Patch-ID# 101362-51 Keywords: security xsun server patch Synopsis: OpenWindows 3.3: Server (Xsun) Patch Date: Aug/13/97 Solaris Release: 2.3 SunOS Release: 5.3 Unbundled Product: OpenWindows Unbundled Release: 3.3 Relevant Architectures: sparc BugId's fixed with this patch: 1141315 1142771 1146111 1141375 1144461 1146088 1152001 1152769 1151914 1152944 1147430 1144743 1151315 1124764 1143469 1150198 1145096 1149675 1136010 1156204 1155735 1155459 1127452 1152183 1157391 1129822 1160954 1143823 1156204 1163461 1139622 1157309 1139673 1160924 1129184 1145180 1159294 1172227 1159297 1171660 1171816 1172825 1176147 1178297 1178838 1169371 1177198 1157278 1184905 1182946 1181295 1187491 1186502 1187859 1176797 1187859 1186139 1198163 1202028 1159297 1207788 1186187 1199273 1199616 1214376 1221437 1254677 1243445 1254709 1262414 4012465 4036289 1266793 Changes incorporated in this version: 1266793 Patches accumulated and obsoleted by this patch: 101307-01 101457-01 101687-01 101593-02 Patches which conflict with this patch: 101262-22 NOTE: rev -22 or lower Patches required with this patch: Obsoleted by: Files included with this patch: /usr/openwin/bin/xlock /usr/openwin/bin/xhost /usr/openwin/bin/Xsun /usr/openwin/server/lib/libmfb.so.1 /usr/openwin/server/lib/libcfb.so.1 /usr/openwin/server/lib/libcfb16.so.1 /usr/openwin/server/lib/libcfb32.so.1 /usr/openwin/server/lib/libfont.so.1 /usr/openwin/server/lib/libmi.so.1 /usr/openwin/server/lib/libmpg.so.1 /usr/openwin/server/lib/libmhc.so.1 /usr/openwin/server/modules/ddxSUNWcg6.so.1 /usr/openwin/server/modules/ddxSUNWkbd.so.1 /usr/openwin/server/modules/ddxSUNWmouse.so.1 /usr/openwin/server/modules/ddxSUNWdials.so.1 /usr/openwin/server/modules/ddxSUNWdialsCompat.so.1 /usr/openwin/lib/libX11.a /usr/openwin/lib/libX11.so.4 /usr/openwin/lib/libp/libX11.a Problem Description: 1266793 Solaris 2.x libX11 security vulnerability Incorporated from previous version: 4012465 - Stippled fillpolygon doesn't render when the window is resized. 1262414 - Garbage is drawn under TGX+. 1243445 XPutImage from a bitmap image to a pixmap is wrong in a GX+. 1254709 XPutImage to a GC tile pixmap does not work correctly on GX+/TGX+. 1254677 Can't input numerical data from 10 keys when there is NumLock key on with type 5 keyboard 1221437 Xsun can't send xterm MotionNotify Event by a tablet of X extension device 1214376 XmbDrawString() doesn't work correctly on TurboGXplus 1199616 Xsun 3.3 cores with patch 101362-34 installed 1199273 Initialize Xshm functions for mpg devices such as cgfourteen 1159297 Xsun hang on ZX/SX when drawing large circles with XDrawArc() 1207788 Array bounds read error in cfbCopyPlane1to8 1186187 server crashes during X Test Suite copyplane test 1202028 Xsun server core dumps on a GS machine. 1198163 WABI running on Solaris 2.3 SX demonstrates rendering problems. 1186139 OWN 3.3 Xsun server lost when enlarging image after printing 1186502 xfd displays incorrect morisawa scalable font after dps appl 1176797 CDE workspace tiling is way too slow on TGX+ 1187491 Partial fix to CAP_NOT_LAST attr. causes the server to crash 1157278 Console errors when adding extension device & parsing OWconfig 1182946 circles are rendered with square edges 1181295 OLIT 3.3 LED off if number of entered character more than max 1169371 GX+ draws garbage when moving double buffered window 1184905 icons get ghosted after install patch 101362-27 1177198 Xsun server continuously polling, reading bogus file descriptor 1169371 GX+ draws garbage when moving double