Patch-ID# 105704-07
Keywords: security dtlogin segv core dump memory PAM garbage broadcast authorization
Synopsis: CDE 1.2_x86: dtlogin patch
Date: Sep/22/98

Solaris Release: 2.6_x86

SunOS Release: 5.6_x86

Unbundled Product: CDE

Unbundled Release: 1.2_x86

Relevant Architectures: i386

Xref: This patch available for sparc as patch 105703

BugId's fixed with this patch: 4093449 4091713 4093361 4143011 4150575 4094335 4080371 4148983

Changes incorporated in this version: 4148983

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch:

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

	/usr/dt/bin/dtlogin
        /usr/dt/bin/dtchooser
        /usr/dt/bin/dtgreet


Problem Description: 

4148983 Cannot start command line login
4080371 dtlogin tmpfile vulnerability

(from 105704-05)
4150575 dtlogin fails to set user authorization correctly when there are
            more than 64 virtual interfaces
4094335 dtlogin cannot return to normal behavior after dtchooser

(from 105704-04)
4143011 Contents of /var/dt/Xerrors displays garbage instead of useful 
            information.

(from 105704-03)
4093361 environment variables don't get set through pam_putenv()

(from 105704-02)
4091713 CDE-PAM interaction on sol 2.6.

(from 105704-01)
4093449 dtlogin core dumps due to memory freed twice in
            manage().

Patch Installation Instructions: 
-------------------------------- 
Generic 'installpatch' and 'backoutpatch' scripts are provided
within each patch package with instructions appended to this section.
Other specific or unique installation instructions may also be
necessary and should be described below.

Special Install Instructions: 
----------------------------- 

None.
