Patch-ID# 112785-61

NOTE:
***********************************************************************
READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT
FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU
AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE
TERMS, PROMPTLY DESTROY THE UNUSED SOFTWARE.
***********************************************************************

Keywords: security xsun xkb xinerama xdmcp xevie ipv6 speedo fonts xvfb ddx shm xinerama
Synopsis: X11 6.6.1: Xsun patch
Date: May/03/2007


Install Requirements: Reboot after installation, an alternative may be in Special Install Instructions                      
                      
Solaris Release: 9

SunOS Release: 5.9

Unbundled Product: X11

Unbundled Release: 6.6.1

Xref: This patch available for x86 as 112786

Topic: 

Relevant Architectures: sparc

BugId's fixed with this patch: 4185550 4248632 4422011 4522529 4531892 4633549 4636452 4638864 4642632 4644622 4649617 4651949 4657934 4675755 4676222 4677235 4680913 4682788 4684184 4689365 4692623 4700844 4701451 4703884 4707057 4707069 4707141 4709009 4709918 4710402 4710958 4712590 4716007 4721898 4729267 4729905 4732113 4734353 4736505 4737595 4740125 4742744 4743878 4748474 4749332 4750162 4750598 4753720 4755776 4760672 4762091 4762797 4763009 4770510 4771300 4780425 4780894 4781056 4784311 4785372 4785959 4787416 4787667 4787692 4790284 4798375 4805863 4809081 4809776 4810740 4818111 4828474 4834460 4838617 4839220 4843234 4845579 4846090 4847054 4847731 4856208 4858548 4863536 4866506 4868692 4874319 4880222 4886190 4889121 4889164 4889565 4894855 4907034 4913527 4915967 4922200 4930353 4957436 4961781 4962001 4963084 4970756 4982339 4985837 4989547 4991847 4992287 4995611 5002007 5007488 5016163 5016583 5023755 5028657 5028901 5031770 5032391 5037725 5039004 5042212 5046466 5048853 5067275 5104863 6216985 6219932 6219947 6226717 6228875 6255133 6265045 6265414 6269938 6314490 6316436 6373433 6379034 6383556 6416523 6450316 6465805 6502073 6506010 6526191 6538280 6538290

Changes incorporated in this version: 6526191 6538280 6538290

Patches accumulated and obsoleted by this patch: 112783-01 113098-04 113100-01 113541-02 113762-02

Patches which conflict with this patch: 

Patches required with this patch: 112963-10 113096-03 (or greater)

Obsoleted by: 

Files included with this patch: 

