Patch-ID# 107894-05
Keywords: security ttsession heavy load hang authentication lofs
Synopsis: OpenWindows 3.6.1_x86: Tooltalk patch
Date: Jan/04/00

Solaris Release: 7_x86

SunOS Release: 5.7_x86

Unbundled Product: OpenWindows

Unbundled Release: 3.6.1_x86

Relevant Architectures: i386

Xref: This patch is available for SPARC as patch 107893

BugId's fixed with this patch: 4229531 4153078 4260867 4204015 4278349 4162766 4272834

Changes incorporated in this version: 4162766 4272834

Patches accumulated and obsoleted by this patch: 108123-01 108238-01

Patches which conflict with this patch:

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

        /usr/openwin/lib/libtt.so.2
        /usr/openwin/bin/ttsession
        /usr/openwin/bin/rpc.ttdbserverd


Problem Description: 

4162766 tooltalk does not resolve lofs the way user expects it to
4272834 Using des authentication as the default ttsession breaks applications

(from 107894-04)
4278349 ToolTalk authentication needs to be enhanced (reworked) 

(from 107894-03)
4278349 ToolTalk authentication needs to be enhanced

(from 107894-02)
4260867 tooltalk apps vulnerable to attack through TT_SESSION env. variab
4204015 dbserver SEGVs when rpc function 15 is called with garbage

(from 107894-01)
4229531 ttsession fails under heavy system load
4153078 CDE dtlogin hangs sometimes due to a ttsession hang


Patch Installation Instructions: 
-------------------------------- 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.

For Solaris 7 release, refer to the man pages for instructions on
using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:

	example# patchadd /var/spool/patch/104945-02

The following example removes a patch from a standalone system:

	example# patchrm 104945-02

For additional examples please see the appropriate man pages.


Special Install Instructions: 
----------------------------- 
None.
