OBSOLETE Patch-ID# 119007-01

NOTE:
***********************************************************************
READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT
FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU
AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE
TERMS, PROMPTLY DESTROY THE UNUSED SOFTWARE.
***********************************************************************

Keywords: netbackup 5.1 nb_51_3as0949_m security
Synopsis: Obsoleted by: 116271-06 NetBackup 5.1 UNIX server and client fix
Date: Nov/10/2005


Install Requirements: NA                      
                      
Solaris Release: 7 8 9

SunOS Release: 5.7 5.8 5.9

Unbundled Product: Veritas NetBackup

Unbundled Release: 5.1

Xref: 

Topic: Veritas NetBackup 5.1 Special Patch

Relevant Architectures: sparc

BugId's fixed with this patch: 6339204

Changes incorporated in this version: 6339204

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 116271-05 (or greater)

Obsoleted by: 

Files included with this patch: 

<install_dir>/openv/netbackup/bin/bpjava-susvc
<install_dir>/openv/netbackup/client/Solaris/Solaris7/bpjava-msvc
<install_dir>/openv/netbackup/client/Solaris/Solaris7/bpjava-usvc
<install_dir>/openv/netbackup/client/Solaris/Solaris7/version
<install_dir>/openv/netbackup/client/Solaris/Solaris9/bpjava-msvc
<install_dir>/openv/netbackup/client/Solaris/Solaris9/bpjava-usvc
<install_dir>/openv/netbackup/client/Solaris/Solaris9/version
<install_dir>/openv/netbackup/client/Solaris/Solaris_x86_7/bpjava-msvc
<install_dir>/openv/netbackup/client/Solaris/Solaris_x86_7/bpjava-usvc
<install_dir>/openv/netbackup/client/Solaris/Solaris_x86_7/version
<install_dir>/openv/netbackup/client/Solaris/Solaris_x86_9/bpjava-msvc
<install_dir>/openv/netbackup/client/Solaris/Solaris_x86_9/bpjava-usvc
<install_dir>/openv/netbackup/client/Solaris/Solaris_x86_9/version
<install_dir>/openv/netbackup/version

Problem Description:

6339204 need NBU security patches spun in Sun patch format
 
============================================

Patch Installation Instructions:
-------------------------------------------------------------------------
Refer to the Install.info file within the patch for instructions on
using the generic 'patchadd' and 'patchrm' scripts provided
with each patch.  Any other special or non-generic installation
instructions should be described below.
-------------------------------------------------------------------------

Special Install Instructions:
-------------------------------------------------------------------------
NOTE: For Maintenance Pack installation on a UNIX Cluster Environment:
 
1) Ensure that prior to installing the maintenance pack, NetBackup is at
   release level 5.1 and configured to run in a cluster.
 
2) Freeze the NetBackup group (This will avoid a 'failover' during a patch
   installation).
 
3) Install this Maintenance Pack on the inactive node(s) of the cluster 
   (follow steps 1-3 below)
 
4) Install this Maintenance Pack on the active node of the cluster (follow
   steps 1-3 below)
 
5) Unfreeze the NetBackup group.
 
-------------------------------------------------------------------------
 
 
As root on the NetBackup Master Server:
 
1) Stop the NetBackup and Media Manager daemons:
        /usr/openv/netbackup/bin/goodies/bp.kill_all
 
2) Install patched binaries via patchadd.
 
3) Restart daemons.
 
   /usr/openv/netbackup/bin/initbprd
   /usr/openv/volmgr/bin/ltid -v
 
4) Update the NetBackup clients, including the NetBackup master and media
   servers, with the update_clients script.
 
        /usr/openv/netbackup/bin/update_clients <hardware> <os>
 
        where <hardware> <os> is one of the following:
            Solaris Solaris7
            Solaris Solaris8
            Solaris Solaris9
            Solaris Solaris_x86_7
            Solaris Solaris_x86_8
 
       Remember to include the master server's <hardware> <os> type.
 
       Note: The /usr/openv/netbackup/bin/update_clients command without
             any parameters will update all the UNIX clients.
 
Additional Notes:
 
If nonroot users have been given permission to perform NetBackup or
Media Manager administration, (NetBackup System Administrator's
Guide, Allowing Nonroot Users to Administer NetBackup page 31
and Media Manager Administrator's Guide, Allowing Nonroot Users to
Administer Media Manager, page 9), group and file permissions changes
will have to be reapplied as installing this patch will reset the group
and file permissions to their delivered value.
 
For Solaris servers, this can be done by executing:
    /usr/openv/netbackup/bin/nonroot_admin
 
In order for "Solaris Solaris10" to show when configuring clients
into a backup policy, the following command must be executed:
   /usr/openv/netbackup/bin/goodies/new_clients
 
 
 
=============================================================================
========= 
 119007-01
========= 
This Special Pack provides security-related fixes for VERITAS NetBackup UNIX
servers.  THIS PACK IS A NON-CUMULATIVE PATCH, AND MUST BE INSTALLED IN PROPER
ORDER, ADHERING TO THE DEPENDENCIES LISTED BELOW.  FAILURE TO MEET THESE
DEPENDENCIES WILL RESULT IN A FAILED INSTALLATION OF THIS PATCH.
 
VERITAS recommends that the backing up of active file systems be avoided,
or the use of snapshot technologies be implemented. The directory structure
reported back from the file system (to NetBackup) may not contain all of the
files available during the time of backup. NetBackup will not report errors
reported back from the file system (to NetBackup) may not contain all of the
files available during the time of backup. NetBackup will not report errors
in many cases where the file's existence is not known to NetBackup as reported
by the file system.
=============================================================================
 
Etrack Incident = ET427175
 
Description: 
    A change has been made to avert a potential vulnerability in a Java 
    authentication service that runs on VERITAS NetBackup servers and clients.
    This change prohibits remote attackers from executing arbitrary code on a
    targeted system.  In addition, Symantec recommends that users block the
    affected ports from external network access. 
 
    (NetBackup Servers and Clients)
================================================================================

README -- Last modified date:  Friday, December 16, 2005