/usr/openwin/bin/Xnest
/usr/openwin/bin/Xprt
/usr/openwin/bin/Xsun
/usr/openwin/bin/Xvfb
/usr/openwin/bin/accessx
/usr/openwin/bin/fbconsole
/usr/openwin/bin/lbxproxy
/usr/openwin/bin/xdm
/usr/openwin/bin/xdmshell
/usr/openwin/bin/xdpyinfo
/usr/openwin/bin/xlock
/usr/openwin/bin/xterm
/usr/openwin/lib/X11/XErrorDB
/usr/openwin/lib/X11/XKeysymDB
/usr/openwin/lib/X11/xdm/Xaccess
/usr/openwin/lib/X11/xdm/Xservers
/usr/openwin/lib/X11/xdm/chooser
/usr/openwin/lib/X11/xdm/libXdmGreet.so.1.0
/usr/openwin/lib/X11/xkb/keycodes/sun
/usr/openwin/lib/X11/xkb/rules/sun
/usr/openwin/lib/X11/xkb/rules/sun.lst
/usr/openwin/lib/X11/xkb/rules/xfree86
/usr/openwin/lib/X11/xkb/rules/xfree86-it.lst
/usr/openwin/lib/X11/xkb/rules/xfree86.lst
/usr/openwin/lib/X11/xkb/symbols/sun/de
/usr/openwin/lib/X11/xkb/symbols/sun/dk
/usr/openwin/lib/X11/xkb/symbols/sun/es
/usr/openwin/lib/X11/xkb/symbols/sun/fr
/usr/openwin/lib/X11/xkb/symbols/sun/gb
/usr/openwin/lib/X11/xkb/symbols/sun/gr
/usr/openwin/lib/X11/xkb/symbols/sun/nl
/usr/openwin/lib/X11/xkb/symbols/sun/no
/usr/openwin/lib/X11/xkb/symbols/sun/pt
/usr/openwin/lib/X11/xkb/symbols/sun/se
/usr/openwin/lib/X11/xkb/symbols/sun/sw
/usr/openwin/lib/X11/xkb/symbols/sun/tuv
/usr/openwin/lib/X11/xkb/symbols/sun/us
/usr/openwin/lib/app-defaults/Chooser
/usr/openwin/lib/app-defaults/XTerm
/usr/openwin/lib/config/Project.tmpl
/usr/openwin/lib/config/sunLib.tmpl
/usr/openwin/lib/libFS.so.5
/usr/openwin/lib/libICE.so.6
/usr/openwin/lib/libX11.a
/usr/openwin/lib/libX11.so.4
/usr/openwin/lib/libXau.a
/usr/openwin/lib/libXau.so
/usr/openwin/lib/libXau.so.6
/usr/openwin/lib/libXdmcp.a
/usr/openwin/lib/libXdmcp.so
/usr/openwin/lib/libXdmcp.so.6
/usr/openwin/lib/libXext.a
/usr/openwin/lib/libXext.so.0
/usr/openwin/lib/libXi.a
/usr/openwin/lib/libXi.so.5
/usr/openwin/lib/libXt.so.4
/usr/openwin/lib/libdga.so.1
/usr/openwin/lib/sparcv9/libICE.so.6
/usr/openwin/lib/sparcv9/libX11.so.4
/usr/openwin/lib/sparcv9/libXext.so.0
/usr/openwin/lib/sparcv9/libXi.so.5
/usr/openwin/lib/sparcv9/libXt.so.4
/usr/openwin/lib/sparcv9/libdga.so.1
/usr/openwin/server/lib/libcfb.so.1
/usr/openwin/server/lib/libcfb16.so.1
/usr/openwin/server/lib/libcfb32.so.1
/usr/openwin/server/lib/libcfb4.so.1
/usr/openwin/server/lib/libfb.so
/usr/openwin/server/lib/libfb.so.1
/usr/openwin/server/lib/libfont.so.1
/usr/openwin/server/lib/libmfb.so.1
/usr/openwin/server/lib/libmi.so.1
/usr/openwin/server/lib/libserverdga.so.1
/usr/openwin/server/lib/libserverdps.so.5
/usr/openwin/server/modules/SUNWRender.so.1
/usr/openwin/server/modules/ddxSUNWkbd.so.1
/usr/openwin/server/modules/ddxSUNWmouse.so.1
/usr/openwin/server/modules/ddxSUNWvfb.so.1
/usr/openwin/sfw/lib/libXRes.so
/usr/openwin/sfw/lib/libXRes.so.1
/usr/openwin/sfw/lib/libXrender.so
/usr/openwin/sfw/lib/libXrender.so.1
/usr/openwin/sfw/lib/sparcv9/libXRes.so
/usr/openwin/sfw/lib/sparcv9/libXRes.so.1
/usr/openwin/sfw/lib/sparcv9/libXrender.so
/usr/openwin/sfw/lib/sparcv9/libXrender.so.1
/usr/openwin/share/etc/keytables/xkbtable.map
/usr/openwin/share/include/X11/XF86keysym.h
/usr/openwin/share/include/X11/Xauth.h
/usr/openwin/share/include/X11/Xdmcp.h 
/usr/openwin/share/include/X11/Xlibint.h
/usr/openwin/share/include/X11/Xos.h
/usr/openwin/share/include/X11/extensions/XKBbells.h
/usr/openwin/share/include/X11/extensions/XKBrules.h
/usr/openwin/share/include/X11/extensions/XRes.h
/usr/openwin/share/include/X11/extensions/XResproto.h
/usr/openwin/share/include/X11/extensions/Xevie.h
/usr/openwin/share/include/X11/extensions/Xeviestr.h
/usr/openwin/share/include/X11/extensions/Xrender.h
/usr/openwin/share/include/X11/extensions/render.h
/usr/openwin/share/include/X11/extensions/renderproto.h
/usr/openwin/share/include/X11/keysym.h
/usr/openwin/share/include/X11/keysymdef.h
/usr/openwin/share/man/man1/Xserver.1
/usr/openwin/share/man/man1/Xvfb.1
/usr/openwin/share/man/man1/xdm.1
/usr/openwin/share/man/man3Xext/XRes.3
/usr/openwin/share/man/man3Xext/XResQueryClientPixmapBytes.3
/usr/openwin/share/man/man3Xext/XResQueryClientResources.3
/usr/openwin/share/man/man3Xext/XResQueryClients.3
/usr/openwin/share/man/man3Xext/XResQueryExtension.3
/usr/openwin/share/man/man3Xext/XResQueryVersion.3
/usr/sfw/lib/libXrender.so
/usr/sfw/lib/libXrender.so.1
/usr/sfw/lib/sparcv9/libXrender.so
/usr/sfw/lib/sparcv9/libXrender.so.1

