======================================================================= Hewlett-Packard DECnet-Plus MUP Release Notes ======================================================================= MUP NUMBER: I64_DPLUSMUP01-V0802 PRODUCT: HP DECnet-Plus V8.2 for OpenVMS I64 UPDATE PRODUCT: HP DECnet-Plus V8.2 for OpenVMS I64 1 KIT NAME: I64_DPLUSMUP01-V0802 2 KIT DESCRIPTION: 2.1 Installation Rating: INSTALL_2: To be installed by all customers using the following feature(s): - DECnet-Plus V8.2 This installation rating, based upon current CLD information, is provided to serve as a guide to which customers should apply this remedial kit. (Reference attached Disclaimer of Warranty and Limitation of Liability Statement) 2.2 Reboot Requirement: Reboot Required. HP strongly recommends that a reboot is performed immediately after kit installation to avoid system instability. If you have other nodes in your OpenVMS cluster, they must also be rebooted in order to make use of the new image(s). If it is not possible or convenient to reboot the entire cluster at this time, a rolling re-boot may be performed. 2.3 Version(s) of DECnet-Plus to which this kit may be applied: DECnet-Plus V8.2 2.4 New functionality or new hardware support provided: No. 3 KITS SUPERSEDED BY THIS KIT: - None. 4 KIT DEPENDENCIES: 4.1 The following kit(s), or later, must be installed BEFORE installation of this, or any required kit: - DECNET_PLUS-V0802 5 FILES PATCHED OR REPLACED: o [SYS$LDR]NET$SESSION_CONTROL.EXE (new image) Image Identification Information image name: "DECNET-PLUS FOR OPENVMS SESSION" image file identification: "V8.2 ECO01" image file build identification: "" link date/time: 3-MAR-2005 21:04:03.28 linker identification: "Linker T02-17" image checksum: D4142595 o [SYS$LDR]SYS$NETWORK_SERVICES.EXE (new image) Image Identification Information image name: "DECNET-PLUS I64 BASE IMAGE" image file identification: "V8.2 ECO01" image file build identification: "" link date/time: 3-MAR-2005 21:03:58.98 linker identification: "Linker T02-17" image checksum: 94E51D5 6 NEW FUNCTIONALITY AND/OR PROBLEMS ADDRESSED IN THE I64_DPLUSMUP01-V0802 KIT 6.1 New functionality addressed in this kit None. 6.2 Problems addressed in this kit 6.2.1 Potential security vulnerability. 6.2.1.1 Problem Description: HP has determined that systems running OpenVMS on I64 have a potential security vulnerability. This vulnerability could be exploited allowing non-privileged users or remote users to cause a system crash. To protect against this potential security risk, HP is making a mandatory update patch available for OpenVMS customers. This patch is provided by installing this I64_DPLUSMUP01-V0802 kit. Images Affected: - [SYS$LDR]NET$SESSION_CONTROL.EXE - [SYS$LDR]SYS$NETWORK_SERVICES.EXE 6.2.1.2 CLDs, and QARs reporting this problem: 6.2.1.2.1 CLD(s) None. 6.2.1.2.2 QAR(s) PTR 75-13-1381 6.2.1.3 Problem Analysis: See Problem Description 6.2.1.4 ECO Version of DECnet-Plus that will contain this change: DECnet-Plus V8.2 ECO02 6.2.1.5 Work-around: None. 7 INSTALLATION INSTRUCTIONS 7.1 Compressed File This kit is provided as a Self Extracting ZIP kit. To expand this file to the installable PCSI file, run the file with the following command: $ RUN I64_DPLUSMUP01-V0802.ZIPEXE 7.2 Installation Command Install this kit with the POLYCENTER Software installation utility by logging into the SYSTEM account, and typing the following at the DCL prompt: PRODUCT INSTALL DPLUSMUP01 /SAVE_RECOVERY_DATA [/SOURCE=location of Kit] The /SAVE_RECOVERY_DATA qualifier is optional but highly recommended. Using this qualifier will allow easy removal of the kit from the system in the event of problems. The kit location may be a tape drive, CD, or a disk directory that contains the kit. The /SOURCE qualifier is not needed if the PRODUCT INSTALL command is executed from the same directory as the kit location. Additional help on installing PCSI kits can be found by typing HELP PRODUCT INSTALL at the system prompt. 7.3 Scripting of Answers to Installation Questions During installation, this kit will ask and require user response to several questions. If you wish to automate the installation of this kit and avoid having to provide responses to these questions, you must create a DCL command procedure that includes the following logical name definitions and commands: o To avoid the BACKUP question, define the following: $ DEFINE/SYS NO_ASK$BACKUP TRUE o To avoid the REBOOT question, define the following: $ DEFINE/SYS NO_ASK$REBOOT TRUE o To save replaced files as *.*_OLD define the following logical name as YES. If you do not wish to save replaced files, define the logical name as NO. Note that if you use the /SAVE_RECOVERY_DATA qualifier (recommended) on the PRODUCT INSTALL command all replaced files will be saved as part of that operation. There is no need to also save files as *.*_OLD: $ DEFINE/JOB ARCHIVE_OLD NO o Add the following qualifiers to the PRODUCT INSTALL command and add that command to the DCL procedure. /PROD=DEC/BASE=AXPVMS/VER=V8.2/SAVE_RECOVERY_DATA o De-assign the logical names assigned For example, a sample command file to install the I64_DPLUSMUP01-V0802 kit would be: $ $ DEFINE/SYS NO_ASK$BACKUP TRUE $ DEFINE/SYS NO_ASK$REBOOT TRUE $! $ PROD INSTALL DNVOSIMUP01/PRODUCER=DEC/BASE=AXPVMS- /VER=V8.2/SAVE_RECOVERY_DATA $! $ DEASSIGN/SYS NO_ASK$BACKUP $ DEASSIGN/SYS NO_ASK$REBOOT $! $ exit 8 COPYRIGHT AND DISCLAIMER: (C) Copyright 2005 Hewlett-Packard Development Company, L.P. Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. DISCLAIMER OF WARRANTY AND LIMITATION OF LIABILITY THIS PATCH IS PROVIDED AS IS, WITHOUT WARRANTY OF ANY KIND. ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR PARTICULAR PURPOSE, OR NON-INFRINGEMENT, ARE HEREBY EXCLUDED TO THE EXTENT PERMITTED BY APPLICABLE LAW. IN NO EVENT WILL HP BE LIABLE FOR ANY LOST REVENUE OR PROFIT, OR FOR SPECIAL, INDIRECT, CONSEQUENTIAL, INCIDENTAL OR PUNITIVE DAMAGES, HOWEVER CAUSED AND REGARDLESS OF THE THEORY OF LIABILITY, WITH RESPECT TO ANY PATCH MADE AVAILABLE HERE OR TO THE USE OF SUCH PATCH.