TITLE: Tru64 UNIX] Tru64+PK3 BL17 SSRT1-41U, SSRT0742U and SSRT0759U ECO Summary New Kit Date: 28-JAN-2002 Modification Date: Not Applicable Modification Type: New Kit: Early Release Patch Kit (ERP) Copyright (c) Compaq Computer Corporation 2002. All rights reserved. PRODUCT: Tru64 UNIX [R] 5.1 SOURCE: Compaq Computer Corporation ECO INFORMATION: ECO Name: T64V51B17-C0095501-12931-E-20020122.tar ECO Kit Approximate Size: 5.0MB Kit Applies To: Tru64 UNIX 5.1 with PK3 (BL17) installed Checksums for T64V51B17-C0095501-12931-E-20020122.tar: /usr/bin/sum results: 35342 4810 /usr/bin/cksum results: 2389137076 4925440 MD5 results: 629ce7272e321e580e02c76021c668a3 SHA1 results: d42b9f01491f2bd8a10d3e71088855630a86acd8 ECO KIT SUMMARY: An update ECO kit exists for Tru64 UNIX 5.1. This is an early release, dupatch-based, patch kit that contains solutions to security vulnerabilities reported in SSRT1-41U, SSRT0742U, and SSRT0759U. The Patch Kit Installation Instructions document and the Patch Summary and Release Notes document provide patch kit installation and removal instructions and a summary of each patch. Please read through these documents prior to installing patches on your system. INSTALLATION NOTES: Install this kit with the dupatch utility that is included in the patch kit. You may need to baseline your system if you have manually changed system files on your system. The dupatch utility provides the baselining capability. The prerequisite for installing this patch kit is that you must have installed Tru64 UNIX 5.1 and PK3 (BL17). KNOWN PROBLEMS WITH THE PATCH KIT: None. RELEASE NOTES FOR T64V51B17-C0095501-12931-E-20020122: This document summarizes the contents and special instructions for the Tru64 UNIX V5.1 patches contained in this kit. For information about installing or removing patches, baselining, and general patch management, see the Patch Kit Installation Instructions document. 1 Release Notes This Early Release Patch Kit Distribution contains: - fixes that resolve the problem(s) reported in: o SSRT0742U SSRT0759U SSRT1-40U SSRT1-41U SSRT1-42U SSRT1-45U SSRT1-48U * for Tru64 UNIX V5.1 T64V51AS0003-20010413.tar (BL17) The patches in this kit are being released early for general customer use. Refer to the Release Notes for a summary of each patch and installation prerequisites. Patches in this kit are installed by running dupatch from the directory in which the kit was untarred. For example, as root on the target system: > mkdir -p /tmp/CSPkit1 > cd /tmp/CSPkit1 > > tar -xpvf DUV40D13-C0044900-1285-20000328.tar > cd patch_kit > ./dupatch 2 Special Instructions There are no special instructions for Tru64 UNIX V5.1 Patch C955.01 There are no special instructions for Tru64 UNIX V5.1 Patch C956.01 There are no special instructions for Tru64 UNIX V5.1 Patch C957.01 There are no special instructions for Tru64 UNIX V5.1 Patch C958.01 There are no special instructions for Tru64 UNIX V5.1 Patch C959.00 There are no special instructions for Tru64 UNIX V5.1 Patch C960.01 There are no special instructions for Tru64 UNIX V5.1 Patch C961.00 3 Summary of CSPatches contained in this kit Tru64 UNIX V5.1 PatchId Summary Of Fix ---------------------------------------- C955.01 Security,SSRT1-40U,SSRT1-41U,SSRT1-42U,SSRT1-45U,SSRT1-48U C956.01 Security,SSRT1-40U,SSRT1-41U,SSRT1-42U,SSRT1-45U,SSRT1-48U C957.01 Security,SSRT1-40U,SSRT1-41U,SSRT1-42U,SSRT1-45U,SSRT1-48U C958.01 Security,SSRT1-40U,SSRT1-41U,SSRT1-42U,SSRT1-45U,SSRT1-48U C959.00 Security,SSRT1-40U,SSRT1-41U,SSRT1-42U,SSRT1-45U,SSRT1-48U C960.01 Security,SSRT1-40U,SSRT1-41U,SSRT1-42U,SSRT1-45U,SSRT1-48U C961.00 Security,SSRT1-40U,SSRT1-41U,SSRT1-42U,SSRT1-45U,SSRT1-48U 4 Additional information from Engineering None 5 Affected system files This patch delivers the following files: Tru64 UNIX V5.1 Patch C955.01 ./usr/bin/ksh CHECKSUM: 55504 317 SUBSET: OSFBASE510 ./usr/bin/sh CHECKSUM: 63128 173 SUBSET: OSFBASE510 ./usr/bin/csh CHECKSUM: 14427 304 SUBSET: OSFBASE510 ./usr/bin/Rsh CHECKSUM: 63128 173 SUBSET: OSFBASE510 ./usr/bin/posix/sh CHECKSUM: 55504 317 SUBSET: OSFBASE510 ./sbin/.upd..sh CHECKSUM: 52321 379 SUBSET: OSFBASE510 ./sbin/.upd..Rsh CHECKSUM: 52321 379 SUBSET: OSFBASE510 ./usr/bin/calendar CHECKSUM: 41263 4 SUBSET: OSFBASE510 ./sbin/it.d/bin/dnconvdir/dn_fix CHECKSUM: 11866 10 SUBSET: OSFBASE510 ./sbin/it.d/bin/dnconvert CHECKSUM: 46710 5 SUBSET: OSFBASE510 ./sbin/it.d/bin/do_versw CHECKSUM: 00937 4 SUBSET: OSFBASE510 ./sbin/it.d/bin/gettimezone CHECKSUM: 36151 8 SUBSET: OSFBASE510 ./sbin/it.d/bin/load_usr_pak CHECKSUM: 09533 2 SUBSET: OSFBASE510 ./sbin/it CHECKSUM: 11866 10 SUBSET: OSFBASE510 ./sbin/init.d/.new..rmtmpfiles CHECKSUM: 63284 3 SUBSET: OSFBASE510 ./sbin/init.d/.mrg..rmtmpfiles CHECKSUM: 42764 5 SUBSET: OSFBASE510 ./usr/bin/crashdc CHECKSUM: 39484 7 SUBSET: OSFBASE510 ./usr/bin/crontab CHECKSUM: 19218 50 SUBSET: OSFBASE510 ./usr/sbin/mailsetup CHECKSUM: 53768 85 SUBSET: OSFBASE510 ./usr/lbin/mkstemp CHECKSUM: 39566 29 SUBSET: OSFBASE510 ./sbin/kreg CHECKSUM: 60565 7 SUBSET: OSFBASE510 ./usr/sbin/svcsetup CHECKSUM: 34908 11 SUBSET: OSFCLINET510 ./usr/sys/bin/mktape CHECKSUM: 63351 25 SUBSET: OSFBINCOM510 ./usr/lib/nls/msg/en_US.ISO8859-1/sh.cat CHECKSUM: 63623 4 SUBSET: OSFBASE510 ./usr/lib/nls/msg/en_US.ISO8859-1/csh.cat CHECKSUM: 28864 6 SUBSET: OSFBASE510 ./usr/lib/nls/msg/en_US.ISO8859-1/cron.cat CHECKSUM: 04036 9 SUBSET: OSFBASE510 ./usr/bin/gentapes CHECKSUM: 53536 21 SUBSET: OSFBASE510 ./usr/sbin/evmreload CHECKSUM: 28839 4 SUBSET: OSFBASE510 ./usr/sys/bin/procprod CHECKSUM: 09276 319 SUBSET: OSFBINCOM510 ./usr/lib/nls/msg/en_US.ISO8859-1/ksh.cat CHECKSUM: 44459 6 SUBSET: OSFBASE510 ./usr/sbin/nissetup CHECKSUM: 17568 39 SUBSET: OSFCLINET510 ./usr/sbin/ypsetup CHECKSUM: 17568 39 SUBSET: OSFCLINET510 ./sys/BINARY/vfs.mod CHECKSUM: 29448 446 SUBSET: OSFBIN510 ./usr/bin/kits CHECKSUM: 31852 7 SUBSET: OSFBASE510 ./usr/bin/gendisk CHECKSUM: 12267 22 SUBSET: OSFBASE510 ./usr/sbin/ip6_setup CHECKSUM: 21748 38 SUBSET: OSFCLINET510 ./usr/lib/nls/msg/en_US.ISO8859-1/mkstemp.cat CHECKSUM: 46601 1 SUBSET: OSFBASE510 ./usr/sys/bin/btcreate CHECKSUM: 39471 165 SUBSET: OSFBINCOM510 ./sys/BINARY/proc.mod CHECKSUM: 12978 4 SUBSET: OSFBIN510 ./sys/BINARY/std_kern.mod CHECKSUM: 57856 1528 SUBSET: OSFBIN510 ./usr/sbin/cron CHECKSUM: 25410 78 SUBSET: OSFBASE510 ./usr/bin/newinv CHECKSUM: 48393 5 SUBSET: OSFBASE510 ./usr/sys/include/sys/fcntl.h CHECKSUM: 57370 13 SUBSET: OSFBINCOM510 Patch C956.01 ./etc/namedb/bin/make_hosts CHECKSUM: 11398 11 SUBSET: OSFINET510 Patch C957.01 ./usr/sbin/sys_check CHECKSUM: 16275 646 SUBSET: OSFSERVICETOOLS510 Patch C958.01 ./usr/lbin/spell/compress CHECKSUM: 45333 3 SUBSET: OSFDCMTEXT510 Patch C959.00 ./usr/sbin/secauthmigrate CHECKSUM: 13063 11 SUBSET: OSFC2SEC510 Patch C960.01 ./usr/dt/bin/dtsetup CHECKSUM: 57792 191 SUBSET: OSFCDEDT510 ./usr/sbin/smauthd CHECKSUM: 32104 2 SUBSET: OSFBASE510 Patch C961.00 ./usr/dt/bin/lp_default CHECKSUM: 40850 2 SUBSET: OSFCDEDT510 [R] UNIX is a registered trademark in the United States and other countries licensed exclusively through X/Open Company Limited. Copyright Compaq Computer Corporation 2002. All Rights reserved. This software is proprietary to and embodies the confidential technology of Compaq Computer Corporation. Possession, use, or copying of this software and media is authorized only pursuant to a valid written license from Compaq or an authorized sublicensor. This ECO has not been through an exhaustive field test process. Due to the experimental stage of this ECO/workaround, Compaq makes no representations regarding its use or performance. The customer shall have the sole responsibility for adequate protection and back-up data used in conjunction with this ECO/workaround.