Problem Description:

6526191 [X.Org Bug #10001] *Xsun* XC-MISC Extension ProcXCMiscGetXIDList Memory Corruption Vulnerability
6538280 [IDEF741] *Xsun* fonts.dir File Parsing Integer Overflow
6538290 [IDEF739] *Xsun* BDF Font Parsing Integer Overflow
 
(from 112785-60)
 
6506010 libfont.so.1 in recent patches has undefined symbol "Xcalloc"
6502073 *Xsun* [X.Org Bug 9267] multiple integer overflows in XRender and DBE extensions
 
(from 112785-59)
 
4915967 integer overflows in X font server
 
(from 112785-58)
 
6383556 problem in allocating pixmap
 
(from 112785-57)
 
6465805 *Xsun/xfs* [X.Org bug #7535][CVE-2006-3467] Freetype2 pcf font problem also affects libXfont
 
(from 112785-56)
 
6450316 libX11 may need to merge in some changes from X.Org X11R6.5.1 or later
 
(from 112785-55)
 
6314490 X app dumps core with LC_ALL != C when XtOpenDisplay() is called twice
6265414 dtsession dies when exit button pressed; but CDE doesn't exit - Remote login to local host
6373433 4491526 breaks keymapping for control-shift-f1 and -f2 on SPARC systems
 
(from 112785-54)
 
4762091 xterm cursor placement wrong and screen garbled when scrollttyoutput off
6416523 patch 112785-53 contains files also delivered by patches 113098-04 and 113541-02
 
(from 112785-53)
 
6379034 portscan causes gnome-session to SEGV
 
(from 112785-52)
 
6316436 [CAN-2005-2495] Integer overflow in Xsun
6216985 Xsun & Xorg Xinerama protocols are incompatible with each other
 
(from 112785-51)
 
5031770 Xlibint.h GetEmtpyReq() macro fails to compile
 
(from 112785-50)
 
6269938 Solaris 8 and 9 Xtest call is not Xinerama aware
6226717 memory leak in _XlcInitCTInfo with Japanese locale
6265045 buffer overflow in Xsun
 
(from 112785-49)
 
6255133 SunRay: Xinerama: memory leak in Xsun after calling XCreatePixmap(3X11)
 
(from 112785-48)
 
6228875 Xsun crashes in XShmPutImage() on the XVR 600
 
(from 112785-47)
 
6219932 shift key breaks compose sequence when using XKB in C locale
6219947 Compose LED does not work in XKB mode
5016163 accessx dumps core on events for buttons 4 and 5
 
(from 112785-46)
 
5104863 "xterm" of Solaris 9 sets TERMCAP environment variable to "co#80:li#23:
 
(from 112785-45)
 
5067275 calling XGrabButton() and specifying a drawing area blanks monitor
5046466 Compose LED is not working in NON-C locales
 
(from 112785-44)
 
5048853 application crashes in _XrmInternalStringToQuark
 
(from 112785-43)
 
5032391 UnlockDisplay should release all the locks hold in dpy->lock
 
(from 112785-42)
 
5037725 vsw5 failed Xopen/strtkysym/Test{7}
 
(from 112785-41)
 
4707141 OpenGL Pixmap Problem on various Sun graphics cards
 
(from 112785-40)
 
5028657 update keysyms to include X11R6.7 & XFree86 4.4 definitions
5028901 CATIA V5 crashes due to a limitation in direct contexts when using pix
5039004 '+kb' Xsun option breaks keyboard input
5042212 new sunKeyMap.o symbols in Xsun clash with Sun Ray DDX
4992287 Compose LED not working after applying 108652-56 or greater
 
(from 112785-39)
 
4962001 there are some memory leaks in Motif
4982339 XKB rules not properly initialized
 
(from 112785-38)
 
5023755 xdm crash on bogus XDMCP request
5016583 Xsun can't be initiated in s9u7_03 (sparc)
 
(from 112785-37)
 
        Fix the links that caused conflict during patch audits.
 
