AlphaServer SC patch kit:
==========================

AlphaServer SC Version : SC V2.6 UK2
Kit Name:                T64KIT0026541-V51BB26-S-20050926:C1233.01
Release Date:            25 November 2005
QuIX:                    QXCM1000294567
WFM Case:                3212502707
Abstract: Port of SSRT4743, SSRT4884 to SC V2.6 UK2.


Description of Patch:
=====================
This kit contains a port of the fix for SSRT4743, SSRT4884 rev.0
HP Tru64 UNIX TCP/IP remote Denial of Service (DoS) to SC V2.6 UK2.
This is a backport of the fixes in the standard Tru64 Unix patch
T64KIT0026447-V51BB26-ES-20050914.

For a full description of SSRT4743 and SSRT4884 see the Tru64 Unix
Internet security software downloads web site at
http://h30097.www3.hp.com/unix/security-download.html


Kit location:
=============
The patch kit is T64KIT0026541-V51BB26-S-20050926.tar and it can be downloaded from ITRC.


Prerequisites:
==============
Before installing this Patch kit, you should ensure the following:

1) You have all mandatory patches for this release installed


Kit checksum:
=============
    # cksum T64KIT0026541-V51BB26-S-20050926.tar
    1587841202 4505600 T64KIT0026541-V51BB26-S-20050926.tar


Updated files:
==============
A list of the files included in this patch is given below
along with the cksum values for each file:

    541669775   583061  /sys/BINARY/inet.mod
    4227502448  438353  /sys/BINARY/ipv6.mod
    303202974   345051  /sys/BINARY/net.mod


Instructions:
=============
This patch is provided as an sc_dupatch installable kit.  Unpack it
into a directory that is NFS mounted on all domains e.g.
/nfs/cspkit and follow the following steps to install it:


Patch required on Management Server (if used) : YES
Patch required on Domains                     : YES


1) Verify that it is possible to install the patches as follows:

   On the Management Server (if used)

   #/usr/sbin/sc_dupatch -install -kit /nfs/cspkit/patch_kit -name <user-name>
    -note  <user-note> -noroll -nolevel2 -noauto -precheck_only -patch C1233.01

   On Domains:

   # scrun -d all -m 1 '/usr/sbin/sc_dupatch -install
     -kit /nfs/cspkit/patch_kit -name <user-name> -note <user-note> -noroll -nolevel2
     -noauto -precheck_only -patch C1233.01'
 

2) Now Run the Patch Installation as follows:


  On the Management Server (if Used):
  -----------------------------------

   Install the patch using the following commands:


   #/usr/sbin/sc_dupatch -install -kit /nfs/cspkit/patch_kit -name <user-name>
    -note  <user-note> -noroll -nolevel2 -noauto -patch C1233.01

   Rebuild your kernel
   # doconfig -c HOSTNAME
   Copy the new kernel to /vmunix
   Reboot the machine
   # shutdown -r now


  On Domains:
  -----------
   Install the patch using the following commands:

   # scrun -d all -m 1 '/usr/sbin/sc_dupatch -install
     -kit /nfs/cspkit/patch_kit -name <user-name> -note <user-note> -noroll -nolevel2
     -noauto -patch C1233.01'

   Now Build and Deploy the Kernels:
   Make sure all nodes are up so that kernels will be built on all nodes

   # scrun -d all BuildKernels
   # scrun -d all DeployKernels

   Reboot the domains:
   # sra shutdown -domains all
   # sra boot -domains all


Installation is complete at this point.


Once the patch is installed and you are satisfied that it is working correctly
the GENERIC kernels should also be updated, using the following command:

    # scrun -d all DeployKernels -g


*******************************************************************************