Patch-ID# 140993-05


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: sun ray update patch security
Synopsis: Sun Ray Core Services version 4.2 Patch Update
Date: Sep/16/2010


Install Requirements: Reboot after installing this patch to activate the changes delivered. An alternative may be specified in the Special Install Instructions.

Solaris Release: 10

SunOS Release: 5.10

Unbundled Product: Sun Ray Core Services

Unbundled Release: 4.2

Xref: This patch available for 5.10_x86 as 140994-05 and for Linux as 140995-05

Topic:

Relevant Architectures: sparc

Bugs fixed with this patch:

Sun CR # Bug #
650789112188605
674230412246871
675858012250316
677786412255002
681176112263690
684799212271663
688815812280206
688953512280565
689665912282067
689715612282184
689860612282506
689865812282511
690021212282863
690183612283169
690232812283265
690468412283816
690498912283901
690814412284642
691059912285212
691165412285398
691340612285749
691465112285998
691520612286076
691851912286712
692044912287065
692591712288192
692611412288242
693155012289417
693396812290013
694095812291644
694566812292922
694567912292925
694789512293489
694789812293490
694866512293672
694867812293673
694870212293681
694942512293839
695133712294301
695211912294469
695221612294484
695321612294742
695564012295310
695847912296033
696975812298413
697189412298846
697346612299144
697686512299784


Changes incorporated in this version: 6913406 6973466 6976865

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch:

Patches required with this patch:

Obsoleted by:

Files included with this patch:

/etc/opt/SUNWut/loginGUI.start
/etc/opt/SUNWut/smartcard/GEMALTOdotNet.cfg
/opt/SUNWut/bin/utaudio
/opt/SUNWut/etc/template/utsservices.cfg
/opt/SUNWut/lib/Xnewt
/opt/SUNWut/lib/firmware/CoronaP1
/opt/SUNWut/lib/firmware/CoronaP10
/opt/SUNWut/lib/firmware/CoronaP2
/opt/SUNWut/lib/firmware/CoronaP3
/opt/SUNWut/lib/firmware/CoronaP4
/opt/SUNWut/lib/firmware/CoronaP5
/opt/SUNWut/lib/firmware/CoronaP6
/opt/SUNWut/lib/firmware/CoronaP7
/opt/SUNWut/lib/firmware/CoronaP8
/opt/SUNWut/lib/firmware/CoronaP9
/opt/SUNWut/lib/firmware_gui/CoronaP1
/opt/SUNWut/lib/firmware_gui/CoronaP10
/opt/SUNWut/lib/firmware_gui/CoronaP2
/opt/SUNWut/lib/firmware_gui/CoronaP3
/opt/SUNWut/lib/firmware_gui/CoronaP4
/opt/SUNWut/lib/firmware_gui/CoronaP5
/opt/SUNWut/lib/firmware_gui/CoronaP6
/opt/SUNWut/lib/firmware_gui/CoronaP7
/opt/SUNWut/lib/firmware_gui/CoronaP8
/opt/SUNWut/lib/firmware_gui/CoronaP9
/opt/SUNWut/lib/ifdh_scbus.so.1
/opt/SUNWut/lib/libusbut.so.1
/opt/SUNWut/lib/libutadmin.so.1
/opt/SUNWut/lib/libutgrpmgr.so
/opt/SUNWut/lib/libutinfo.so.1
/opt/SUNWut/lib/libutsmon.so.1
/opt/SUNWut/lib/libutusb.so.1
/opt/SUNWut/lib/loginGUI
/opt/SUNWut/lib/pam_sunray_amgh.so.1
/opt/SUNWut/lib/usb/ttykeyspan.so.1
/opt/SUNWut/lib/utaddfontpath
/opt/SUNWut/lib/utauthd.jar
/opt/SUNWut/lib/utdevmgrd
/opt/SUNWut/lib/utparalleld
/opt/SUNWut/lib/utseriald
/opt/SUNWut/lib/utstoraged
/opt/SUNWut/sbin/utpolicy
/opt/SUNWut/share/man/man1m/utpolicy.1m
/usr/kernel/misc/sparcv9/utio
/usr/kernel/misc/utio

Problem Description:

6913406 Recorded audio is distorted on Sun Ray 3 Plus units
6973466 Sun Ray 3 Plus DTU reboots unexpectedly while recording and playing audio clips
6976865 Integrate SR3i support
 
(from 140993-04)
 
6898606 SRSS 4.2 does not allow audio recording in stereo with x86
6969758 [Audio Input] Distortion is high while playing recorded file on Solaris_x86/TX_x86 using windows
6971894 Regression in 4.2 patch -03 firmware prevents Code M2 Modems and Scanners from working correctly
 
(from 140993-03)
 
