Patch Name: PHSS_16151 Patch Description: s700_800 10.30 CDE Runtime AUG 98 Cumulative Patch Creation Date: 98/08/10 Post Date: 98/08/13 Hardware Platforms - OS Releases: s700: 10.30 s800: 10.30 Products: N/A Filesets: CDE.CDE-MIN CDE.CDE-RUN CDE.CDE-SHLIBS CDE.CDE-HELP-RUN CDE.CDE-DTTERM CDE.CDE-ENG-A-MAN Automatic Reboot?: No Status: General Release Critical: No Path Name: /hp-ux_patches/s700_800/10.X/PHSS_16151 Symptoms: PHSS_16151: 1) Buffer overflow in dtmail. 2) Buffer overflow in rpc.ttdbserverd. PHSS_14596: 1) permissions problem with dtappgather. 2) permissions problem with dtprintinfo. PHSS_13725: 1) Re-release for 'dtappgather' PHSS_13404: 1) buffer overrun in dtaction. 2) permissions problem with dtappgather. 3) permissions problem with dtsearchpath. 4) Memory leak in dtlogin. 5) Race condition with xdm. 6) Buffer overflow problem with dtlock. PHSS_12588: 1) Helpview hangs when LANG = ja_JP.ecuJP 2) dtpad server hangs after opening and closing several times in ja_JP.SJIS 3) Non-C locales have problems integrating multiple dtwm.fp's (frontpanels) 4) dr_dt print unnecceassry warning regarding hpterm 5) dtcm dies when mailing reminders to more than one address 6) large calendar file,dtcm not being able to connect to the daemon process 7) rpc.ttdbserverd version mismatch caused by garbage collection 8) dthelpprint - &ohm does not show up when helpfile is printed. 9) dthelp does not handle &sigspace correctly 10) default action for dtmail drop action can destroy mailboxes 11) dtfile: cntl+spacebar -> Object File Comp. - map page says "spacebar" 12) cde screen lock and DCE. 13) dtcm weekly hour grid is wrong in printed output 14) Appointments in week view grid sometimes disappear 15) cde action doesn't terminate processes well 16) dtterm core dumps for Unicode locale. PHSS_12151: 1) Fix condition whereby a string copy of an environment variable can overflow the stack buffer causing various applications to core dump. 2) dtwm may hang at reading $HOME/.dt/types/dt.dt under LANG=ja_JP.eucJP 3) CDE builtin screen lock may fail to display the password prompt 4) CDE does not log bad login attempts to /var/adm/btmp. Defect Description: PHSS_16151: 1) Buffer overflow in dtmail. 2) Buffer overflow in rpc.ttdbserverd. PHSS_14596: 1) permissions problem with dtappgather. 2) permissions problem with dtprintinfo. PHSS_13725: 1) Re-release for 'dtappgather' PHSS_13404: 1) buffer overrun in dtaction. 2) permissions problem with dtappgather. 3) permissions problem with dtsearchpath. 4) Memory leak in dtlogin. 5) Race condition with xdm. 6) Buffer overflow problem with dtlock. PHSS_12588: 1) Helpview hangs when LANG = ja_JP.ecuJP 2) dtpad server hangs after opening and closing several times in ja_JP.SJIS 3) Non-C locales have problems integrating multiple dtwm.fp's (frontpanels) 4) dr_dt print unnecceassry warning regarding hpterm 5) dtcm dies when mailing reminders to more than one address 6) large calendar file,dtcm not being able to connect to the daemon process 7) rpc.ttdbserverd version mismatch caused by garbage collection 8) dthelpprint - &ohm does not show up when helpfile is printed. 