Patch-ID# 107894-02
Keywords: ttsession heavy load hang security
Synopsis: openwindows 2.7_x86: Tooltalk patch
Date: Sep/10/1999

Solaris Release: 7_x86

SunOS Release: 5.7_x86

Unbundled Product: openwindows

Unbundled Release: 2.7_x86

Relevant Architectures: i386

Xref: This patch is available for sparc as patch 107893

BugId's fixed with this patch: 4229531 4153078 4260867 4204015 

Changes incorporated in this version: 4260867 4204015 

Patches accumulated and obsoleted by this patch: 108123-01 108238-01

Patches which conflict with this patch:

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

        /usr/openwin/lib/libtt.so.2
	/usr/openwin/bin/ttsession
	/usr/openwin/bin/rpc.ttdbserverd

Problem Description: 

(from 108238-01)
4260867 tooltalk apps vulnerable to attack through TT_SESSION env. variab

(from 108123-01)
4204015 dbserver SEGVs when rpc function 15 is called with garbage

(from 107894-01)
4229531 ttsession fails under heavy system load
4153078 CDE dtlogin hangs sometimes due to a ttsession hang

Patch Installation Instructions: 
-------------------------------- 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.

For Solaris 7 release, refer to the man pages for instructions on
using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:

	example# patchadd /var/spool/patch/104945-02

The following example removes a patch from a standalone system:

	example# patchrm 104945-02

For additional examples please see the appropriate man pages.

Special Install Instructions: 
----------------------------- 

None.