(from 112785-36)
 
5007488 Xsun crashes when X-Resource has to byte-swap
4185550 X server spuriously turns NumLock and CapsLock off
4522529 request for wheel mouse support in Xsun
4787667 KIOCTYPE Messages when X boots without a keyboard are too cryptic
5002007 xterm should handle scroll wheel pseudo-button events
4856208 cannot logout from the remote machine when clicking EXIT button
 
(from 112785-35)
 
4771300 threshold for mmap() allocations of pixmaps should be raised
4963084 X-Resource extension
 
(from 112785-34)
 
4930353 dialog boxes are split between 2 monitors in case on doublewide mode
4970756 need XKBrules.h installed with XKB
4985837 XdbeGetVisualInfo causes Xlib threads to hang
4995611 additional font information file handling overflows
 
(from 112785-33)
 
4989547 ReadFontAlias buffer overflow
4991847 Xprt can't work on s9u6_08
 
(from 112785-32)
 
4810740 vsw512 test XtCallbackReleaseCacheRefList regresses
4907034 XtOverrideTranslations() takes 10x more cycles than 32-bit
 
(from 112785-31)
 
4874319 Xinerama copy functions do not work with dzfb
4889565 VisibilityNotify events broken for non mpg devices in Xinerama
4922200 banners, images and icons appear distorted, white, or blank in Netscape
4961781 memory leak in XOpenDisplay
4957436 xlfd with transformation matrix broken in Solaris 9
 
(from 112785-30)
 
4839220 VSW5.1.3: Xsun crashed
 
(from 112785-29)
 
4886190 VSW5.1.3: Xlib9/XDrawArcs-103: A total of 50 out of 9000 pixels were bad
4780425 frame crashes with X_CopyArea failure
 
(from 112785-28)
 
4913527 patch 112785-21 breaks xdm on Solaris 9
 
(from 112785-27)
 
4750598 xterm loops when cat /usr/pub/utf-8
4889164 scrolling on Xinerama is too slow on four headed pgx64 blade100/150
4781056 Graphics.drawChars(...) hangs Xserver
 
(from 112785-26)
 
4889121 monitor power saving causes a backing-stored image to disappear
 
(from 112785-25)
 
4894855 s9u5_04, CD0 install, Xsun core dumps
4845579 ShiftMask reported incorrectly by XEVIE
4847731 problem with XEVIE and accessx SlowKeys
4248632 xlock should accept Kerberos passwords
4680913 DGA: insecure creation of /tmp/wg0000*
4790284 regression bug in 108652-61 with Xos.h
 
(from 112785-24)
 
4880222 (rework) keys repeat too quickly under server load and patch 108652-70
4701451 Xvfb crashes if given a pixel depth of 24 or 32 deep
4709918 Xvfb script doesn't respect arguments
4785959 vfb should be more careful opening files
4834460 Xvfb is noisy
4863536 Xvfb doesn't work
 
(from 112785-23)
 
4880222 keys repeat too quickly under server load and patch 108652-70
 
(from 112785-22)
 
4858548 XRender extension appears to cause SIGBUS errors in Xsun
4866506 font server leaks memory when accessed via dtremote
 
(from 112785-21)
 
4846090 provide shared versions of libXdmcp & libXau
4743878 Solaris 9 doesn't honor /etc/X0.hosts
4843234 Solaris Xprt loses space when rendering with '-monotype-arial-*'-font
 
(from 112785-20)
 
4868692 security issues in vfb DDX
 
(from 112785-19)
 
4847054 xterm switches to autistic mode by inserting at end-of-line in vi
 
(from 112785-18)
 
4787416 Xserver hangs in m64SourceValidate on Solaris 8
4755776 add -defdepth & -defclass arguments to Xsun
 
(from 112785-17)
 
4422011 raise mouse button limit from three
4805863 performance problems on Sunblade 2000 with m64 card, Xinerama
 
(from 112785-16)
 
4828474 XListInputDevices crashes x86 Solaris 9 OS (update 2)
4785372 StarOffice core dumps on startup on SunRay in Xinerama with patch 108652-59
 
(from 112785-15)
 
4784311 user is logged out when running ANSYS AGP app
4809776 XDgaUnGrabDrawable of zombie window will crash on SW cursor devices
4818111 shm pixmaps corrupted with XFree86 porting kit
4716007 Xsun crashing in cfb32FillBoxTile32sCopy
4838617 Xsun fatal error "cfbGetSpans: invalid depth" with SRSS 2.0 + xinerama
 
(from 112785-14)
 
4809081 system hang during boot up with Xserver 6.6.2 build 27 pkgs installed
4787692 fbconfig stuck on open of jfb0 after 10 minutes keyboard inactivity
 
(from 112785-13)
 
4780894 XInputExtension doesn't work correctly in 64bit
4633549 AltGraph + E does not bring EuroSign in GNOME2/Netscape7 in ISO8859-15 locales
4798375 libcfb (color frame buffer) crash with latest libfont.so.1 fix (bug:4734353)
4742744 Nautilus crashes when moving mouse in the bookmark menu
 
(from 112785-12)
 