9) dthelp does not handle &sigspace correctly 10) default action for dtmail drop action can destroy mailboxes 11) dtfile: cntl+spacebar -> Object File Comp. - map page says "spacebar" 12) cde screen lock and DCE. 13) dtcm weekly hour grid is wrong in printed output 14) Appointments in week view grid sometimes disappear 15) cde action doesn't terminate processes well 16) dtterm core dumps for Unicode locale. PHSS_12151: 1) Fix condition whereby a string copy of an environment variable can overflow the stack buffer causing various applications to core dump. 2) dtwm may hang at reading $HOME/.dt/types/dt.dt under LANG=ja_JP.eucJP 3) CDE builtin screen lock may fail to display the password prompt 4) CDE does not log bad login attempts to /var/adm/btmp. SR: 4701398297 4701398529 4701386417 4701386425 4701386433 5003345140 1653211110 4701364158 1653209429 1653210344 5003384859 5003379875 5003384412 5003363739 5003370296 4701369611 4701369629 5003390484 5003384149 4701373860 5003394981 5003393801 4701376855 Patch Files: /usr/contrib/bin/X11/dr_dt /usr/dt/appconfig/types/C/dtmail.dt /usr/dt/bin/dtaction /usr/dt/bin/dtappgather /usr/dt/bin/dtcm /usr/dt/bin/dtexec /usr/dt/bin/dtfile /usr/dt/bin/dthelpgen /usr/dt/bin/dthelpprint /usr/dt/bin/dthelptag /usr/dt/bin/dthelp_htag2 /usr/dt/bin/dthelp_htag1 /usr/dt/bin/dthelp_ctag1 /usr/dt/bin/dtlogin /usr/dt/bin/dtmail /usr/dt/bin/dtpad /usr/dt/bin/dtprintinfo /usr/dt/bin/dtsearchpath /usr/dt/bin/dtsession /usr/dt/bin/dtterm /usr/dt/bin/dtwm /usr/dt/bin/rpc.cmsd /usr/dt/bin/rpc.ttdbserver /usr/dt/bin/Xsession /usr/dt/lib/libDtHelp.1 /usr/dt/lib/libDtHelp.2 /usr/dt/lib/libDtSvc.1 /usr/dt/lib/libDtSvc.2 /usr/dt/lib/libDtTerm.1 /usr/dt/lib/libDtTerm.2 /usr/dt/lib/libDtWidget.1 /usr/dt/share/man/man1/dtfile.1 what(1) Output: /usr/dt/lib/libDtSvc.2: libDtSvc: $Revision: 1.5 $ X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Mon Oct 27 17:24:56 PST 1997) /usr/dt/lib/libDtHelp.2: libDtHelp: $Revision: 2.12 $ X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Thu Oct 9 17:08:28 PDT 1997) /usr/dt/lib/libDtTerm.2: DtTermPrimitiveWidget: $Revision: 1.196 $ libDtTerm: $Revision: 1.172 $ X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Fri Oct 10 10:30:17 PDT 1997) /usr/dt/lib/libDtHelp.1: libDtHelp: $Revision: 2.12 $ X Window System, Version 11 R6+ HP-UX B.10.20.00 Nov 1997 Patch Release (build date: Thu Oct 9 16:55:05 PDT 1997) /usr/dt/lib/libDtSvc.1: libDtSvc: $Revision: 1.5 $ X Window System, Version 11 R6+ HP-UX B.10.20.00 Nov 1997 Patch Release (build date: Mon Oct 27 17:19:18 PST 1997) /usr/dt/lib/libDtTerm.1: DtTermPrimitiveWidget: $Revision: 1.196 $ libDtTerm: $Revision: 1.172 $ X Window System, Version 11 R6+ HP-UX B.10.20.00 Nov 1997 Patch Release (build date: Fri Oct 10 10:30:02 PDT 1997) /usr/dt/lib/libDtWidget.1: libDtWidget: $Revision: 1.4 $ X Window System, Version 11 R6+ HP-UX B.10.20.00 Mar 1997 Patch Release (build date: Mon Feb 24 09:52:20 PST 1997) /usr/dt/bin/dtmail: X Window System, Version 11 R6+ HP-UX B.10.30.00 Aug ust 1998 Point Patch Release (build date: Tue Aug 11 04:14:40 MDT 1998) dtmail: $Revision: 1.3 $ /usr/dt/bin/dtprintinfo: X Window System, Version 11 R6+ HP-UX B.10.30.00 Mar 1998_A Patch Release (build date: Tue Mar 31 15:59:06 IST 1998) dtprintinfo: $Revision: 1.1 $ /usr/dt/bin/dtsession: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997_A Patch Release (build date: Wed Dec 10 10:12:31 PST 