Patch-ID# 105633-64 Keywords: security openview buffer keytables Synopsis: OpenWindows 3.6: Xsun patch Date: Nov/25/2003 Install Requirements: See Special Install Instructions Solaris Release: 2.6 SunOS Release: 5.6 Unbundled Product: OpenWindows Unbundled Release: 3.6 Xref: This patch available for x86 as patch 106248 Topic: Relevant Architectures: sparc BugId's fixed with this patch: 4060341 4066985 4067299 4076297 4092685 4093042 4095459 4099505 4101279 4102279 4102547 4108134 4109097 4115146 4120484 4124705 4136721 4145697 4149801 4154425 4156993 4157641 4161152 4162373 4163790 4165762 4166153 4166329 4168571 4178200 4183231 4184889 4185418 4192179 4194112 4194588 4201153 4207211 4208458 4209569 4210522 4213395 4214254 4215548 4223880 4231879 4232363 4233140 4233280 4234976 4245099 4246833 4248632 4248958 4255571 4262197 4270754 4283864 4291770 4292075 4296832 4310813 4311804 4314304 4320517 4323164 4332966 4332979 4333070 4338851 4345609 4346749 4356377 4379301 4383751 4395929 4396244 4408780 4420281 4434893 4483090 4546095 4661987 4680913 4703884 4710402 Changes incorporated in this version: 4680913 Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: Obsoleted by: Files included with this patch: /usr/openwin/bin/Xsun /usr/openwin/bin/xlock /usr/openwin/lib/X11/PostScript.VM /usr/openwin/lib/X11/fonts/Type1/fonts.dir /usr/openwin/lib/X11/fonts/Type1/fonts.scale /usr/openwin/lib/X11/fonts/Type1/outline/fonts.dir /usr/openwin/lib/X11/fonts/Type1/outline/fonts.scale /usr/openwin/lib/libFS.so.5 /usr/openwin/lib/libICE.so.6 /usr/openwin/lib/libX11.a /usr/openwin/lib/libX11.so.4 /usr/openwin/lib/libdga.so.1 /usr/openwin/lib/libp/libX11.a /usr/openwin/server/lib/libfont.so.1 /usr/openwin/server/lib/libmhc.so.1 /usr/openwin/server/lib/libmi.so.1 /usr/openwin/server/lib/libovl.so.1 /usr/openwin/server/lib/libserverdps.so.5 /usr/openwin/server/modules/ddxSUNWcg6.so.1 /usr/openwin/server/modules/ddxSUNWkbd.so.1 /usr/openwin/share/include/X11/ICE/ICElib.h /usr/openwin/share/include/X11/Xlib.h /usr/openwin/share/include/X11/Xlibint.h /usr/openwin/share/include/X11/Xresource.h /usr/openwin/share/include/X11/Xutil.h /usr/openwin/share/include/X11/extensions/XTest.h /usr/openwin/bin/fbconsole /usr/openwin/lib/libXmu.so.4 /usr/openwin/server/lib/libcfb16.so.1 /usr/openwin/server/lib/libcfb32.so.1 /usr/openwin/server/lib/libcfb4.so.1 /usr/openwin/share/etc/keytables/Denmark6.kt.Z /usr/openwin/share/etc/keytables/Finnish6.kt.Z /usr/openwin/share/etc/keytables/France6.kt.Z /usr/openwin/share/etc/keytables/Germany6.kt.Z /usr/openwin/share/etc/keytables/Italy6.kt.Z /usr/openwin/share/etc/keytables/Japan6.kt.Z /usr/openwin/share/etc/keytables/Korea6.kt.Z /usr/openwin/share/etc/keytables/Netherland6.kt.Z /usr/openwin/share/etc/keytables/Norway6.kt.Z /usr/openwin/share/etc/keytables/Portugal6.kt.Z /usr/openwin/share/etc/keytables/Spain6.kt.Z /usr/openwin/share/etc/keytables/Sweden6.kt.Z /usr/openwin/share/etc/keytables/Switzer_Fr6.kt.Z /usr/openwin/share/etc/keytables/Switzer_Ge6.kt.Z /usr/openwin/share/etc/keytables/Taiwan6.kt.Z /usr/openwin/share/etc/keytables/Turkey5.kt.Z /usr/openwin/share/etc/keytables/TurkeyF5.kt.Z /usr/openwin/share/etc/keytables/TurkeyF6.kt.Z /usr/openwin/share/etc/keytables/TurkeyQ5.kt.Z /usr/openwin/share/etc/keytables/TurkeyQ6.kt.Z /usr/openwin/share/etc/keytables/UK6.kt.Z /usr/openwin/share/etc/keytables/US6.kt.Z /usr/openwin/share/etc/keytables/keytable.map /usr/openwin/server/lib/libcfb.so.1 Problem Description: 4680913 DGA: Insecure creation of /tmp/wg0000* (from 105633-63) 4248632 xlock should accept Kerberos passwords (from 105633-62) 4710402 Memory leak in multibuffering