<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">Patch-ID# 103882-15
Keywords: security password xsun command keyserv helpviewer Dtlogin
Synopsis: CDE 1.0.2: dtlogin patch
Date: Feb/09/00

Solaris Release: 2.4 2.5 2.5.1

SunOS Release: 5.4 5.5 5.5.1

Unbundled Product: CDE

Unbundled Release: 1.0.2

Relevant Architectures: sparc 

Xref: This patch available for x86 as patch 103886

BugId's fixed with this patch: 1205631 1253624 1258143 4005735 4067366 4095696 4080371 1249240 4148983 4139823 4149575 4150575 4212342 4248888 4237848 4275258 4276326

Changes incorporated in this version: 4276326

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

	/usr/dt/bin/dtlogin
	/usr/dt/config/dtlogin.rc

Problem Description:

4276326 Dtlogin patch 107180-12 won't allow connections to indirect CDE_login_

(from 103882-14)
4275258 dtlogin X-server can not be started

(from 103882-13)
4237848 Action 'Return to Local Host' sometimes does not work fine in dtl

(from 103882-12)
4248888 Dtlogin sometimes ignores all child death signals
 
(from 103882-11)
4149575 tt_open() in helpviewer does not work under that a system has 2 ip ports
4150575 dtlogin fails to set user authorization correctly when there are more than 64 vi
4212342 Dtpad action fails with tooltalk error

(from 103882-10)
4139823 After installing dtlogin patch 103882-07 no key is set in keyserv

(from 103882-09)
4148983 Cannot start command line login

(from 103882-08)
1249240 /var/dt and a few subdirs are world writable
4080371 dtlogin tmpfile vulnerability

(from 103882-07)
4095696  Xsun -query &lt;localhost&gt; doesn't work with Solaris 2.5.1

(from 103882-06)
synced up revision to match the sparc version

(from 103882-05)
4067366 Core file from dtlogin expose user's unencrypted passwd.

(from 103882-04)
repacked for patch install problem

(from 103882-03)
4005735 CDE 1.1 dtlogin on Solaris 2.4 (and 1.0.x patch) has serious
security hole.

(from 103882-02)
1205631 Dtlogin failed to detect an expired account.
1253624 Keyboard lockup fix for console logins.

(from 103882-01)
1258143 Authenticate NIS+ passwords longer than 8 characters.


Patch Installation Instructions: 
-------------------------------- 
Refer to the Install.info file for instructions on using the
generic 'installpatch' and 'backoutpatch' scripts provided with
each patch.  Any other special or non-generic installation
instructions should be described below as special instructions.


Special Install Instructions: 
----------------------------- 
None.
</pre></body></html>