HP Tru64 UNIX and TruCluster Server Version 5.1.B-4 Patch Summary and Release Notes (13156)

• Resolves a problem with gated where adding a route may not succeed under certain
circumstances.
• Corrects a potential security vulnerability where, under certain circumstances, system
integrity may be compromised. This may occur when the gated daemon or gated control
utility (gdc) incorrectly access temporary files.
• Corrects a potential security vulnerability where, under certain circumstances, system
integrity may be compromised. This may be in the form of mrouted daemon incorrectly
creating and accessing temporary files.
• Adds a required call to yp_unbind() after getnameinfo() in order to close all ports when
using telnet on some machines.
• Provides comment handling capability in the route initialization script for parsing /etc/routes
file.
• Fixes an incorrect diagnostic message in the traceroute command.
• Modifies ifconfig to include an RCSid for patch tracking purposes.
• Updates ICMP code to add redirect timeout support and nonmodifiable route table entries.
• Fixes setld failures with "Kerberos credentials not found" messages.
• Changes the use of the configuration file /etc/svc.conf to /etc/nsswitch.conf to allow netgroup
data to be provided from LDAP, rather than only from NIS.
• Sets a software limit to prevent serious performance problems that can occur when TCP
connections that have an rate-limit enforced by a downstream network device overrun the
device.
• Eliminates the message "usage: hostid [hexnum or internet address]" from the
/usr/sbin/niscluster script while using the -d option.
• Resolves a problem that occurs when forking inetd children processes on NUMA-based
AlphaServer platforms.
• Addresses a problem with a missing file that is required for the pmgrd daemon's iorate
metrics collection feature to work.
• Modifies NIS slaves running in a cluster to use CAA to help assign a crontab entry to update
NIS maps.
• Fixes the ftpd SIZE subcommand to conform to RFC 959.
• Resolves a problem that can cause rsh processes hang.
• Corrects a problem where the telnet command causes unnecessary delays when an IP address
is supplied as a command-line argument.
• Corrects a problem with the nslookup utility that results in an unexpected termination in
certain situations.
• Fixes the behavior of rpc.rquotad in a cluster.
• Allows rcp to correctly interpret file names that contains rcp special characters such as the
at (@) sign and colon (:).
• Fixes a problem with the IPv6 neighbor discovery daemon, which under certain
circumstances, can cause bad information to be written to a DNS database causing failures
on subsequent database reloads.
• Corrects several minor problems with IPv6 subsystem related to neighbor discovery
specification.
• Corrects a problem with routed not detecting all the interfaces on system that contains more
than 100 interfaces.
• Updates Mobile IPv6 code to be compliant with the latest RFC.
• Provides support for monitoring disk I/O rate using the pmgrd daemon.
• Resolves a problem in which a hang occurs after the “User logged in” message is displayed
during an ftp session to a UCX host as a user with no password.
• Resolves a problem in which gated can produce a core after port 616 is scanned by a port
scanner.
3.4 Summary of Base Operating System Patches 109