Patch-ID# 148874-02


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: security box libcurses
Synopsis: SunOS 5.10_x86: libcurses patch
Date: May/13/2015


Install Requirements: NA

Solaris Release: 10_x86

SunOS Release: 5.10_x86

Unbundled Product:

Unbundled Release:

Xref: This patch available for SPARC as patch 148873

Topic: SunOS 5.10_x86: libcurses patch

Relevant Architectures: i386

Bugs fixed with this patch:

Sun CR # Bug #
716380515787457
19169817
450318315079255
502770915205247
508907915223575
649416815361507
697554315661442
715788315782504


Changes incorporated in this version: 15787457 19169817

Patches accumulated and obsoleted by this patch: 123527-01 125910-01 126431-01 146833-02

Patches which conflict with this patch:

Patches required with this patch:

Obsoleted by:

Files included with this patch:

/lib/amd64/libcurses.so.1
/lib/libcurses.so.1
/usr/xpg4/lib/amd64/libcurses.so.1
/usr/xpg4/lib/amd64/libcurses.so.2
/usr/xpg4/lib/libcurses.so.1
/usr/xpg4/lib/libcurses.so.2

Problem Description:

15787457  libcurses: tparm calls strcpy without checking the length
19169817 UNIX03: VSX: /tset/CAPI.os/xcurses/tparm/T.tparm{1} and 2061 other cases FAIL
 
(from 148874-01)
 
        This revision accumulates generic Sustaining patch 146833-02
        into Solaris S10U11 update.
 
(from 146833-02)
 
7157883 wgetch() in xpg4 libcurses returns EOF when arrow key is used
 
(from 146833-01)
 
6975543 UNIX03: VSX CAPI.os/xcurses/set_curte/T.set_curte {1} fails
 
(from 126431-01)
 
        This revision accumulates generic Sustaining patch 125910-01
        into Solaris S10U4 update.
 
(from 125910-01)
 
6494168 wclrtobot(3XCURSES) in subwindow of shifted window can cause SIGSEGV
 
(from 123527-01)
 
4503183 box() causes SEGV
5027709 whline() and wvline() may cause SEGV and cause sysid to coredump and root can login without password
5089079 delterm() dereferences a freed pointer


Patch Installation Instructions:
--------------------------------
 
Please refer to the man pages for instructions on using 'patchadd'
and 'patchrm' commands provided with Solaris.
 
The following example installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/123456-07
 
The following example removes a patch from a standalone system:
 
       example# patchrm 123456-07
 
For additional examples please see the appropriate man pages. Any
other special or non-generic installation instructions should be
described below as special instructions.


Special Install Instructions:
-----------------------------
 
None.


README -- Last modified date: Wednesday, May 13, 2015