Patch-ID# 107115-05 Keywords: security printd control core lpstat queue buffer lpsched Synopsis: SunOS 5.7: LP patch Date: Jul/31/00 Solaris Release: 7 SunOS Release: 5.7 Unbundled Product: Unbundled Release: Xref: This patch available for x86 as patch 107116 Topic: SunOS 5.7: LP patch NOTE: Refer to Special Install Instructions section for IMPORTANT specific information on this patch. BugId's fixed with this patch: 4033371 4057917 4085677 4093648 4095132 4129917 4131103 4156106 4165358 4167195 4167443 4179341 4184007 4186811 4188167 4189161 4200078 4207894 4213872 4215944 4217305 4218904 4220608 4235953 4236024 4239765 4240238 4251153 4260829 4263321 4263391 4264235 4265529 4273437 4281487 4302705 4310991 4314312 4334568 Changes incorporated in this version: 4334568 Relevant Architectures: sparc Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: Obsoleted by: Files included with this patch: /usr/bin/cancel /usr/bin/lp /usr/bin/lpset /usr/bin/lpstat /usr/lib/libprint.so.2 /usr/lib/lp/bin/netpr /usr/lib/lp/local/lp /usr/lib/lp/lpsched /usr/lib/lp/model/netstandard /usr/lib/print/bsd-adaptor/bsd_cascade.so.1 /usr/lib/print/bsd-adaptor/bsd_lpsched.so.1 /usr/lib/print/in.lpd /usr/sbin/lpadmin /usr/sbin/lpmove Problem Description: 4334568 security: dangerous dlopen in libprint (from 107115-04) 4188167 in.lpd core dumps every time when receiving job from a Stratus client 4235953 printd fails to start manually for jobs submitted with "lp -c" 4236024 after installing patch 106235-03, "lp -H" option is ignored 4239765 in.lpd segfaults performing strcmp() in job_list_append() 4251153 netpr kills a queued print job when the tcp socket is closed prematurely 4260829 Solaris printing does not support lpr -C for local printing 4263321 OW hang when running printd 4263391 printjobs disappear when network printer is powered off 4264235 "lp -c" did not warn users when /var is full 4265529 lpstat order changes when print job is modified. 4273437 netpr core dumps and printing fails when job id grows past 9999 4281487 lpsched dies without error message 4302705 lp dumps core on client-side request-id collision 4310991 netpr: buffer overflow in netpr_send_message() 4314312 libprint has buffer overflows and other security problems in Solaris 2.6 and 7 (from 107115-03) 4220608 lpsched dies on Solaris 7 4218904 lpstat -t shows duplicate queue information for remote queues 4217305 lost print jobs are not reliably requeued 4215944 "O" field in print control file truncates at 65 characters 4213872 /usr/ucb/lpr no longer copies datafile with 106235-02 4207894 lp -t generates an additional space title parameter 4200078 cannot print files unless they are readable by lp after patch 106235-02 install 4189161 in.lpd in cascade server is messing up control files 4186811 printing of forms to a class does not work 4184007 super user executes lpstat with -t under at two seconds interval causes core 4167195 in.lpd in solaris 2.6 coredumps, if print request comes from sdlp s/w ver 1.17 4131103 S2.6 doesn't allow use of special characters ':', '=', and ' ' in printer names 4240238 lpset can't add values with = in them 4093648 users should be able to su to lp then run specific lp commands. 4057917 netpr sends illegal BSD control file to BSD remote printer 4033371 lp jobs submitted to a class are STATICALLY queued to printers (from 107115-02) 4167443 Unable to configure SUN to HP or Unisys printing 4165358 in.lpd cascading uses wrong queuename 4156106 cancelling a job while printer is paper out or offline hangs xtp pad printer. 4129917 *lpstat* buffer overflow 4095132 lpstat -t is very slow 4085677 'lpstat -o' displays jobs of other queues (from 107115-01) 4179341 printd fails if 'N' entry is missing in control file Patch Installation Instructions: -------------------------------- For Solaris 2.0-2.6 releases, refer to the Install.info file and/or the README within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. For Solaris 7-8 releases, refer to the man pages for instructions on using 'patchadd' and 'patchrm' scripts provided with Solaris. Any other special or non-generic installation instructions should be described below as special instructions. The following example installs a patch to a standalone machine: example# patchadd /var/spool/patch/104945-02 The following example removes a patch from a standalone system: example# patchrm 104945-02 For additional examples please see the appropriate man pages. Special Install Instructions: ----------------------------- NOTE: Please also install 108325-01 (or its newer revision) if you use printer names and descriptions with special characters.