4781880 4808195 6296988

Changes incorporated in this version: 4742992 6296988

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 108969-01 108978-02 (or greater)

Obsoleted by: 

Files included with this patch: 

/etc/security/exec_attr
/usr/bin/rmformat
/usr/sbin/format

Problem Description:

6296988 format: segfault due to buffer overflow in shell escape code
4742992 format shell escape is a security hole under RBAC
 
(from 108976-09)
 
	        This revision updates patch dependencies.
 
(from 108976-08)
 
4776340 ON support for new platforms
4362287 rmformat(1m) should allow formatting ls-120 and usb floppies
4808195 re-use existing localization string for psr2
 
(from 108976-07)
 
4781880 VTOC error: write a block that is out of range -  Fix in format
 
(from 108976-06)
 
4035460 Format does not handle disklabels on intelligent disks sanely
4146130 Using 'format' cmd with disk type of 'other' menu option does not work
4475614 Format allows analyze/write to a T3B device with read only permission
4484419 format sometimes dumps core when mpxio is present
 
(from 108976-05)
 
4397736 Command format displays ":d" instead the number of Blocks
 
(from 108976-04)
 
4328893 format displays different form of disk name for fabric devices
 
(from 108976-03)
 
4304790 sometimes must eject/remount to rmformat zip media on Intel
 
(from 108976-02)
 
4322206 /usr/bin/rmformat has potential buffer overflows
 
(from 108976-01)
 
4292212 New utility rmformat needed to support removable media
4242879 format: no removable media in normal mode
4308431 rmformat -F long/quick failing for Jaz media on Intel
4311553 rmformat fails to write vtoc if the number of slices is just one

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-10 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
 
        NOTE 1: If you're using CDE 1.4, you MUST also install the following
                patches:
 
                109166-01 (or greater)  CDE 1.4: dtfile patch
                109168-01 (or greater)  CDE 1.4: Desktop Help Update Patch
                108922-02 (or greater)  CDE 1.4: dtwm Patch
 
                If you're using OpenWindows 3.8, you MUST also install the
                following patch:
 
                109464-01 (or greater)  OpenWindows 3.6.2: filemgr fixes
 
        NOTE 2: To get the complete Removable Media functionality, please
                also install the following patches:
 
                108971-01 (or greater)  /usr/lib/fs/pcfs/fsck and
                                        /usr/lib/fs/pcfs/mkfs patch
                108973-01 (or greater)  /sbin/fdisk patch
 
        NOTE 3: To get the complete fix for 4304790 (sometimes must eject/
                remount to rmformat zip media on intel), please also
                install the following patches:
 
                109644-01 (or greater)  sd driver patch
                109643-01 (or greater)  /usr/include/sys/dkio.h patch
                108973-02 (or greater)  /sbin/fdisk patch

README -- Last modified date:  Friday, August 18, 2006

