HP Tru64 UNIX and TruCluster Server Version 5.1B-5 Patch Summary and Release Notes (March 2009)

• Fixes the search algorithm to differentiate between prived and non-prived UIDs,
and to allow regular expressions in string searches.
• Corrects a problem found wherein the rmtmpfiles script would leave empty
directories in /var/tmp at system startup.
• Fixes a problem that occurs while encoding $@ in the Bourne shell.
• Eliminates the warning message "Using an array as a reference is deprecated"
when running /usr/sbin/siacfg and during system boot on systems using Perl 5.8.0
and higher.
• Corrects a potential floating point error in threaded applications.
• Allows the fuser command to display the reference flag, which indicates the type
of reference made; for example, open, closed, unlinked, or mmapped.
• Fixes a problem with csh that occurs when using a tilde (~) operation in directing
standard input and standard output of a command to a file in a home directory.
• Updates ddr.mod to support new hardware (NHD-6) devices.
• Corrects a problem in which crontab removes its entries and the vi editor truncates
an existing file when a file system is full.
• Corrects the way RPC-based servers handle ill-formed TCP connections.
• Allows mount options that take a value to be correctly processed on a cluster.
• Corrects the tar program to properly handle unusual directory specifications.
• Prevents segmentation faults when a malformed argument vector is passed to
sia_ses_init.
• Fixes several potential security vulnerabilities where, under certain circumstances,
system integrity may be compromised. These may be in the form of improper file
or privilege management.
• Corrects a potential security vulnerability where, under certain circumstances,
system integrity may be compromised. This may be in the form of improper file
access.
• Corrects a problem in which a core dump occurs when using csh from the Japanese
locale.
• Corrects a potential security vulnerability that could result in a Denial of Service
(DoS). This potential vulnerability may be in the form of local and remote security
domain risks.
(SSRT2384 rpc — Severity - High)
• Corrects a potential security vulnerability in which the Home Directory and login
shell attributes for a user account are not suppled to the audit daemon for
authentication failures.
• Fixes a problem in XTI caused by a blocked mutex lock in which a thread attempting
to send an abortive disconnect hangs.
• Installs DECthreads V3.20-029c.
• Fixes a problem with floating point data inconsistencies in threaded applications.
3.4 Summary of Base Operating System Patches 107