HP Tru64 UNIX and TruCluster Server Version 5.1.B-4 Patch Summary and Release Notes (13156)

• Fixes the mkcdsl command and updates the NIS start-up script to correctly start NIS on the
cluster alias.
• Corrects several potential security vulnerabilities where, under certain circumstances, system
integrity may be compromised. These may be in the form of improper file or privilege
management.
• Fixes a problem in tcpdump that causes it to not filter UDP traffic properly.
• Corrects a potential problem in screend.
• Corrects a problem in which logins in TruCluster environments using Enhanced Security
can hang on any member other than the one serving /var to CFS.
• Corrects a problem on systems running Enhanced Security in which the command edauth
-R refuses to write user-profile entries to the root partition.
• Corrects a problem that occurs when using C1crypt for password encryption on Enhanced
Security systems in which users are unable to change their passwords and see the passwd
command warning "Password not changed: failed to write protected password entry."
• Changes the use of the configuration file /etc/svc.conf to /etc/nsswitch.conf to allow netgroup
data to be provided from LDAP, rather than only from NIS.
• Adds the retry option to snmp_request.
• Updates Mobile IPv6 code to be compliant with the latest RFC.
• Enables tcpdump to display encapsulated IPv6 packets sent over the IPv6-in-IPv6 tunnel.
• Corrects a problem in which a reverse zone lookup entry is not added to the
/etc/namedb/named.conf file when configuring a cluster node as a DNS server using the
bindconfig application.
• Resolves a problem in which tcpdump can fail with the message “tcpdump: no VLAN
support for data link type 0xa.”
• Corrects several potential security vulnerabilities where, under certain circumstances, system
integrity may be compromised. These may be in the form of improper file or privilege
management or remote code execution.
Patch 27045.00
OSFKTOOLS540
• Fixes a premature termination of the ofile kdbx extension and warning messages in various
kdbx extensions.
• Fixes problems in the kdbx u and vnode extensions.
• Provides enhanced kdbx debugging features to include a -A flag for route and to keep inpcb
from truncating port numbers.
• Updates Mobile IPv6 code to be compliant with the latest RFC.
126 Tru64 UNIX Patches