Patch-ID# 108196-03
Download this patch from My Oracle Support
Your use of the firmware, software and any other materials contained
in this update is subject to My Oracle Support Terms of Use, which
may be viewed at My Oracle Support.
|
For further information on patching best practices and resources, please
see the following links:
|
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.
|
Keywords: security dtprintinfo timing home large sigsegv
Synopsis: CDE 1.0.2_x86: dtprintinfo patch
Date: Aug/10/2000
Install Requirements: NA
Solaris Release: 2.4_x86 2.5.1_x86 2.5_x86
SunOS Release: 5.4_x86 5.5.1_x86 5.5_x86
Unbundled Product: CDE
Unbundled Release: 1.0.2_x86
Xref: This patch available on CDE 1.0.1 as patch 108195
Topic:
Relevant Architectures: i386
Bugs fixed with this patch:
Changes incorporated in this version: 4139394
Patches accumulated and obsoleted by this patch:
Patches which conflict with this patch:
Patches required with this patch: 108364-01 (or greater)
Obsoleted by:
Files included with this patch:
/usr/dt/bin/dtprintinfo
Problem Description:
4139394 long argument causes SIGSEGV
(from 108196-02)
4286834 Patch 105717-07 was obsoleted by 108364-01 so this
patch needed to be repackaged.
(from 108196-01)
4191060 large HOME causes buffer overflow in dtprintinfo
4191065 dtmkdir() potentially has a timing security hole
Patch Installation Instructions:
--------------------------------
Refer to the Install.info file for instructions on using the
generic ''installpatch'' and ''backoutpatch'' scripts provided with
each patch. Any other special or non-generic installation
instructions should be described below as special instructions.
Special Install Instructions:
-----------------------------
None.
README -- Last modified date: Friday, November 9, 2012