HP Tru64 UNIX and TruCluster Server Version 5.1B-5 Patch Summary and Release Notes (March 2009)

Patch 27089.00
OSFXDEMOS540
• Corrects a potential security vulnerability where, under certain circumstances,
system integrity may be compromised. This may be in the form of improper file
access.
Patch 27094.00
OSFXLIBA540
• Corrects a problem that occurs when attempting to open a Java applet on a V1.7
Mozilla browser displayed from a Redhat Linux RHEL 3 (update 6) to a Tru64
UNIX V5.1B-3 graphics console. The browser closes and dtwm spins at 99% CPU
usage.
• Corrects a problem, where, under certain circumstances, the XmCvtXmStringToCT()
function does not correctly convert a compound string to a string in compound
text format.
• Fixes a problem where a Chinese character whose byte sequence contains 0x9b
cannot be entered with dxhanziim or cut and pasted.
• Modifies XmbTextListToTextProperty() and XmbTextPropertyToTextList() to
support 4-byte length UTF-8 characters in the Compound Text handling.
• Corrects a potential security vulnerability where, under certain circumstances,
system integrity may be compromised. This may be in the form of improper file
or privilege management.
• Prevents application failures when an application specifies very large timeout
values to X Toolkit library (Xt) routines.
• Corrects a potential file permissions vulnerability and a potential buffer overflow
in the X Window System. The potential vulnerabilities are locally exploitable,
resulting in unauthorized privileged access.
Patch 27095.00
OSFXMIT540
• Corrects a potential security vulnerability where, under certain circumstances,
system integrity may be compromised. This may be in the form of improper file
access.
• Fixes various problems with the X font server and with the X server's interaction
with X font servers.
• Corrects a potential file permissions vulnerability and a potential buffer overflow
in the X Window System. The potential vulnerabilities are locally exploitable,
resulting in unauthorized privileged access.
3.4 Summary of Base Operating System Patches 199