HP Tru64 UNIX and TruCluster Server Version 5.1B-5 Patch Summary and Release Notes (March 2009)

Patch 27086.00
OSFXADMIN540
• Corrects a potential security vulnerability in the XDM (X Display Manager)
software. This potential vulnerability, which may be locally and remotely
exploitable, could result in a denial of service (DOS), unauthorized privileged
access, or both.
• Corrects a problem in which host icons overlap in the dxhosts application.
• Corrects a potential security vulnerability where, under certain circumstances,
system integrity may be compromised when a buffer overflow occurs in the
dxsysinfo utility. Buffer overflows are sometimes exploited in an attempt to subvert
the function of a privileged program and possibly execute commands at the elevated
privileges if the program file has the setuid privilege.
• Corrects the way the dxkerneltuner application handles memory.
• Fixes several potential security vulnerabilities where, under certain circumstances,
system integrity may be compromised. These may be in the form of improper file
access.
• Corrects a problem in which the dxkerneltuner application when invoked with
the -power option does not remove the temporary files in /tmp when the application
is closed.
• Corrects a problem in which dxproctuner does not display data in the fr_FR local.
• Corrects a problem in which the dxproctuner application, when invoked, either
gives error message or dumps core and does not work.
• Corrects a problem in which a temporary file is not deleted when dxarchiver is
closed.
• Corrects a core dump problem in the dxfileshare application when the /etc/exports
file is not present in the system and a user tries to add a new entry.
• Corrects a problem in which the dxkerneltuner application dumps core when
cancel is selected in the mmsess subsystem.
• Corrects a problem in which the dxpower application shows an error when the
Spin Down Disks option is selected.
• Fixes problem with dxproctuner in which the toggle menu item View Processes
for All Users does not filter the output for non-root users.
198 Tru64 UNIX Patches