extension 4703884 xlock: password buffers are too small (from 105633-61) 4546095 libX11 should not honor some environment variables in set*id programs 4661987 CAN-2002-0158: Xsun "-co" heap overflow (from 105633-60) 4483090 xlock buffer overflow (from 105633-59) 4395929 Support is required for newly developed keyboards (from 105633-58) 4194112 Change in Functionality of /etc/X*.hosts on Solaris 2.6 from Solaris 2.5.1 (from 105633-57) 4434893 Xsun crash SEGV at the end of ICEMSurf session (from 105633-56) 4396244 New xserver bug causes problems in Font2DTest (jdk demo). (reworked) 4296832 X header files have no-type declaration forbidden in ANSI C++ (from 105633-55) 4408780 DGA application crashes when run through ssh connection 4420281 vsw502 XFillArcs plane-mask operations produce wrong values many regressions 4396244 New xserver bug causes problems in Font2DTest (jdk demo). (from 105633-54) 4356377 - keyboard ddx does not check bounds correctly (from 105633-53) 4201153 Can't get/set Caps Lock LED state via XGetKeyboardControl() and XChang (from 105633-52) 4102547 XOpenDisplay() hangs with shmem transport when XInitThreads() called (from 105633-51) 4379301 Buffer overflow in X socket transport code (from 105633-50) 4383751 Xsun dumps core with HP OpenView Node Manager 6.1 (from 105633-49) 4345609 Font server connection hangs (from 105633-48) 4338851 I-DEAS8 hangs when atok8 is enab (from 105633-47) 4323164 fbconsole should open /dev/console with O_NOCTTY (from 105633-46) 4346749 Xsun crashes after reducing cameleo's display window and using a XRead (from 105633-45) 4332979 Xview app fails to load user-supplied font (reworked) (from 105633-44) 4185418 the X server should support more connections. (from 105633-43) 4332979 Xview app fails to load user-supplied font (from 105633-42) 4332966 security: Xsun has a buffer overflow 4333070 X setuid/setgid binary permissions need to be changed (from 105633-41) 4320517 An unexpected window would appear in customer's specific application. (from 105633-40) 4314304 OpenGL regression with Catia due to Xsun patch (from 105633-39) 4185418 the X server should support more connections. (from 105633-38) 4310813 Xserver exits unexpectedly, when working with HyperHelp 5.1.2 from Hyp (from 105633-37) 4215548 Xserver crashes on Solaris 7 4311804 Xserver loops in FindCachedFontPattern or crashes (from 105633-36) 4291770 Xsun dumps core when it tries to push button on application (refix) 4161152 Solaris-x86 - XDrawLines of wide lines with capstyle = CapProjecting (from 105633-35) 4283864 XServer crashes with dual headed display and Elite (sparc only) (from 105633-34) 4154425 Missing patch postinstall instruction in patch (refix for 105633-32) Removed fix for 4161152 (from 105633-33) Removed 4161152 Solaris-x86 - XDrawLines of wide lines with capstyle = CapProjecting 4291770 Xsun dumps core when it tries to push button on customer's application (from 105633-32) 4233280 Multi-threaded X application hangs in _XFlushInt on Solaris 2.6 s 4270754 OGL program and other Xlib programs hangs Xserver 4207211 Selection of UG menubar item causes X-Server to crash on the ZX 4292075 2.6 Xsun crash caused by memory leak after install patch 105633-14 (from 105633-31) 4233140 Xserver crashes using multibuffer extension (from 105633-30) 4255571 XDestroyIC() in C locale causes freed memory access (from 105633-29) 4262197 xdm remote login can fail when a machine has an interface with a (from 105633-28) 4231879 ON X86: X server crashes w/Thai font; (en_US.UTF-8 exits dtlogin also plays a role in fixing problems of the nature described in 4109097 (from 105633-27) 4232363 X clients never