1997) dtsession: $Revision: 2.0 $ /usr/dt/bin/dtlogin: X Window System, Version 11 R6+ HP-UX B.10.30.00 R6 July 1997 Point Patch Release (build date: Tue Aug 19 10:47:52 PDT 1997) dtlogin: $Revision: 1.16 $ /usr/dt/bin/dtfile: X Window System, Version 11 R6+ HP-UX B.10.30.00 R6 July 1997 Point Patch Release (build date: Tue Sep 2 10:35:03 PDT 1997) dtfile: $Revision: 2.1 $ /usr/dt/bin/dtexec: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Mon Sep 22 15:22:38 PDT 1997) dtexec: $Revision: 1.4 $ /usr/dt/bin/dtpad: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Thu Sep 18 16:47:03 PDT 1997) dtpad: $Revision: 3.0 $ /usr/dt/bin/dthelpgen: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Thu Sep 18 16:58:29 PDT 1997) dthelpgen: $Revision: 1.2 $ /usr/dt/bin/dtwm: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Thu Sep 18 16:56:45 PDT 1997) dtwm: $Revision: 1.11 $ /usr/dt/bin/dthelpprint: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Thu Sep 18 17:55:43 PDT 1997) dthelpprint: $Revision: 1.3 $ /usr/dt/bin/dtcm: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Thu Oct 9 17:49:30 PDT 1997) dtcm: $Revision: 1.58 $ /usr/dt/bin/dthelp_ctag1: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Fri Sep 19 11:56:43 PDT 1997) dthelp_ctag1: $Revision: 1.1 $ /usr/dt/bin/dthelp_htag1: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Fri Sep 19 11:45:41 PDT 1997) dthelp_htag1: $Revision: 1.1 $ /usr/dt/bin/dthelp_htag2: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Fri Sep 19 12:06:38 PDT 1997) dthelp_htag2: $Revision: 1.1 $ /usr/dt/bin/dthelptag: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release dthelptag: $Revision: 1.24 $ /usr/dt/bin/rpc.cmsd: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Thu Oct 2 09:16:02 PDT 1997) rpc.cmsd: $Revision: 1.7 $ /usr/dt/bin/rpc.ttdbserver: X Window System, Version 11 R6+ HP-UX B.10.30.00 Aug ust 1998 Point Patch Release (build date: Tue Aug 11 07:38:45 MDT 1998) rpc.ttdbserver: $Revision: 1.1 $ /usr/dt/bin/dtterm: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Fri Oct 10 10:31:02 PDT 1997) dtterm: $Revision: 1.4 $ /usr/dt/bin/dtaction: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997_A Patch Release (build date: Thu Dec 4 10:25:57 PST 1997) dtaction: $Revision: 1.1 $ /usr/dt/bin/dtappgather: X Window System, Version 11 R6+ HP-UX B.10.30.00 Mar 1998_A Patch Release (build date: Wed Apr 1 10:35:14 IST 1998) dtappgather: $Revision: 1.1 $ /usr/dt/bin/dtsearchpath: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997_A Patch Release (build date: Tue Dec 9 20:32:15 PST 1997) dtsearchpath: $Revision: 1.1 $ /usr/dt/bin/Xsession: None. /usr/dt/appconfig/types/C/dtmail.dt: dtmail.dt 1.32 10 Aug 1994 /usr/dt/share/man/man1/dtfile.1: None. /usr/contrib/bin/X11/dr_dt: **UNSUPPORTED** $Revision: 1.2 $ cksum(1) Output: 2549488082 602112 /usr/dt/lib/libDtSvc.2 2748578307 806912 /usr/dt/lib/libDtHelp.2 968719481 421888 /usr/dt/lib/libDtTerm.2 291573778 794624 /usr/dt/lib/libDtHelp.1 1384320858 602112 /usr/dt/lib/libDtSvc.1 2981144047 417792 /usr/dt/lib/libDtTerm.1 2374816964 352256 /usr/dt/lib/libDtWidget.1 925873627 1011712 /usr/dt/bin/dtmail 1555217834 479232 /usr/dt/bin/dtprintinfo 3241532976 180224 /usr/dt/bin/dtsession 1329283573 192512 /usr/dt/bin/dtlogin 3039644017 