OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: system PRIVILEGED account (rootstage1.cxo.cpqcorp.net)
Date: Mon Oct 29 2001 - 23:30:03 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    *******************************************************************************
    * *
    * This is a newly released patch... *
    * *
    * Online links can be found at *
    * http://ftp.support.compaq.com/patches/public/vms/axp/v7.1-2/dec-axpvms-vms712_dw_mot_mup-v0100--4.README
    *******************************************************************************

    TITLE: OpenVMS VMS712_DW_MOT_MUP-V0100 Alpha V7.1-2 DW_MOT_MUP ECO Summary

    New Kit Date: 29-OCT-2001
    Modification Date: Not Applicable
    Modification Type: New Kit
     
    NOTE: An OpenVMS saveset or PCSI installation file is stored
           on the Internet in a self-expanding compressed file.
     
           For OpenVMS savesets, the name of the compressed saveset
           file will be kit_name.a-dcx_vaxexe for OpenVMS VAX or
           kit_name.a-dcx_axpexe for OpenVMS Alpha. Once the OpenVMS
           saveset is copied to your system, expand the compressed
           saveset by typing RUN kitname.dcx_vaxexe or kitname.dcx_alpexe.
     
           For PCSI files, once the PCSI file is copied to your system,
           rename the PCSI file to kitname-dcx_axpexe.pcsi, then it can
           be expanded by typing RUN kitname-dcx_axpexe.pcsi. The resultant
           file will be the PCSI installation file which can be used to install
           the ECO.
     

     
    Copyright (c) Compaq Computer Corporation 2001. All rights reserved.

    OP/SYS: OpenVMS Alpha

    COMPONENT: DECwindows Motif Server

    SOURCE: Compaq Computer Corporation 2001

    ECO INFORMATION:

         ECO Kit Name: VMS712_DW_MOT_MUP-V0100
                        DEC-AXPVMS-VMS712_DW_MOT_MUP-V0100--4.PCSI
         ECO Kits Superseded by This ECO Kit: None
         ECO Kit Approximate Size: 1952 Blocks
         Kit Applies To: OpenVMS Alpha V7.1-2
         System/Cluster Reboot Necessary: Yes
         Rolling Re-boot Supported: Yes
         Installation Rating: 1 - To be installed by all customers.

         Kit Dependencies:

           The following remedial kit(s), or later, must be installed BEFORE
           installation of this kit:
      
                VMS62TO71U2_PCSI-V0200
                VMS712_UPDATE-V0300
              

           In order to receive all the corrections listed in this
           kit, the following remedial kits should also be installed:

                None

    ECO KIT SUMMARY:

    MUP kit exists for DECwindows Motif Server on OpenVMS V7.1-2. This
    kit addresses the following problems:

    PROBLEMS ADDRESSED IN VMS712_DW_MOT_MUP-V0100 KIT:

      o Compaq has determined that systems running OpenVMS Alpha,
         OpenVMS VAX, SEVMS VAX or SEVMS Alpha with the DECwindows
         MotifServer installed have a potential security vulnerability
         that could be exploited to allow existing users unauthorized
         access to data and system resources. To protect against this
         potential security risk, Compaq is making available a
         mandatory update patch for OpenVMS customers.

         Installation of the DECwindows Motif Server is optional during
         the installation of the OpenVMS Operating System. You can
         verify whether or not the DECwindows Motif Server has been

         installed on your system using the following command:

              $ DIRECTORY SYS$LIBRARY:DECW$*.EXE

         If no DECW$*.EXE files are present on your system, the
         DECwindows Motif Server is not installed on your system and
         you do not need to apply this mandatory update.

                                   NOTE
                                   ----

         If the DECwindows Motif Server is not installed on your system
         you do NOT need to install this mandatory update.