buffered window 1178838 F3 font appears on coordinates of incorrect position by using DPS 1178297 Xsun crashes when using sundials in Unigraphics 1176147 XtSetValues call with valid parameters causes core dump (in miUnion) 1172825 XDrawString is very slow if large (34) point sizes are used. 1171816 XTEST 2.2 patch compatible with previous XDM patch needed 1171660 Xsun crashes during ConfigureWindow Request (CTE 9965) 1159297 Xsun hang on ZX/SX when drawing large circles with XDrawArc()(CTE 10266) The patch 101687-01 has been integrated into this patch (CTE 10266) 1172227 Xsun suddenly dumps core when cursor pointer moves at bottom right corner The following was fixed by backing out the fix for BugID 1129184: 1155459 Type4 German keyboard goes in/out strange state (s494_prealpha7) 1156204 Extension input devices cannot become the core pointer 1155735 Xsun multibuffering fails with GXplus; Lines drawn outside window 1136010 console prompt from PROM left white on white by PutBanner 1144743 Xsun core dumped while zoom/preview of imagetool of gif on C2+ cg14 1151315 Xsun core dump after DnD 1124764 after a period of time, can't run any dps apps on s1093_pr1 server 1143469 Sometimes, cannot run pageview at all 1150198 Running version of Emacs kills Xserver under Solaris 1145096 xsun dumps core 1149675 xsun: Server hangs during CDE test execution 1152769 Xsun refuses connection when many procs connect simultaneously 1151914 Xsun server goes into infinite loop running Xlib app using setitmer 1152944 Xsun DGA does not wrap the GCops correctly 1147430 mwm on an IPX causes wide bands on root & color change 1152001 OpenWindows 3.3 fails to pop HWC module on exit 1141315 Xsun grew to 100MB by showing second page of helpviewer in Japanese 1142771 Kanji PostScript rendering is 8 times slower than xnews 1146111 Xsun goes into infinite loop when connected to a font server, has to be killed (triggered by wabi) 1146088 lines can render outside of color windows on CG8 & CG3, may crash server 1141375 AUXDEV server extension does not work in SunOS 2.3 (breaks SUNPC) 1144461 Code ok on OW3.2/OS5.2 causes OpenWindows to exit on OW3.3/OS5.3 1127452 Japanese minm14 and minb14 fonts look bad in s1093 1152183 mpg prevents 24 bit pixmaps from being freed 1157391 xfd show wrong font imge if used the morisawa scalable fonts 1129822 V3.3 server putting out null connectionType XDMCP record 1160954 TurboGXPlus fb has problem displaying right colors 1143823 XSun with Morisawa F3 font returns wrong ascent and descent 1156204 Extension input devices cannot become the core pointer in Solaris 2.3 1163461 XGetFeedbackControl, XChangeFeedbackControl produce X errors 1139622 - xhost does not work with a decnet node name 1157309 - xserver denies access from VAXhosts which uses host::notation 1139673 keyrepeat appeared to get stuck. 1160924 XGL/XIL apps "freeze" when running multiple apps. 1129184 Need support for new Kana LED on Japanese Hobo keyboard. 1145180 in ja locale, VERTICALOFFSET in kanji.trans does not work 1159294 Japanese DPS shows vertical glyphs on incorrect position 1187859 Filling with fillStyle == FillTiled is slower on GX+ when tile 4036289 xlock has a security problem. Patch Installation Instructions: -------------------------------- Refer to the Install.info file for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. Any other special or non-generic installation instructions should be described below as special instructions. Special Install Instructions: ----------------------------- None.