6507891 Sun Ray SunMC should monitor the new SRSS dependent Apollo daemon
6742304 utio causes kernel panic when destroying mutex
6758580 Trusted Extensions Xorg/Xnewt server doesn't support multilevel unix domain sockets
6777864 application can be blocked without good reason in read() call against Sun Ray serial device
6847992 Ignore terminalTokens list for non-Hardware (non-DTU) clients
6888158 Mouse pointer does not want to leave the corner
6896659 User GUI application randomly displays some characters in Bold
6897156 Inbound audio from Sun Ray 2 (P8) units is distorted
6898658 Extra call to dev_rdd_open() in Keyspan drivers should be removed
6900212 RFE: option could be added in PUI for enabling/disabling the OSD flow(1->21->22->26->44)
6911654 Hangul and Hanja keys on Korean PC 105 keyboard are not recognized by Xnewt
6914651 can't get "OneBadge" card to work on SRSS 4.2 installed with  pcscd.
6920449 Enabling XRender causes thunderbird and firefox crash with _Xerror in Sun Ray session on sparc.
6925917 Introduce library interfaces for remote redirection
6926114 MS Wireless Mouse no longer working with SRSS firmware 4.2_77_2009.10.19.17.01
6931550 SunMC error message : [user.info] get_device_status: failed for nxgex:1
6933968 Printing does not work using HP Laserjet 1010 printer with Win XP SP3 32 bit/ Win 2003 R2 32 bit
6940958 Some late IPv6 changes were missed in 4.2
6945668 Login screen is off-center on pan&scan after smartcard eject
6945679 port memory corruption fix in libfb to Xnewt [CVE-2010-1166]
6947895 utpolicy must support allowing specification of "card" and "both" hotdesking types for soft client
6947898 Device Manager needs to support soft client client ID format
6948665 Adding IPv6 DNS servers to CONFIG_DNS_SERVERS configuration record is backward/forward incompatible.
6948678 keepAliveExpiry is being sent unexpectedly
6948702 SwapDrop needs to support SCHD V2 protocol
6949425 utpolicy Man page and usage page needs update for "-u both & card" options.
6952119 DO NOT POWER OFF warning does not appear with DHCP6/DNS6
6952216 Add support for Macronix MX29LV640E flash for SR3+
6953216 Opnext 100-FX SFP TRF5326ANLB400 sometimes hangs during SR3+ boot
6955640 Fix Get response for G&D smartcafe cards in SR3
6958479 SRCS patches must deliver firmware images for Sun Ray 3 Plus (P9) and Sun Ray 3 (P10) units
 
(from 140993-02)
 
6951337 SRCS patches must deliver firmware images for Sun Ray 3 Plus units
 
(from 140993-01)
 
6811761 on SRSS 4.1 with Japanese language login, characters in lock window are garbled
6889535 loginGUI displays incorrect msg "Unable to authenticate - Internal PAM Error" when user is locked
6901836 SRSS 4.2 FCS, SR2 devices reboot during VPN authentication
6902328 memory problems in the Sun Ray Session Server
6904684 Sun Ray VPN fails on the 2nd IKE rekey, and reboots
6904989 When a VPN gateway closes a connection, the Sun Ray sends the previously entered password repeatedly
6908144 VPN connection expiration can leave Sun Ray in state that requires power off
6910599 Sound setup of DTU changes to speaker and headphone on when playing music
6915206 FOG doesn't work when 'enableMulticast=false' is set in auth.props file.
6918519 Restore "forced callme" feature to DM
 
Detailed Installation Steps
---------------------------
 
1. Suppress firmware downloads
 
	If the server being patched is not a member of a Sun Ray
	failover group you should skip this step.
 
	If the server being patched is a member of a Sun Ray failover
	group then this step is optional but is strongly recommended.
 
	At Patch Installation
	---------------------
 
	    Before adding this patch to servers configured into a Sun
	    Ray failover group we advise that you disable Sun Ray
	    firmware delivery from all unpatched hosts in the failover
	    group.  On each host in the group:
 
		For config parameters (.parms) file:
 
		    $ /opt/SUNWut/sbin/utfwadm -D -a -V
 
		For dedicated network interconnects:
 
		    $ /opt/SUNWut/sbin/utfwadm -D -a -n all
 
		For shared subnetwork interconnects:
 
		    $ /opt/SUNWut/sbin/utfwadm -D -a -N all
 
	    Do this only one time, before adding this patch to any
	    server in the group.
 
	    The purpose of this step is to prevent unpatched servers
	    from offering old firmware to Sun Ray appliances.
 
	At Patch Removal
	----------------
 
	    Before removing this patch from servers configured into a
	    Sun Ray failover group we advise that you disable firmware
	    delivery from any hosts in the failover group that have
	    this patch installed.  On each already-patched host in the
	    group:
 
		For dedicated network interconnects:
 
		    $ /opt/SUNWut/sbin/utfwadm -D -a -n all
 
		For shared subnetwork interconnects:
 
		    $ /opt/SUNWut/sbin/utfwadm -D -a -N all
 
		For config parameters (.parms) file:
 
		    $ /opt/SUNWut/sbin/utfwadm -D -a -V
 
	    Do this only one time, before removing this patch from any
	    of the already-patched servers in the group.
 