4736505 PC keyboard does not work in xkb mode
 
(from 112785-11)
 
4762797 [X.org defect #7955] XextAddDisplay cache not cleaned unless server has extension
4740125 Xserver & xdm man pages need updates for 4707069 & 4721898
4732113 Xserver manpage incorrectly specifies XKB options
4676222 copying the entire GB18030 charset from dtpad crashes dtpad in GB18030 locale
4753720 he, ar & ar_EG.UTF-8: Arabic fonts are not displaying correctly
4734353 (rework) Xserver and updated Indian fonts (8 scripts) are creating extra space for glyphs
 
(from 112785-10)
 
4760672 Xsun crashes in Sun Blade 150/2000 when using a Speedo Font
4734353 Xserver and updated Indian fonts (8 scripts) are creating extra space for glyphs
4707069 XDMCP over IPv6 support needed
4709009 XEvIE - X Event Interception Extension
 
(from 112785-09)
 
4763009 xserver unexpectedly died with patch 112785 on Solaris 9
 
(from 112785-08)
 
4729905 Xmark and CDE Bench regression in build 4 of s9 update 2
 
(from 112785-07)
 
4710402 memory leak in multibuffering extension
4703884 xlock: password buffers are too small
4638864 accessx should not require <alt-graph> key held down to perform mousekeys
4729267 Toggle Keys are not working for AccessX in XKB mode
4675755 left/right scrolling problem in Xinerama mode
4677235 Xinerama mode should allow DDX'es to disable per-head pixmap cache
 
(from 112785-06)
 
4712590 Solaris 9 cannot work with a Solaris 8 or 7 fontserver
4710958 XInitImage should be public, not SUNWprivate
 
(from 112785-05)
 
4700844 some dynamically loadable extensions aren't dynamically unloadable
 
(from 112785-04)
 
4692623 ToggleKeys/NumLock fails on SunRay on S8U4
 
(from 112785-03)
 
4531892 XCopyArea throws BadMatch when copying from shared pixmap in Xinerama mode
 
(from 112785-02)
 
4644622 XKB mode does not work on USB keyboards
 
(from 112785-01)
 
4649617 lbxproxy contains a buffer overflow
4651949 Xsun crashes on headless machines
4642632 Xserver: rollover condition in XdmcpWakeupHandler()
 
(from 113098-04)
 
4749332 libXrender gives StarOffice indigestion
4770510 RENDER should not be advertised unless required depths are supported
 
(from 113098-03)
 
4750162 113098-02 is missing directory entries
 
(from 113098-02)
 
4737595 s9u2_04, pkgchk found bad link after install
 
(from 113098-01)
 
4684184 Xsun should provide RENDER extension
 
(from 113541-02)
 
4633549 AltGraph + E does not bring EuroSign in GNOME2/Netscape7 in ISO8859-15
 
(from 113541-01)
 
4689365 num and caps-lock indicators confused on USB keyboards when XKB enabled
 
(from 113100-01)
 
4682788 Loadable Virtual Frame Buffer
 
(from 113762-02)
 
4740125 Xserver & xdm man pages need updates for 4707069 & 4721898
 
(from 113762-01)
 
4748474 unable to use xdm for remote session with Solaris 9
4707057 xdm: merge code with X11R6.6 & XFree86 4.2.0
4707069 XDMCP over IPv6 support needed
4721898 xdm should use /dev/random instead of /dev/mem
 
(from 112783-01)
 
4636452 xterm crashes when getpwuid fails
4657934 xterm upgrade removed existing bugfixes

Patch Installation Instructions:
-------------------------------- 
Refer to the man pages for instructions on using 'patchadd' and 'patchrm'
scripts provided with Solaris.  Any other special or non-generic
installation instructions should be described below as special
instructions.  The following example installs a patch to a standalone
machine:
 
	example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
	example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
----------------------------- 
 
NOTE 1:  To get the complete fix for 4633549 (AltGraph + E does not bring
         EuroSign in GNOME2/Netscape7 in ISO8859-15), please also install
         the following patch:
 
         113764-02 (or greater)  X11 6.6.1 keyboard patch
 
NOTE 2:  To get support for a scroll wheel on a USB mouse, please also
         install the following patches:
 
         115553-08 (or greater)  SunOS 5.9 USB Drivers & Framework patch
         115004-02 (or greater)  SunOS 5.9 kbtrans patch
         117418-01 (or greater)  SunOS 5.9 consms patch
 
NOTE 3:  To get the complete fix for 6379034 (portscan causes gnome-session
         to SEGV), please logout and login after applying this patch.

README -- Last modified date:  Thursday, May 3, 2007

