Patch Name: PHSS_13404 Patch Description: s700_800 10.30 CDE Runtime Dec97 Cumulative Patch Creation Date: 97/12/17 Post Date: 97/12/30 Warning: 98/01/07 - This Non-Critical Warning has been issued by HP. - After this patch is installed, when a user runs a CDE session and their $HOME directory is not an NFS mount, then a $HOME/var directory is created that is owned by root. The user cannot remove the directory. - To avoid the situation, the patch should be removed from all systems on which is has been installed. To remove the erroneous directory, the superuser must change the ownership and permissions of the directory or remove the directory. The $HOME/var directory is not required. - A new patch will be released as soon as possible to correct the problem introduced by this patch. In the meantime, PHSS_12588 will be re-released until the replacement patch is available. Hardware Platforms - OS Releases: s700: 10.30 s800: 10.30 Products: N/A Filesets: CDE.CDE-MIN CDE.CDE-RUN CDE.CDE-SHLIBS CDE.CDE-HELP-RUN CDE.CDE-DTTERM CDE.CDE-ENG-A-MAN Automatic Reboot?: No Status: General Superseded With Warnings Critical: No Path Name: /hp-ux_patches/s700_800/10.X/PHSS_13404 Symptoms: PHSS_13404: 1) buffer overrun in dtaction. 2) permissions problem with dtappgather. 3) permissions problem with dtsearchpath. 4) Memory leak in dtlogin. 5) Race condition with xdm. 6) Buffer overflow problem with dtlock. PHSS_12588: 1) Helpview hangs when LANG = ja_JP.ecuJP 2) dtpad server hangs after opening and closing several times in ja_JP.SJIS 3) Non-C locales have problems integrating multiple dtwm.fp's (frontpanels) 4) dr_dt print unnecceassry warning regarding hpterm 5) dtcm dies when mailing reminders to more than one address 6) large calendar file,dtcm not being able to connect to the daemon process 7) rpc.ttdbserverd version mismatch caused by garbage collection 8) dthelpprint - &ohm does not show up when helpfile is printed. 9) dthelp does not handle &sigspace correctly 10) default action for dtmail drop action can destroy mailboxes 11) dtfile: cntl+spacebar -> Object File Comp. - map page says "spacebar" 12) cde screen lock and DCE. 13) dtcm weekly hour grid is wrong in printed output 14) Appointments in week view grid sometimes disappear 15) cde action doesn't terminate processes well 16) dtterm core dumps for Unicode locale. PHSS_12151: 1) Fix condition whereby a string copy of an environment variable can overflow the stack buffer causing various applications to core dump. 2) dtwm may hang at reading $HOME/.dt/types/dt.dt under LANG=ja_JP.eucJP 3) CDE builtin screen lock may fail to display the password prompt 4) CDE does not log bad login attempts to /var/adm/btmp. Defect Description: PHSS_13404: 1) buffer overrun in dtaction. 2) permissions problem with dtappgather. 3) permissions problem with dtsearchpath. 4) Memory leak in dtlogin. 5) Race condition with xdm. 6) Buffer overflow problem with dtlock. PHSS_12588: 1) Helpview hangs when LANG = ja_JP.ecuJP 2) dtpad server hangs after opening and closing several times in ja_JP.SJIS 3) Non-C locales have problems integrating multiple dtwm.fp's (frontpanels) 4) dr_dt print unnecceassry warning regarding hpterm 5) dtcm dies when mailing reminders to more than one address 6) large calendar file,dtcm not being able to connect to the daemon process 7) rpc.ttdbserverd version mismatch caused by garbage collection 8) dthelpprint - &ohm does not show up when helpfile is printed. 9) dthelp does not handle &sigspace correctly 10) default action for dtmail drop action can destroy mailboxes 11) dtfile: cntl+spacebar -> Object File Comp. - map page says "spacebar" 12) cde screen lock and DCE. 13) dtcm weekly hour grid is wrong in printed output 14) Appointments in week view grid sometimes disappear 15) cde action doesn't terminate processes well 16) dtterm core dumps for Unicode locale. PHSS_12151: 1) Fix condition whereby a string copy of an environment variable can overflow the stack buffer causing various applications to core dump. 2) dtwm may hang at reading $HOME/.dt/types/dt.dt under LANG=ja_JP.eucJP 3) CDE builtin screen lock may fail to display the password prompt 4) CDE does not log bad login attempts to /var/adm/btmp. SR: 5003345140 1653211110 4701364158 1653209429 1653210344 5003384859 5003379875 5003384412 5003363739 5003370296 4701369611 4701369629 5003390484 