Patch-ID# 108196-03


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: security dtprintinfo timing home large sigsegv
Synopsis: CDE 1.0.2_x86: dtprintinfo patch
Date: Aug/10/2000


Install Requirements: NA

Solaris Release: 2.4_x86 2.5.1_x86 2.5_x86

SunOS Release: 5.4_x86 5.5.1_x86 5.5_x86

Unbundled Product: CDE

Unbundled Release: 1.0.2_x86

Xref: This patch available on CDE 1.0.1 as patch 108195

Topic:

Relevant Architectures: i386

Bugs fixed with this patch:

Sun CR # Bug #
413939414962442
419106014975817
419106514975819
428683415004941


Changes incorporated in this version: 4139394

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch:

Patches required with this patch: 108364-01 (or greater)

Obsoleted by:

Files included with this patch:

/usr/dt/bin/dtprintinfo

Problem Description:

4139394 long argument causes SIGSEGV
(from 108196-02)
4286834 Patch 105717-07 was obsoleted by 108364-01 so this
        patch needed to be repackaged.
(from 108196-01)
4191060 large HOME causes buffer overflow in dtprintinfo
4191065 dtmkdir() potentially has a timing security hole


Patch Installation Instructions:
-------------------------------- 
Refer to the Install.info file for instructions on using the
generic ''installpatch'' and ''backoutpatch'' scripts provided with
each patch.  Any other special or non-generic installation
instructions should be described below as special instructions.


Special Install Instructions:
----------------------------- 
None.


README -- Last modified date: Friday, November 9, 2012