737280 /usr/dt/bin/dtfile 2471161843 32768 /usr/dt/bin/dtexec 3655092264 114688 /usr/dt/bin/dtpad 2121954349 36864 /usr/dt/bin/dthelpgen 6931134 585728 /usr/dt/bin/dtwm 3316862496 61440 /usr/dt/bin/dthelpprint 833095584 778240 /usr/dt/bin/dtcm 778941978 360448 /usr/dt/bin/dthelp_ctag1 3638046818 397312 /usr/dt/bin/dthelp_htag1 623748298 299008 /usr/dt/bin/dthelp_htag2 1311010428 12335 /usr/dt/bin/dthelptag 1351572818 397312 /usr/dt/bin/rpc.cmsd 662608823 319488 /usr/dt/bin/rpc.ttdbserver 2667260696 53248 /usr/dt/bin/dtterm 1951381378 45056 /usr/dt/bin/dtaction 3494247178 106496 /usr/dt/bin/dtappgather 480303984 147456 /usr/dt/bin/dtsearchpath 177076278 13965 /usr/dt/bin/Xsession 4181762563 4335 /usr/dt/appconfig/types/C/dtmail.dt 1296860095 34309 /usr/dt/share/man/man1/dtfile.1 1490834315 41265 /usr/contrib/bin/X11/dr_dt Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: None Other Dependencies: None Supersedes: PHSS_12151 PHSS_12588 PHSS_13404 PHSS_13725 PHSS_14596 Equivalent Patches: None Patch Package Size: 10290 KBytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHSS_16151 5a. For a standalone system, run swinstall to install the patch: swinstall -x autoreboot=true -x match_target=true \ -s /tmp/PHSS_16151.depot 5b. For a homogeneous NFS Diskless cluster run swcluster on the server to install the patch on the server and the clients: swcluster -i -b This will invoke swcluster in the interactive mode and force all clients to be shut down. WARNING: All cluster clients must be shut down prior to the patch installation. Installing the patch while the clients are booted is unsupported and can lead to serious problems. The swcluster command will invoke an swinstall session in which you must specify: alternate root path - default is /export/shared_root/OS_700 source depot path - /tmp/PHSS_16151.depot To complete the installation, select the patch by choosing "Actions -> Match What Target Has" and then "Actions -> Install" from the Menubar. 5c. For a heterogeneous NFS Diskless cluster: - run swinstall on the server as in step 5a to install the patch on the cluster server. - run swcluster on the server as in step 5b to install the patch on the cluster clients. By default swinstall will archive the original software in /var/adm/sw/patch/PHSS_16151. If you do not wish to retain a copy of the original software, you can create an empty file named /var/adm/sw/patch/PATCH_NOSAVE. Warning: If this file exists when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. It is recommended that you move the PHSS_16151.text file to /var/adm/sw/patch for future reference. To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHSS_16151.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: Please note: The CDE environment must not be running when this patch is installed. If it is, you will receive warnings that text files are busy. SD will move these aside and place the new files in the appropriate location, but it is recommended that CDE first be shutdown prior to patch instalation. ALSO: The memory leak in dtlogin and the race condition with xdm will reappear in this patch as the dtlogin component has been replaced with the one that was in PHSS_12588 patch. This is being done due to the problems discovered with the later versions of dtlogin.