Patch-ID# 107893-02
Keywords: security ttsession heavy load hang
Synopsis: OpenWindows 3.6.1: Tooltalk patch
Date: Sep/27/99

Solaris Release: 7

SunOS Release: 5.7

Unbundled Product: OpenWindows

Unbundled Release: 3.6.1

Relevant Architectures: sparc

Xref: This patch is available for x86 as patch 107894

BugId's fixed with this patch: 4229531 4153078 4204015 4260867 

Changes incorporated in this version: 4204015 4260867 

Patches accumulated and obsoleted by this patch: 108122-01 108237-01

Patches which conflict with this patch:

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

        /usr/openwin/lib/libtt.so.2
	/usr/openwin/lib/sparcv9/libtt.so.2
	/usr/openwin/bin/ttsession
	/usr/openwin/bin/rpc.ttdbserverd

Problem Description: 

(from 108237-01)
4260867 tooltalk apps vulnerable to attack through TT_SESSION env. variab

(from 108122-01)
4204015 dbserver SEGVs when rpc function 15 is called with garbage

(from 107893-01)
4229531 ttsession fails under heavy system load
4153078 CDE dtlogin hangs sometimes due to a ttsession hang


Patch Installation Instructions: 
-------------------------------- 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.

For Solaris 7 release, refer to the man pages for instructions on
using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:

	example# patchadd /var/spool/patch/104945-02

The following example removes a patch from a standalone system:

	example# patchrm 104945-02

For additional examples please see the appropriate man pages.


Special Install Instructions: 
----------------------------- 
None.
