Patch-ID# 107826-03 Keywords: Xsun Xserver core dump denial service Rasterflex color cell policy security Synopsis: Trusted Solaris 2.5.1: Xsun patch Date: Mar/21/2001 Solaris Release: Trusted_Solaris_2.5.1 SunOS Release: Unbundled Product: Unbundled Release: Xref: Topic: Relevant Architectures: sparc BugId's fixed with this patch: 4225604 4261355 4333926 Changes incorporated in this version: 4225604 4261355 4333926 Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: Obsoleted by: Files included with this patch: /usr/openwin/server/lib/libxpolicy.so.1 /usr/openwin/bin/Xsun Problem Description: (for 107826-03) Fixed README (from 107826-02) 4261355 Color map displayed incorrectly on 24bit RasterFlex framebuffer 4333926 Xserver fails to start when win_colormap priv is absent (from 107826-01) 4225604 xserver dumps core/possible denial of services attack Patch Installation Instructions: -------------------------------- Refer to the Install.info file for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. Any other special or non-generic installation instructions should be described below as special instructions. Special Install Instructions: ----------------------------- Note: The steps below assume the patch tarfile has been placed into the ADMIN_LOW subdirectory of /tmp (/tmp is an MLD), owned by admin and the patch tarfile label is configured to ADMIN_LOW. Keep in mind, after rebooting, contents in /tmp directory are removed; if saving the patch tarfile is desired, select another MLD such as /var/tmp. 1) Login as a user authorized to assume the admin and root roles. Assume the admin role. 2) Create a subdirectory for the patch and move the patch tar file into it. # cd /tmp # mkdir # mv 123456-01.tar.Z ./ # cd is the directory containing the patch itself. 3) Uncompress the patch tarfile by typing: # uncompress 123456-01.tar.Z 4) Extract the patch by typing: # tar xvf 123456-01.tar 5) cd into the patch directory: # cd 123456-01 # pwd /tmp/patch-dir/123456-01 The tar file 123456-01.tar in this directory requires the "T" flag for tar file extraction in order to preserve its file security attributes. Failure to use this option will cause the patch installation to terminate. 6) Extract the patch by typing: # tar xvTf 123456-01.tar 7) Assume the root role, cd into the directory where the patch resides. # cd /tmp//123456-01 8) Install the patch by typing: installpatch where is the directory containing installpatch, and is the directory containing the patch itself. # pwd /tmp//123456-01 # ./installpatch . Special Backout Instructions: ---------------------------- 1) Login as a user authorized to assume the root role, assume root role. 2) Change directory to /var/sadm/patch # cd /var/sadm/patch 3) Backout patch by typing: /backoutpatch where is the patch number. # 123456-01/backoutpatch 123456-01 README -- Last modified date: Wednesday, March 21, 2001