Patch-ID# 107654-10 Keywords: security firewall proxy socket Synopsis: OpenWindows 3.6.1: X11R6.4 LBX & XRX Extensions Patch Date: May/09/2002 Solaris Release: 7 SunOS Release: 5.7 Unbundled Product: OpenWindows Unbundled Release: 3.6.1 Xref: This patch available for x86 as 107655 Topic: Relevant Architectures: sparc BugId's fixed with this patch: 4220673 4225409 4258344 4261678 4267964 4268376 4333070 4379301 4620930 4649617 Changes incorporated in this version: 4649617 Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: 108376-01 or greater Obsoleted by: Files included with this patch: /usr/openwin/bin/proxymngr /usr/openwin/bin/rstart /usr/openwin/bin/xfindproxy /usr/openwin/bin/xfwp /usr/openwin/bin/xrx /usr/openwin/lib/X11/lbxproxy/AtomControl /usr/openwin/lib/X11/proxymngr/pmconfig /usr/openwin/lib/X11/rstart/rstartd.real /usr/openwin/lib/libxrx.so.1 /usr/openwin/share/man/man1/lbxproxy.1 /usr/openwin/share/man/man1/libxrx.1 /usr/openwin/share/man/man1/proxymngr.1 /usr/openwin/share/man/man1/rstart.1 /usr/openwin/share/man/man1/rstartd.1 /usr/openwin/share/man/man1/xfindproxy.1 /usr/openwin/share/man/man1/xfwp.1 /usr/openwin/share/man/man1/xrx.1 /usr/bin/rstartd /usr/openwin/bin/lbxproxy Problem Description: 4649617 lbxproxy contains a buffer overflow (from 107654-09) 4620930 lbxproxy doesn't work on Solaris 7 (from 107654-08) 4379301 Buffer overflow in X socket transport code (from 107654-07) 4333070 X setuid/setgid binary permissions need to be changed (from 107654-06) 4268376 missing /usr/bin/rstartd entry in SUNWxwplt/prototype_com (from 107654-05) 4267964 Missing files from X patches (from 107654-04) 4261678 prototype_com has incorrect permission set for lib and openwin 4258344 Man pages header and title updates (from 107654-03) 4225409 x11r6.4 features upgrade 4220673 Xsun dies running Java Swing apps Patch Installation Instructions: -------------------------------- For Solaris 2.0-2.6 releases, refer to the Install.info file and/or the README within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. For Solaris 7 release, refer to the man pages for instructions on using 'patchadd' and 'patchrm' scripts provided with Solaris. Any other special or non-generic installation instructions should be described below as special instructions. The following example installs a patch to a standalone machine: example# patchadd /var/spool/patch/104945-03 The following example removes a patch from a standalone system: example# patchrm 104945-03 For additional examples please see the appropriate man pages. Special Install Instructions: ----------------------------- This patch includes the XRX & LBX components of the X11R6.4 upgrade. To get the full X11R6.4 upgrade, you must either upgrade to Solaris 7 11/99 or install the following patches in addition to this patch: 108376: OpenWindows 3.6.1: Xsun patch 107650: OpenWindows 3.6.1: Xprint extension patch 107652: OpenWindows 3.6.1: XKB extension patch 107656: OpenWindows 3.6.1: libXt patch 107658: OpenWindows 3.6.1: X11R6.4 API man pages patch 108378: OpenWindows 3.6.1: X11R6.4 lint libraries patch If not running the Netscape browser bundled with Solaris 7 11/99, the new plugin libxrx.so.1 needs to be copied either to the user's own plugin directory or the browser plugin directory. (The bundled Netscape is already configured to find the plugin.) To confirm the plugin is installed correctly, choose "About Plugins" from the Netscape help menu and see if the xrx plugin is listed. Special note: ------------- To get the complete fix for the bug 4379301, both 108376-20 (or newer) & 107654-08 (or newer) need to be installed. README -- Last modified date: Wednesday, March 20, 2002 README -- Last modified date: Thursday, May 9, 2002