<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">OBSOLETE Patch-ID# 105496-08
Keywords: security libtt rpc.ttdbserverd core leak tt_open 1.1.2 ttsession
Synopsis: OBSOLETED by WITHDRAWN
Date: Dec/24/99

*************************************************************************

   This patch is WITHDRAWN because it caused ToolTalk to prohibit
   users to log into CDE.   The replacement patch is available within
   two weeks.

*************************************************************************

Solaris Release: 2.5.1_x86

SunOS Release: 5.5.1_x86

Unbundled Product: OpenWindows

Unbundled Release: 3.5.1_x86

Xref: This patch is available for SPARC as patch 104489

Relevant Architectures: i386

BugId's fixed with this patch: 1261051 1203452 1234927 4100289 4141128 4164808 4153078 4260867 4278349 

Changes incorporated in this version: 4278349 

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: WITHDRAWN on Jan/05/00

Files included with this patch:

    /usr/openwin/bin/rpc.ttdbserverd
    /usr/openwin/bin/tt_type_comp
    /usr/openwin/bin/ttce2xdr
    /usr/openwin/bin/ttcp
    /usr/openwin/bin/ttdbck
    /usr/openwin/bin/ttmv
    /usr/openwin/bin/ttrm
    /usr/openwin/bin/ttrmdir
    /usr/openwin/bin/ttsession
    /usr/openwin/bin/tttar
    /usr/openwin/bin/tttrace
    /usr/openwin/lib/libtt.so.2
    /usr/openwin/share/include/desktop/tt_c.h 
    /usr/openwin/share/include/desktop/ttdnd.h 
    /usr/openwin/share/include/desktop/tttk.h
    /usr/openwin/bin/ttsnoop
    /usr/openwin/bin/ttauth
    /usr/openwin/share/man/man1/ttauth.1

Problem Description: 

4278349 ToolTalk authentication needs to be enhanced

(from 105496-07)
4260867 tooltalk apps vulnerable to attack through TT_SESSION env. variab

(from 105496-06)
4153078 CDE dtlogin hangs sometimes due to a ttsession hang

(from 105496-05)
4164808 rpc.ttdbserver has buffer overflow problems

(from 105496-04)
patch 105496-04 was built incorrectly this new version of the patch corrects 
that problem.

(from 105496-03)
4141128 tt_session_prop hangs in tooltalk version 1.3

(from 105496-02)
4100289 tooltalk display problem between tooltalk revs 1.1.2 and 1.3
1261051 rpc.ttdbserverd core dumps in libtt, findBestMountPoint()
1203452 Tooltalk clients always started on screen 0.

(from 105496-01)
1234927 tooltalk memory leak in tt_open/tt_close


Patch Installation Instructions:
--------------------------------
Refer to the Install.info file within the patch for instructions on
using the generic 'installpatch' and 'backoutpatch' scripts provided
with each patch. Any other special or non-generic installation
instructions should be described below.


Special Install Instructions:
-----------------------------
After installing this patch, all ToolTalk sessions should be restarted.

This patch upgrades ToolTalk from version 1.2.1 to version 1.3.  This 
is evidenced by running /usr/openwin/bin/ttsession with the -v option.  
It will report that both ttsession and libtt are v1.3.
</pre></body></html>