SGI Logo
 
 

Patch 2987 : security fixes for dmedia : [IRIX 6.2]
INDEX

  • Relations
  • Release Notes
  • Inst Subsystem Requirements
  • Inst Subsystem Checksums
  • Inst Subsystem File Listings
  • Download Patch


    RELATIONS

    This patch replaces the following patches:
    1218, 2196, 2243, 2564

    This patch has no known incompatiblities with other patches.

    This patch fixes the following bugs:
    353846 - Confidence test has hard coded messages.
    359193 - Gray scale monitor confidence test contains artifacts on Extreme
                    and XL gf

    454324 - Monitor confidence test display is dithered
    475609 - Monitor greyscale confidence test is dithered
    498533 - cdman/datman programs have exploitable security vulnerability
    498545 - setuid cdplayer program have exploitable security vulnerability
    506557 - setuid cdrom confidence test has a security hole
    537494 - Buffer overrun vulnerabilities in datman command


    RELEASE NOTES

    1. Patch SG0002987 Release Note

           This release note describes patch SG0002987 for IRIX 6.2.
    
           Patch SG0002987 replaces patches(es) SG0001218, SG0002196,
           SG0002243, and SG0002564.
    
    
    1.1 Supported Hardware Platforms
           This patch contains bug fixes for All platforms.
    
    
    1.2 Supported Software Platforms
           This patch contains bug fixes for IRIX 6.2 (1233007732).
           The software cannot be installed on other configurations.
    
    
    1.3 Bugs Fixed by Patch SG0002987
           This patch contains fixes for the following bugs in IRIX
           6.2.  Bug numbers from Silicon Graphics bug tracking system
           are included for reference.
    
              o This patch replaces SG0002564 to allow installation on
                6.2 and 6.2 R10k systems.
    
    
    1.4 Bugs Fixed by Patch SG0002564
              o Internationalization support in the desktop confidence
                tests (Bug #353846).
    
              o Fix dithering problem in the gray scale monitor
                confidence test (Bugs #359193, #454324, #475609).
    
              o Security bug fix for the cdman and datman commands (Bug
                #498533).
    
              o Security bug fix for the cdplayer command (Bug
                #498545).
    
              o Security bug fix for the cdrom confidence test (Bug
                #506557).
    
              o Security bug fix for the datman command (Bug #537494).
    
    
    1.5 Subsystems Included in Patch SG0002987
           This patch release includes these subsystems:
    
              o patchSG0002987.desktop_eoe_sw.Confidence
    
    
              o patchSG0002987.dmedia_eoe_sw.tools
    
              o patchSG0002987.eoe_sw.cdrom
    
              o patchSG0002987.eoe_sw.optinput
    
    
    1.6 Installation Instructions
           Because you want to install only the patches for problems
           you have encountered, patch software is not installed by
           default.  After reading the descriptions of the bugs fixed
           in this patch (see Section 1.3), determine the patches that
           meet your specific needs.
    
           If, after reading Sections 1.1 and 1.2 of these release
           notes, you are unsure whether your hardware and software
           meet the requirements for installing a particular patch, run
           inst.  The inst program does not allow you to install
           patches that are incompatible with your hardware or
           software.
    
           Patch software is installed like any other Silicon Graphics
           software product.  Follow the instructions in your Software
           Installation Administrator's Guide to bring up the miniroot
           form of the software installation tools.
    
           Follow these steps to select a patch for installation:
    
             1.  At the Inst> prompt, type
    
                 install patchSGxxxxxxx
    
                 where xxxxxxx is the patch number.
    
             2.  Initiate the installation sequence. Type
    
                 Inst> go
    
             3.  You may find that two patches have been marked as
                 incompatible.  (The installation tools reject an
                 installation request if an incompatibility is
                 detected.)  If this occurs, you must deselect one of
                 the patches.
    
                 Inst> keep patchSGxxxxxxx
    
                 where xxxxxxx is the patch number.
    
             4.  After completing the installation process, exit the
                 inst program by typing
    
    
                 Inst> quit
    
    
    1.7 Patch Removal Instructions
           To remove a patch, use the versions remove command as you
           would for any other software subsystem.  The removal process
           reinstates the original version of software unless you have
           specifically removed the patch history from your system.
    
           versions remove patchSGxxxxxxx
    
           where xxxxxxx is the patch number.
    
           To keep a patch but increase your disk space, use the
           versions removehist command to remove the patch history.
    
           versions removehist patchSGxxxxxxx
    
           where xxxxxxx is the patch number.
    
    
    1.8 Known Problems
    
    
    INST SUBSYSTEM REQUIREMENTS
    No Requirements Information Available.
    

    INST SUBSYSTEM CHECKSUMS

    These checksums help to provide a 'signature' for the patch inst image which can be used to authenticate other inst images. You can obtain this kind of output by running sum -r on the image (from the command line):

    38050      6   patchSG0002987
    15389    595   patchSG0002987.desktop_eoe_sw
    46712    750   patchSG0002987.dmedia_eoe_sw
    55710    253   patchSG0002987.eoe_sw
    44364      8   patchSG0002987.idb
    

    INST SUBSYSTEM FILE LISTINGS

    The following lists the files which get installed from each subsystem in the patch:

    patchSG0002987.desktop_eoe_sw.Confidence
    usr/lib/X11/app-defaults/AudioTest
    usr/lib/X11/app-defaults/Confidence
    usr/lib/X11/app-defaults/FloppyTest
    usr/lib/X11/app-defaults/KeyboardTest
    usr/sbin/Confidence/audio
    usr/sbin/Confidence/cdrom
    usr/sbin/Confidence/cdrom
    usr/sbin/Confidence/floppy
    usr/sbin/Confidence/keyboard
    usr/sbin/Confidence/monitor
    usr/sbin/Confidence/mouse
    usr/sbin/Confidence/presenter
    usr/sbin/Confidence/tape
    usr/sbin/confidence

    patchSG0002987.dmedia_eoe_sw.tools
    usr/sbin/datman

    patchSG0002987.eoe_sw.cdrom
    usr/bin/X11/cdplayer
    usr/relnotes/patchSG0002987/TC
    usr/relnotes/patchSG0002987/ch1.z

    patchSG0002987.eoe_sw.optinput
    usr/sbin/Confidence/dial_buttons
    usr/sbin/Confidence/spaceball
    usr/sbin/Confidence/tablet


    DOWNLOAD PATCH
    Download Server File Name Date Added Size Download
    download.sgi.com patchSG0002987.tar 16-Mar-1998 824 K FTP HTTP Add to download cart 
    download.sgi.com patchSG0002987.tardist 16-Mar-1998 824 K FTP HTTP
     
    FTP = download using FTP protocol
    HTTP = download using HTTP protocol
    Add to shopping list= store in your basket for downloading later
  •  


    Document Id: 20021117071548-IRIXPatch-1213