5003384149 4701373860 5003394981 5003393801 4701376855 Patch Files: /usr/contrib/bin/X11/dr_dt /usr/dt/appconfig/types/C/dtmail.dt /usr/dt/bin/dtaction /usr/dt/bin/dtappgather /usr/dt/bin/dtcm /usr/dt/bin/dtexec /usr/dt/bin/dtfile /usr/dt/bin/dthelpgen /usr/dt/bin/dthelpprint /usr/dt/bin/dthelptag /usr/dt/bin/dthelp_htag2 /usr/dt/bin/dthelp_htag1 /usr/dt/bin/dthelp_ctag1 /usr/dt/bin/dtlogin /usr/dt/bin/dtmail /usr/dt/bin/dtpad /usr/dt/bin/dtprintinfo /usr/dt/bin/dtsearchpath /usr/dt/bin/dtsession /usr/dt/bin/dtterm /usr/dt/bin/dtwm /usr/dt/bin/rpc.cmsd /usr/dt/bin/rpc.ttdbserver /usr/dt/bin/Xsession /usr/dt/lib/libDtHelp.1 /usr/dt/lib/libDtHelp.2 /usr/dt/lib/libDtSvc.1 /usr/dt/lib/libDtSvc.2 /usr/dt/lib/libDtTerm.1 /usr/dt/lib/libDtTerm.2 /usr/dt/lib/libDtWidget.1 /usr/dt/share/man/man1/dtfile.1 what(1) Output: /usr/dt/lib/libDtSvc.2: libDtSvc: $Revision: 1.5 $ X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Mon Oct 27 17:24:56 PST 1997) /usr/dt/lib/libDtHelp.2: libDtHelp: $Revision: 2.12 $ X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Thu Oct 9 17:08:28 PDT 1997) /usr/dt/lib/libDtTerm.2: DtTermPrimitiveWidget: $Revision: 1.196 $ libDtTerm: $Revision: 1.172 $ X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Fri Oct 10 10:30:17 PDT 1997) /usr/dt/lib/libDtHelp.1: libDtHelp: $Revision: 2.12 $ X Window System, Version 11 R6+ HP-UX B.10.20.00 Nov 1997 Patch Release (build date: Thu Oct 9 16:55:05 PDT 1997) /usr/dt/lib/libDtSvc.1: libDtSvc: $Revision: 1.5 $ X Window System, Version 11 R6+ HP-UX B.10.20.00 Nov 1997 Patch Release (build date: Mon Oct 27 17:19:18 PST 1997) /usr/dt/lib/libDtTerm.1: DtTermPrimitiveWidget: $Revision: 1.196 $ libDtTerm: $Revision: 1.172 $ X Window System, Version 11 R6+ HP-UX B.10.20.00 Nov 1997 Patch Release (build date: Fri Oct 10 10:30:02 PDT 1997) /usr/dt/lib/libDtWidget.1: libDtWidget: $Revision: 1.4 $ X Window System, Version 11 R6+ HP-UX B.10.20.00 Mar 1997 Patch Release (build date: Mon Feb 24 09:52:20 PST 1997) /usr/dt/bin/dtmail: X Window System, Version 11 R6+ HP-UX B.10.30.00 R6 July 1997 Point Patch Release (build date: Tue Aug 12 18:37:53 PDT 1997) dtmail: $Revision: 1.3 $ /usr/dt/bin/dtprintinfo: X Window System, Version 11 R6+ HP-UX B.10.30.00 R6 July 1997 Point Patch Release (build date: Tue Aug 12 19:26:33 PDT 1997) dtprintinfo: $Revision: 1.1 $ /usr/dt/bin/dtsession: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997_A Patch Release (build date: Wed Dec 10 10:12:31 PST 1997) dtsession: $Revision: 2.0 $ /usr/dt/bin/dtlogin: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997_A Patch Release (build date: Thu Dec 4 10:03:55 PST 1997) dtlogin: $Revision: 1.16 $ /usr/dt/bin/dtfile: X Window System, Version 11 R6+ HP-UX B.10.30.00 R6 July 1997 Point Patch Release (build date: Tue Sep 2 10:35:03 PDT 1997) dtfile: $Revision: 2.1 $ /usr/dt/bin/dtexec: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Mon Sep 22 15:22:38 PDT 1997) dtexec: $Revision: 1.4 $ /usr/dt/bin/dtpad: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Thu Sep 18 16:47:03 PDT 1997) dtpad: $Revision: 3.0 $ /usr/dt/bin/dthelpgen: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Thu Sep 18 16:58:29 PDT 1997) dthelpgen: $Revision: 1.2 $ /usr/dt/bin/dtwm: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Thu Sep 18 16:56:45 PDT 1997) dtwm: $Revision: 1.11 $ /usr/dt/bin/dthelpprint: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Thu Sep 18 17:55:43 PDT 1997) dthelpprint: $Revision: 1.3 $ /usr/dt/bin/dtcm: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Thu Oct 9 17:49:30 PDT 1997) dtcm: $Revision: 1.58 $ /usr/dt/bin/dthelp_ctag1: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Fri Sep 19 11:56:43 PDT 1997) dthelp_ctag1: $Revision: 1.1 $ /usr/dt/bin/dthelp_htag1: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Fri Sep 19 11:45:41 PDT 1997) dthelp_htag1: $Revision: 1.1 $ /usr/dt/bin/dthelp_htag2: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Fri Sep 19 12:06:38 PDT 1997) dthelp_htag2: $Revision: 1.1 $ /usr/dt/bin/dthelptag: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release dthelptag: $Revision: 1.24 $ /usr/dt/bin/rpc.cmsd: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Thu Oct 2 09:16:02 PDT 1997) rpc.cmsd: $Revision: 1.7 $ /usr/dt/bin/rpc.ttdbserver: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Thu Oct 9 16:44:42 