HP Tru64 UNIX and TruCluster Server Version 5.1B-5 Patch Summary and Release Notes (March 2009)

• Introduces sysconfig tunable attibutes for NFS/RPC
• Fixes multiple panics and application hangs seen when interacting with Process
Shared POSIX 1003.1c objects.
• Fixes the handling of NFS requests that have an erroneous file handle length field.
• Corrects the output of wired pages and gh regions found in the -P option of the
vmstat command when run on a NUMA system.
• Improves the performance and chances of success of the Tru64 kernel malloc
routine, especially when used by drivers which use the M_NOWAIT option.
• Fixes an invalid kernel memory fault panic in the code responsible for the
generation of random numbers.
• Corrects a defect in the audit subsystem that causes it to fail to record inode
information on closed file descriptors.
• Corrects a problem that occurs after an upgrade from Version 5.1B patch kit 3 to
Version 5.1B-3 (Version 5.1B-3) in which the system may fail to boot with the
following panic:
KMF - invalid memory read access from kernel mode
• Fixes a race within NFS over TCP when connection reaches idle timeout.
• Improves the performance of Tru64's MACH implementation and also enhances
stability while under heavy load.
• Corrects several potential security vulnerabilities in TCP/IP, including ICMP. These
exploits could result in a remote Denial of Service (DoS) from predictable Initial
Sequence Numbers (ISNs), network throughput reduction for TCP connections,
or the reset of TCP connections.
• Corrects the following potential security vulnerabilities:
SSRT4743, SSRT4884 - TCP/IP ICMP (Severity - High)
• Fixes a panic condition resulting from DVDFS using a deallocated vnode.
• Fixes a panic condition in the NFS client code resulting from the mishandling of
unaligned data on clustered systems.
• Corrects a kernel memory fault that results from the de-referencing of a null
processor pointer encountered when auditing a network event after having sent
a SIGKILL to the auditd daemon.
• Forces the use of a non-cluster interconnect address in audit records.
• Fixes a kernel memory fault panic in IPv6, and corrects improper or leaked reference
counts with IPv6 route entries.
• Fixes a panic that occurs when using the TCP SACK option.
• Fixes a kernel memory fault panic that occurs when the vm tunable
anon_rss_enforce is set.
• Fixes a socket kernel memory leak.
• Fixes a race condition in the UBC.
120 Tru64 UNIX Patches