die after Xserver crash 4109097 scratch of the fonts on the screen with Thai trueType font on X86 4245099 XGL Application fails when FFB default visual sets overlay (from 105633-26) 4223880 Xsun in S7 dumps core on certain URLs (from 105633-25) 4248958 OPENGL program shows mem leak in libdga (from 105633-24) 4246833 Korean USB keytable maps "\" key incorrectly (from 105633-23) 4214254 "\" key on zh_TW USB keyboard displays a wrong character 4210522 Korea6.kt has wrong entries for XK_Hangul_Hanja 4213395 Kana key on Japanese USB keyboard doesn't work as a toggler (from 105633-22) 4092685 Xlib locks up when initialized for multithreading with Japanese Solaris installed 4234976 XOpenDisplay fails when passed a hostname:display.screen argument (from 105633-21) 4136721 x86 cc compiler with -O flag breaks libfont.so.1 4102279 Xsun crashes after fix of bug 4058716 has been integrated (from 105633-20) 4209569 Xsun crashes when viewing postscript document (from 105633-19) 4162373 winlock at start of Pro/E R20 with XGL/ZX/openwindows causing graphics problems (from 105633-18) 4208458 Visibility change update fix (from 105633-17) 4163790 Place holder for KB_USB fixes 4184889 OWconfig keyword "ListOfInput" exits server erroneously 4178200 Missing visibility change events 4194588 Need standard USB keytable support (from 105633-16) 4192179 cu has his own application that crashes the xserver. 4168571 Applix causes Xserver to crash with tcxFillBoxSolid (from 105633-15) 4145697 Linking Patran with pthreads library crashes XGL driver (from 105633-14) 4183231 XFontStruct max_bounds/min_bounds lbearing incorrect for Korean Type1/CID fonts (from 105633-13) 4067299 Xsun security issue 4149801 libfont has a possible buffer overflow issue (from 105633-12) 4095459 A window is not repainted correctly when the window is restored. 4156993 Xsun crashes when accessing converted fonts 4157641 Multi-threaded App dying in libX11 when statically linked (reworked) (from 105633-11) 4166153 Xsun exits unexpectedly, when resizing a Qt widget demoapp and Netscape running (from 105633-10) 4166329 s2.6 patch 105633-04 broken in 105633-08, breaks s2.7_20 regarding OpenGL MT 4165762 fbconsole chewing up cpu time (from 105633-09) 4157641 Ada multi-threaded app dies using static Xlib library (from 105633-08) 4120484 Problems in filling with stippled using XFillPolygon (from 105633-07) 4115146 XFlush() hangs on multi CPU Ultra with Creator 3D (from 105633-06) 4124705 Xserver crash on using PC File viewer to open WORD document (from 105633-05) 4060341 Xsun Type1 fonts render incorrectly 4108134 Fonts are not being displayed with 2.6 Xserver (from 105633-04) 4099505 XCreateColormap hangs after calling XInitThreads. 4076297 glXChooseVisual hangs if XInitThreads is called. 4066985 Unable to display monochrome EPS file correctly in dpsexec when expand double. (from 105633-03) 4101279 When 105633-02 fails to be installed, no errors are received. (from 105633-02) 4093042 Server will not start if using mhc library - reworked (from 105633-01) 4093042 Server will not start if using mhc library. Patch Installation Instructions: -------------------------------- Refer to the Install.info file for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. Any other special or non-generic installation instructions should be described below as special instructions. Special Install Instructions: ----------------------------- A new option "-clients [128|1024]" is added to Xsun for setting maximum client connections. If Xsun starts without this option, the default maximum client connections are still 128. README -- Last modified date: Tuesday, November 25, 2003