TITLE: Tru64 UNIX V5.1 Fix For xntp Program New Kit Date: 02-MAY-2001 Modification Date: Not Applicable Modification Type: New Kit Early Release Patch Kit Summary This patch addresses a potential problem with the xntp program. This Early Release Patch Kit Distribution contains: - fixes that resolve the problem(s) reported in: o 117-2-402 SSRT1-85U "A potential security vulnerability has been discovered, where under certain circumstances, system integrity may be compromised. This may be in the form of improper file or privilege management. Compaq has corrected this potential vulnerability." The patches in this kit are being released early for general customer use. Refer to the Release Notes for a summary of each patch and installation prerequisites. Patches in this kit are installed by manually typing commands or by the simple installation script included in the kit. For example, as root on the target system: > mkdir -p /tmp/CSPkit1 > cd /tmp/CSPkit1 > > tar -xpvf T64V513-C0027202-10573-20010430.tar > cd patch_kit/Tru64_UNIX_V5.1/ManualKit > ./OSFPATC0027202510.install.sh NOTE: The simple installation script provides: o Prior to installing anything, it verifies - product version matches the target product for the patch - affected product subsets are installed o Saves existing system files (so the patch can be removed) - in their current location with .PreManualCSP. appended o Installs patched system files in the proper location with the proper access modes o Installs the patch documentation on the target system - copies .abs, .txt, .problem_ids, .rcs_strings and optionally .special_instructions to /var/adm/manual_patch/doc o Updates the manually-installed patch installation log - /var/adm/manual_patch/log/Install.log o Updates the manually-installed patch database - copies .sh, .FileList .Installed to /var/adm/manual_patch/db/ The installation script DOES not provide patch dependency management nor patch removal capabilities. -------------------------- BEFORE INSTALLING PATCHES: -------------------------- 1. Verify the patch kit tar file was copied correctly. > sum PatchKitName.tar Compare the checksum of the copied .tar file with the originating .tar file checksum. 2. Peruse the Patch Kit Release Notes and Patch Installation Guide to understand such things as patch installation, installation operational changes, files being changed. Release Notes The Patch Kit Release Notes can be found in each product-specific directory. For example, if the kit contains Digital UNIX 4.0D patches and you untarred the kit in /tmp/CSPkit1/: - /tmp/CSPkit1/patch_kit/DIGITAL_UNIX_V4.0D/ReleaseNotes.txt Patch Installation Guide The Patch Installation Guide can be viewed from (assuming the kit was untarred in /tmp/CSPkit1/): - /tmp/CSPkit1/patch_kit/PatchInstallGuide.txt NOTE: This patch kit may contain patches for more than one software product. ------------------------------ PATCH KIT DISTRIBUTION CONTENT ------------------------------ - 00-READ-ME-FIRST (this file) - Simple installation script - Customer-Specific patches - Patch Kit Installation Guide Describes the simple installation script. o Text only (.txt) - Patch Kit Release Notes Describes the content of this patch kit. o Text only (.txt)