Disclaimer: 

Please note: Although OBSOLETED patches are available on SunSolve, Sun recommends using the most recent patches and the most recent revision of those patches. OBSOLETED patches do not include the latest bug fixes and/or product enhancements, and may require the installation of additional patches as a corrective measure.

Status: OBSOLETE

Patch Id: 118908-04

***********************************************************************
READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT
FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU
AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE
TERMS, PROMPTLY DESTROY THE UNUSED SOFTWARE.
***********************************************************************

Summary: Obsoleted by: 118908-05 X11 6.7.0_x86: Xorg patch

Date:  Jan/17/2008

Installation Requirements:

NA

Solaris Release: 9_x86

Sun OS Release: 5.9_x86

Unbundled Product: X11

Unbundled Release: 6.7.0_x86

Xref: 

Topic: 

Relevant Architecture: i386

BugId's fixed with this patch:

6202551 6207299 6316438 6504408 6526192 6635721 6635727 6635732 6635740 6636174 6640505 6642762

Changes incorporated in this version:

6635732 6635740 6640505 6636174 6635727 6635721 6642762

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch: 

Required Patches:

Obsoleted by:

Files Included in this Patch: 

/usr/X11/bin/Xorg
/usr/X11/lib/modules/drivers/nv_drv.so
/usr/X11/lib/modules/extensions/libdbe.so
/usr/X11/lib/modules/extensions/libextmod.so
/usr/X11/lib/modules/libafb.so
/usr/X11/lib/modules/libcfb.so
/usr/X11/lib/modules/libcfb16.so
/usr/X11/lib/modules/libcfb24.so
/usr/X11/lib/modules/libcfb32.so
/usr/X11/lib/modules/libfb.so
/usr/X11/lib/modules/libmfb.so
/usr/X11/lib/modules/libxaa.so
/usr/X11/lib/modules/libxf4bpp.so
/usr/X11/share/man/man7/nv.7

Problem Description: 

6642762 [X.Org bug 13706] file existence disclosure vulnerability [CVE-2007-5958]
6635732 [X.Org Bug 13519] EVI Extension Integer Overflow Vulnerability
6635740 [X.Org Bug 13520] MIT-SHM Extension Integer Overflow Vulnerability
6640505 [X.Org Bug 13526] PCF font parser vulnerability
6636174 [X.Org Bug 13524] XFree86-MISC Extension Invalid Array Index Vulnerability
6635727 [X.Org Bug 13523] TOG-CUP Extension Memory Corruption Vulnerability
6635721 [X.Org Bug 13522] XInput Extension Memory Corruption Vulnerability
 
(from 118908-03)
 
6504408 [X.Org Bug 9267] multiple integer overflows in XRender and DBE extensions
6526192 [X.Org Bug #10001] *Xorg* XC-MISC Extension ProcXCMiscGetXIDList Memory Corruption Vulnerability
 
(from 118908-02)
 
6316438 [CAN-2005-2495] Integer overflow in Xorg
 
(from 118908-01)
 
6202551 Xorg doesn't export shm functions to drivers
6207299 [Xorg bug #1985] sync to 12/08/04 version of Nvidia driver

Revision History: 

118908-02 118908-01 118908-03

Patch Installation Instructions: 

-------------------------------- 
Refer to the man pages for instructions on using 'patchadd' and 'patchrm'
scripts provided with Solaris.  Any other special or non-generic
installation instructions should be described below as special
instructions.  The following example installs a patch to a standalone
machine:
 
	example# patchadd /var/spool/patch/104945-02
 
The following example removes a patch from a standalone system:
 
	example# patchrm 104945-02
 
For additional examples please see the appropriate man pages.

Special Install Instructions: 

----------------------------- 
None.

README -- Last modified date:  Monday, April 28, 2008