Patch-ID# 107654-10
Keywords: security firewall proxy socket
Synopsis: OpenWindows 3.6.1: X11R6.4 LBX & XRX Extensions Patch
Date: May/09/2002

Solaris Release: 7

SunOS Release: 5.7

Unbundled Product: OpenWindows

Unbundled Release: 3.6.1

Xref: This patch available for x86 as 107655

Topic: 

Relevant Architectures: sparc

BugId's fixed with this patch: 4220673 4225409 4258344 4261678 4267964 4268376 4333070 4379301 4620930 4649617

Changes incorporated in this version: 4649617

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 108376-01 or greater

Obsoleted by: 

Files included with this patch: 

	/usr/openwin/bin/proxymngr
	/usr/openwin/bin/rstart
	/usr/openwin/bin/xfindproxy
	/usr/openwin/bin/xfwp
	/usr/openwin/bin/xrx
	/usr/openwin/lib/X11/lbxproxy/AtomControl
	/usr/openwin/lib/X11/proxymngr/pmconfig
	/usr/openwin/lib/X11/rstart/rstartd.real
	/usr/openwin/lib/libxrx.so.1
	/usr/openwin/share/man/man1/lbxproxy.1
	/usr/openwin/share/man/man1/libxrx.1
	/usr/openwin/share/man/man1/proxymngr.1
	/usr/openwin/share/man/man1/rstart.1
	/usr/openwin/share/man/man1/rstartd.1
	/usr/openwin/share/man/man1/xfindproxy.1
	/usr/openwin/share/man/man1/xfwp.1
	/usr/openwin/share/man/man1/xrx.1
/usr/bin/rstartd
/usr/openwin/bin/lbxproxy

Problem Description:

4649617 lbxproxy contains a buffer overflow
 
(from 107654-09)
4620930 lbxproxy doesn't work on Solaris 7
 
(from 107654-08)
4379301 Buffer overflow in X socket transport code
 
(from 107654-07)
4333070 X setuid/setgid binary permissions need to be changed
 
(from 107654-06)
4268376	missing /usr/bin/rstartd entry in SUNWxwplt/prototype_com
 
(from 107654-05)
4267964	Missing files from X patches
 
(from 107654-04)
4261678 prototype_com has incorrect permission set for lib and openwin
4258344 Man pages header and title updates
 
(from 107654-03)
4225409 x11r6.4 features upgrade
4220673 Xsun dies running Java Swing apps

Patch Installation Instructions:
-------------------------------- 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7 release, refer to the man pages for instructions on
using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
	example# patchadd /var/spool/patch/104945-03
 
The following example removes a patch from a standalone system:
 
	example# patchrm 104945-03
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
----------------------------- 
 
This patch includes the XRX & LBX components of the X11R6.4 upgrade.
To get the full X11R6.4 upgrade, you must either upgrade to Solaris 7 11/99
or install the following patches in addition to this patch:
	108376:	OpenWindows 3.6.1: Xsun patch
	107650:	OpenWindows 3.6.1: Xprint extension patch
	107652:	OpenWindows 3.6.1: XKB extension patch
	107656:	OpenWindows 3.6.1: libXt patch
	107658:	OpenWindows 3.6.1: X11R6.4 API man pages patch
	108378:	OpenWindows 3.6.1: X11R6.4 lint libraries patch
 
If not running the Netscape browser bundled with Solaris 7 11/99, the new
plugin libxrx.so.1 needs to be copied either to the user's own plugin 
directory or the browser plugin directory.  (The bundled Netscape is already
configured to find the plugin.)  To confirm the plugin is installed correctly,
choose "About Plugins" from the Netscape help menu and see if the xrx plugin
is listed.
 
Special note:
-------------
To get the complete fix for the bug 4379301,
both 108376-20 (or newer) & 107654-08 (or newer) need to be installed.
 
README -- Last modified date:  Wednesday, March 20, 2002

README -- Last modified date:  Thursday, May 9, 2002

