OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Date: Wed May 02 2001 - 19:31:33 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    *******************************************************************************
    * *
    * This is a newly released patch... *
    * *
    * Online links can be found at *
    * http://ftp.support.compaq.com/patches/public/unix/v5.1/t64v513-c0027202-10573-20010430.README
    *******************************************************************************

    TITLE: Tru64 UNIX V5.1 Fix For xntp Program
     
    New Kit Date: 02-MAY-2001
    Modification Date: Not Applicable
    Modification Type: New Kit

                         Early Release Patch Kit Summary

    This patch addresses a potential problem with the xntp program.

    This Early Release Patch Kit Distribution contains:

       - fixes that resolve the problem(s) reported in:
            o 117-2-402 SSRT1-85U

    "A potential security vulnerability has been discovered, where under
    certain circumstances, system integrity may be compromised. This may
    be in the form of improper file or privilege management. Compaq has
    corrected this potential vulnerability."

     The patches in this kit are being released early for general customer use.
     Refer to the Release Notes for a summary of each patch and installation
     prerequisites.

     Patches in this kit are installed by manually typing commands or by the
     simple installation script included in the kit. For example, as root on
     the target system:
     

    > mkdir -p /tmp/CSPkit1
    > cd /tmp/CSPkit1
    > <copy the kit to /tmp/CSPkit1>
    > tar -xpvf T64V513-C0027202-10573-20010430.tar
    > cd patch_kit/Tru64_UNIX_V5.1/ManualKit
    > ./OSFPATC0027202510.install.sh

     NOTE: The simple installation script provides:

            o Prior to installing anything, it verifies
                    - product version matches the target product for the patch
                    - affected product subsets are installed

            o Saves existing system files (so the patch can be removed)
                    - in their current location with .PreManualCSP.<timestamp>
                      appended

            o Installs patched system files in the proper location with the proper
              access modes

            o Installs the patch documentation on the target system
                    - copies <PatchID>.abs,
                               <PatchID>.txt,
                             <PatchID>.problem_ids,
                               <PatchID>.rcs_strings and optionally
                               <PatchID>.special_instructions

                      to /var/adm/manual_patch/doc

            o Updates the manually-installed patch installation log
                    - /var/adm/manual_patch/log/Install.log

            o Updates the manually-installed patch database
                    - copies <ManualPatchName>.sh,
                             <ManualPatchName>.FileList
                             <ManualPatchName>.Installed

                      to /var/adm/manual_patch/db/

            The installation script DOES not provide patch dependency management
            nor patch removal capabilities.

     

    --------------------------
    BEFORE INSTALLING PATCHES:
    --------------------------
     1. Verify the patch kit tar file was copied correctly.
    > sum PatchKitName.tar

          Compare the checksum of the copied .tar file with the originating
          .tar file checksum.

     2. Peruse the Patch Kit Release Notes and Patch Installation Guide to
        understand such things as patch installation, installation operational
        changes, files being changed.

            Release Notes

            The Patch Kit Release Notes can be found in each product-specific
            directory. For example, if the kit contains Digital UNIX 4.0D
            patches and you untarred the kit in /tmp/CSPkit1/:

            - /tmp/CSPkit1/patch_kit/DIGITAL_UNIX_V4.0D/ReleaseNotes.txt

           
            Patch Installation Guide

            The Patch Installation Guide can be viewed from (assuming the kit was
            untarred in /tmp/CSPkit1/):

            - /tmp/CSPkit1/patch_kit/PatchInstallGuide.txt

        NOTE: This patch kit may contain patches for more than one software
              product.

    ------------------------------
    PATCH KIT DISTRIBUTION CONTENT
    ------------------------------

      - 00-READ-ME-FIRST (this file)

      - Simple installation script

      - Customer-Specific patches

      - Patch Kit Installation Guide
            Describes the simple installation script.
            o Text only (.txt)

      - Patch Kit Release Notes
            Describes the content of this patch kit.
            o Text only (.txt)

    ---