PDT 1997) rpc.ttdbserver: $Revision: 1.1 $ /usr/dt/bin/dtterm: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997 Patch Release (build date: Fri Oct 10 10:31:02 PDT 1997) dtterm: $Revision: 1.4 $ /usr/dt/bin/dtaction: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997_A Patch Release (build date: Thu Dec 4 10:25:57 PST 1997) dtaction: $Revision: 1.1 $ /usr/dt/bin/dtappgather: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997_A Patch Release (build date: Tue Dec 9 20:45:02 PST 1997) dtappgather: $Revision: 1.1 $ /usr/dt/bin/dtsearchpath: X Window System, Version 11 R6+ HP-UX B.10.30.00 Nov 1997_A Patch Release (build date: Tue Dec 9 20:32:15 PST 1997) dtsearchpath: $Revision: 1.1 $ /usr/dt/bin/Xsession: None /usr/dt/appconfig/types/C/dtmail.dt: dtmail.dt 1.32 10 Aug 1994 /usr/dt/share/man/man1/dtfile.1: None /usr/contrib/bin/X11/dr_dt: **UNSUPPORTED** $Revision: 1.2 $ cksum(1) Output: 2549488082 602112 /usr/dt/lib/libDtSvc.2 2748578307 806912 /usr/dt/lib/libDtHelp.2 968719481 421888 /usr/dt/lib/libDtTerm.2 291573778 794624 /usr/dt/lib/libDtHelp.1 1384320858 602112 /usr/dt/lib/libDtSvc.1 2981144047 417792 /usr/dt/lib/libDtTerm.1 2374816964 352256 /usr/dt/lib/libDtWidget.1 864909029 1007616 /usr/dt/bin/dtmail 2952622166 479232 /usr/dt/bin/dtprintinfo 3241532976 180224 /usr/dt/bin/dtsession 4201254336 192512 /usr/dt/bin/dtlogin 3039644017 737280 /usr/dt/bin/dtfile 2471161843 32768 /usr/dt/bin/dtexec 3655092264 114688 /usr/dt/bin/dtpad 2121954349 36864 /usr/dt/bin/dthelpgen 6931134 585728 /usr/dt/bin/dtwm 3316862496 61440 /usr/dt/bin/dthelpprint 833095584 778240 /usr/dt/bin/dtcm 778941978 360448 /usr/dt/bin/dthelp_ctag1 3638046818 397312 /usr/dt/bin/dthelp_htag1 623748298 299008 /usr/dt/bin/dthelp_htag2 1311010428 12335 /usr/dt/bin/dthelptag 1351572818 397312 /usr/dt/bin/rpc.cmsd 132094369 319488 /usr/dt/bin/rpc.ttdbserver 2667260696 53248 /usr/dt/bin/dtterm 1951381378 45056 /usr/dt/bin/dtaction 1146695108 106496 /usr/dt/bin/dtappgather 480303984 147456 /usr/dt/bin/dtsearchpath 177076278 13965 /usr/dt/bin/Xsession 4181762563 4335 /usr/dt/appconfig/types/C/dtmail.dt 1296860095 34309 /usr/dt/share/man/man1/dtfile.1 1490834315 41265 /usr/contrib/bin/X11/dr_dt Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: None Other Dependencies: None Supersedes: PHSS_12151 PHSS_12588 Equivalent Patches: None Patch Package Size: 10290 KBytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHSS_13404 5a. For a standalone system, run swinstall to install the patch: swinstall -x autoreboot=true -x match_target=true \ -s /tmp/PHSS_13404.depot 5b. For a homogeneous NFS Diskless cluster run swcluster on the server to install the patch on the server and the clients: swcluster -i -b This will invoke swcluster in the interactive mode and force all clients to be shut down. WARNING: All cluster clients must be shut down prior to the patch installation. Installing the patch while the clients are booted is unsupported and can lead to serious problems. The swcluster command will invoke an swinstall session in which you must specify: alternate root path - default is /export/shared_root/OS_700 source depot path - /tmp/PHSS_13404.depot To complete the installation, select the patch by choosing "Actions -> Match What Target Has" and then "Actions -> Install" from the Menubar. 5c. For a heterogeneous NFS Diskless cluster: - run swinstall on the server as in step 5a to install the patch on the cluster server. - run swcluster on the server as in step 5b to install the patch on the cluster clients. By default swinstall will archive the original software in /var/adm/sw/patch/PHSS_13404. If you do not wish to retain a copy of the original software, you can create an empty file named /var/adm/sw/patch/PATCH_NOSAVE. Warning: If this file exists when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. It is recommended that you move the PHSS_13404.text file to /var/adm/sw/patch for future reference. To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHSS_13404.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: Please note: The CDE environment must not be running when this patch is installed. If it is, you will receive warnings that text files are busy. SD will move these aside and place the new files in the appropriate location, but it is recommended that CDE first be shutdown prior to patch instalation.