         Apply this mandatory update if the DECwindow Motif Server is
         installed on your system and you are running one of the
         following versions of OpenVMS or SEVMS:

           o OpenVMS Alpha Version 6.2 and all associated hardware
              releases (for example, Version 6.2-1H1)

           o OpenVMS Alpha Version 7.1-2

           o OpenVMS Alpha Version 7.2-1

           o OpenVMS Alpha Version 7.2-1H1

           o OpenVMS Alpha Version 7.2-2

           o OpenVMS Alpha Version 7.3

           o OpenVMS VAX Version 6.2

           o OpenVMS VAX Version 7.1

           o OpenVMS VAX Version 7.2

           o OpenVMS VAX Version 7.3

           o SEVMS VAX Version 6.2

           o SEVMS Alpha Version 6.2

                                      NOTE
                                      ----

         OpenVMS VAX V5.5-2 is not subject to this potential security
         vulnerability.

         After completing the update, Compaq strongly recommends that
         you perform an immediate backup of your system disk so that
         any subsequent restore operations begin with updated software.
         Otherwise, you must reapply the update after a future restore
         operation. Also, if at some future time you upgrade your
         system to one of the versions of OpenVMS or SEVMS listed you
         must reapply the update.

              Images Affected: [SYSLIB]DECW$TRANSPORT_COMMON.EXE
                                [SYSLIB]DECW$TRANSPORT_DECNET.EXE
                                [SYSLIB]DECW$TRANSPORT_LAT.EXE
                                [SYSLIB]DECW$TRANSPORT_LOCAL.EXE
                                [SYSLIB]DECW$TRANSPORT_TCPIP.EXE

    INSTALLATION NOTES:

    This kit requires a system reboot. Compaq strongly recommends that
    a reboot is performed immediately after kit installation to avoid
    system instability.

    If you have other nodes in your OpenVMS cluster, they must also be
    rebooted in order to make use of the new image(s). If it is not
    possible or convenient to reboot the entire cluster at this time, a
    rolling re-boot may be performed. However, due to the nature of
    the problem that this kit corrects, Compaq strongly recommends a
    rolling re-boot be performed immediately on each cluster node.

    INSTALLATION INSTRUCTIONS:

    Install this kit with the POLYCENTER Software installation utility
    by logging into the SYSTEM account, and typing the following at the
    DCL prompt:

    PRODUCT INSTALL VMS712_DW_MOT_MUP /SOURCE=[location of Kit]

    The kit location may be a tape drive, CD, or a disk directory that
    contains the kit.

    Additional help on installing PCSI kits can be found by typing HELP
    PRODUCT INSTALL at the system prompt

    Special Installation Instructions:

      o Due to the nature of the problem that this kit corrects, Compaq
         recommends that the old files be deleted and not left on the
         system.

         During installation, this kit will ask and require user response to
         several questions. If you wish to automate the installation of
         this kit and avoid having to provide responses to these questions,
         you must create a DCL command procedure that includes the following
         definitions and commands:

          - Define logical NO_ASK$BACKUP as TRUE

          - Define logical NO_ASK$REBOOT as TRUE

          - Define logical ARCHIVE_DW_MOT_MUP as TRUE if you wish to delete
             the replaced files. If you do not want the replaced files
             deleted (NOT recommended by Compaq), define this logical as
             FALSE.

          - Add the following qualifiers to the PRODUCT INSTALL command and
             add that command to the DCL procedure.

               /PROD=DEC/BASE=AXPVMS/VER=V1.0

          - De-assign the logicals assigned

         For example, a sample command file to install the
         VMS712_DW_MOT_MUP-V0100 kit would be:

          $ DEFINE/SYS NO_ASK$BACKUP "TRUE"
          $ DEFINE/SYS NO_ASK$REBOOT "TRUE"
          $ DEFINE/SYS ARCHIVE_DW_MOT_MUP "TRUE"
          $!
          $ PROD INSTALL VMS712_DW_MOT_MUP/PROD=DEC/BASE=AXPVMS/VER=V1.0
          $!
          $ DEASSIGN/SYS NO_ASK$BACKUP
          $ DEASSIGN/SYS NO_ASK$REBOOT
          $ DEASSIGN/SYS ARCHIVE_DW_MOT_MUP
          $ exit

         After the command file is created, run the file to to install the
         kit. Note that if you use this method to install the kit, the
         installation will proceed without interruption. All "Do you wish
         to continue" questions will be disabled.

    ---