	    The purpose of this step is to prevent already-patched
	    servers from offering new firmware to Sun Ray appliances.
 
	    If this patch is being removed from a Sun Ray failover group
	    then omitting this step may result in increased restart
	    times for your Sun Ray appliances.  (A mixture of patched
	    and unpatched servers advertising conflicting firmware
	    versions may cause the appliance to download new firmware
	    each time it restarts.  The appliance automatically
	    restarts itself after downloading fresh firmware so its
	    overall restart cycle is longer in that case.  The
	    appliance may restart itself several times before
	    establishing or reconnecting to a session.)  The Sun Ray
	    restart time will return to normal once the patch has been
	    removed from all servers in the failover group.
 
 
2. Stopping Sun Ray services and login sessions
 
	Before the addition or removal of this patch to a Sun Ray server
	all users should be logged out of their Sun Ray sessions.
 
	Stop the Sun Ray services using the following commands:
 
                $ /etc/init.d/utstorage stop
                $ /etc/init.d/utsvc stop
 
	These commands will terminate any Sun Ray sessions that were not
	already logged out.
 
	Next, use the instructions outlined below in the section
	"Patch Installation Instructions" for the addition or removal
	of this patch.
 
3. Rebooting the Sun Ray server
 
	The Sun Ray server must be rebooted after the addition or removal
	of the patch.
 
4. Enable firmware downloads
 
	After the addition or removal of this patch on all Sun Ray
	servers in a failover group, enable firmware downloads
	using one of the following methods:
 
	1) If all Sun Ray servers in the failover group provide default
	   (non GUI) firmware downloads run this command on one of the servers:
 
		$ /opt/SUNWut/sbin/utfwsync
 
	   After which the Sun Ray DTU's will reboot themselves and load
	   the new firmware.
 
	2) If only some of the Sun Ray servers in the failover group provide
	   firmware downloads to the DTU's, run the following command
	   on the servers that do provide firmware:
 
	   For default (non GUI) firmware.
 
		For dedicated network interconnects:
 
		  $ /opt/SUNWut/sbin/utfwadm -A -a -n all
 
		For shared subnetwork interconnects:
 
		  $ /opt/SUNWut/sbin/utfwadm -A -a -N all
 
	   For GUI firmware.
 
		For dedicated network interconnects:
 
		  $ /opt/SUNWut/sbin/utfwadm -A -a -n all -f \
		    /opt/SUNWut/lib/firmware_gui
 
		For shared subnetwork interconnects:
 
		  $ /opt/SUNWut/sbin/utfwadm -A -a -N all -f \
		    /opt/SUNWut/lib/firmware_gui
 
	3) Upgrading firmware via the config parameter (.parms) file
 
	   For default (non GUI) firmware.
 
		  $ /opt/SUNWut/sbin/utfwadm -A -a -V
 
	   For GUI firmware.
 
		  $ /opt/SUNWut/sbin/utfwadm -A -a -V -f \
		    /opt/SUNWut/lib/firmware_gui
 
	   Then restart services on all servers in the failover group by
	   executing the following command on a server in the group:
 
		  $ /opt/SUNWut/sbin/utfwsync -d


Patch Installation Instructions:
-------------------------------- 
Refer to the man pages for instructions on using 'patchadd' and 'patchrm'
scripts provided with Solaris.  Any other special or non-generic installation
instructions should be described below as special instructions.  The following
example installs a patch to a standalone machine:
 
	example# patchadd /var/spool/patch/<patchid-rev>
 
The following example removes a patch from a standalone system:
 
	example# patchrm <patchid-rev>
 
patchadd may give some messages while installing on a system
with zones.  To suppress these messages "-G" option can be used.
 
	example# patchadd -G /var/spool/patch/<patchid-rev>
 
For additional examples please see the appropriate man pages.


Special Install Instructions:
----------------------------- 
NOTE 1: This patch is for the Sun Ray Core Services 4.2 component
that is part of Sun Ray Server Software 4.2.
 
NOTE 2: This SRSS patch does not support Live Upgrade.  Please do not
install this patch via live upgrade.
 
NOTE 3: The DTU firmware delivered in this patch has an increased
downgrade "barrier" of '422' to prevent accidental downgrades to
firmware from earlier releases.  If you wish to revert a unit back to an
earlier release of firmware after upgrading to this version of firmware,
please see the Sun Ray Information Center for information on overriding the
barrier/barrierLevel mechanism.
 
NOTE 4: The DTU firmware delivered in this patch has the following version
identification string
 
    4.2_140993-05_2010.08.25.23.16
    GUI4.2_140993-05_2010.08.25.23.16
 
Required Patches
----------------
 
Warnings & Errors
-----------------
** WARNING: This patch should only be applied to systems which have
	    Sun Ray Server Software 4.2 fully installed.
	    Do not attempt to add this patch to the UFS image to be
	    applied as part of the install process.
 
Post-Patch Installation Notes:
------------------------------


README -- Last modified date: Saturday, November 10, 2012