Patch-ID# 107337-04
Keywords: security kcms -p printer
Synopsis: OpenWindows 3.6.1: kcms_server and kcms_configure security fixes
Date: Feb/17/2005


Install Requirements: Reboot after installation                      
                      
Solaris Release: 7

SunOS Release: 5.7

Unbundled Product: OpenWindows

Unbundled Release: 3.6.1

Xref: 

Topic: 

Relevant Architectures: sparc

BugId's fixed with this patch: 4199722 4415570 4774256 5040882

Changes incorporated in this version: 5040882

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

 	/usr/openwin/bin/kcms_server 
 	/usr/openwin/bin/xcms2kcms 
 	/usr/openwin/bin/xcmsdb 
 	/usr/openwin/demo/kcms/README 
 	/usr/openwin/demo/kcms/Resource 
 	/usr/openwin/demo/kcms/kcms_photocd 
 	/usr/openwin/demo/kcms/kcmstest_tiff 
 	/usr/openwin/demo/kcms/pcdviewer 
 	/usr/openwin/demo/kcms/print_attributes 
 	/usr/openwin/demo/kcms/print_header 
 	/usr/openwin/demo/kcms/print_montbls 
 	/usr/openwin/demo/kcms/profile_demo 
 	/usr/openwin/demo/kcms/runpcdviewer 
 	/usr/openwin/lib/libkcs.so.1 
 	/usr/openwin/share/etc/OWconfig_entries 
 	/usr/openwin/share/etc/devhandlers/kcmscSUNWcolorsense.so.1 
 	/usr/openwin/share/etc/devhandlers/kcmscSUNWgamma.so.1 
 	/usr/openwin/share/etc/devhandlers/kcmscSUNWxrite_dtp92.so.1
 	/usr/openwin/share/etc/devhandlers/kcsEKPfmticc30.so.2 
 	/usr/openwin/share/etc/devhandlers/kcsEKProfkcms.so.2 
 	/usr/openwin/share/etc/devhandlers/kcsEKXfrmucp.so.2 
 	/usr/openwin/share/etc/devhandlers/kcsSUNWIOsolf.so.2 
 	/usr/openwin/share/etc/devhandlers/kcsSUNWIOxwin.so.2 
 	/usr/openwin/share/etc/devhandlers/kcsSUNWStatsolm.so.2 
 	/usr/openwin/share/etc/gpiutils/libkcms_sys.so.2 
 	/usr/openwin/share/etc/gpiutils/libkpcp.so.2 
 	/usr/openwin/share/etc/gpiutils/libstdprof.so.2
 	/usr/openwin/share/etc/gpiutils/libtu_runtime.so.1 
        /usr/openwin/bin/kcms_calibrate
/usr/openwin/bin/kcms_configure 

Problem Description:

5040882 Security issue within kcms_configure allows for file corruption
 
(from 107337-03)
4774256 Security issue with kcms_server daemon
 
(from 107337-02)
4415570 kcms_configure can cause buffer overflow and security problem
 
(from 107337-01)
4199722 KCMS configure has security problem

Patch Installation Instructions:
-------------------------------- 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7 release, refer to the man pages for instructions on
using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
       example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
----------------------------- 
 
None.

README -- Last modified date:  Thursday, February 17, 2005

