Jump to content United States-English
HP.com Home Products and Services Support and Drivers Solutions How to Buy
» Contact HP
HP.com home
HP Tru64 UNIX and TruCluster Server Version 5.1B-4: Patch Summary and Release Notes > Chapter 3 Tru64 UNIX Patches

Summary of Base Operating System Patches

» 

»Table of Contents
Content starts here

The following sections provide brief descriptions of the changes delivered in this patch kit and in prior Version 5.1B patch kits.

The code required to make these changes may be delivered by multiple patches. As a result, you may see the same description listed under more than one patch.

Also, because Tru64 UNIX patch kits are cumulative, each new kit contains all of the fixes and enhancements that were provided in earlier kits. This can result in changes to components being made multiple times. For example, a patch may deliver several versions of the same driver. In such cases, the latest version is installed on your system.

Each patch provides fixes to subsets of the operating system. Subset names (listed in italic font in the following lists) consist of three parts; for example, for subset OSFACCT540, the OSF indicates that the subset is part of the base system, the ACCT indicates a category, and the 540 indicates that the subset belongs to the Version 5.1B operating system.

New Patches

The patch summaries in this section describe changes that are new in this release.

Patch 27001.00

OSFACCT540

  • Corrects the action of the dodisk command to skip the commented file systems contained in the /etc/fstab file.

  • Fixes acctcom to exit with proper error message when used with invalid user ID and group ID.

  • Causes the file protections of /var/adm/pacct and ownership of /var/adm/wtmp to act as expected by the accounting utilities.

Patch 27002.00

OSFADVFS540

  • Corrects the following problems with the fixfdmn utility:

    • Fixes fixfdmn so that it will continue when it finds more than one root tag file, rather than exiting with the message “Unable to continue, more than one root tag file.

    • Fixes a potential memory fault while running the fixfdmn.

    • Fixes a problem in which fixfdmn does not properly handle domains with multi-page RBMT files.

  • Fixes the incorrect number of tag pages being returned by some AdvFS user commands.

  • Fixes vrestore command to restore file and directory attributes by default and addresses security issues during the restoration of those attributes.

  • Removes memory leaks from the AdvFS salvage utility.

  • Fixes rare problem in which the vdump/vrestore commands hang when requesting the next tape.

  • Enhances the AdvFS rmvol utility to allow multiple volumes to be removed with one command.

  • Fixes a problem that causes the defragment command to fail with the error message "“defragment: Can't allocate memory

  • Corrects return values from the vfast utility.

Patch 27003.00

OSFADVFSBIN540

  • Fixes a problem that causes the first command that accesses an AdvFS domain to fail if the domain had a full RBMT when mounted.

  • Fixes a deadlock that can happen during failover of global root and var file systems when vfast is enabled on them.

  • Fixes a single thread hang.

  • Fixes a potential deadlock hang between a migration and a flush on a file.

  • Corrects AdvFS quota handling and enforcement to prevent EIO and false out-of-space conditions and account for directory index blocks.

  • Corrects the following problem with read-only and dual mounted file systems: If the system crashes after a read-only dual mount, the next time the system is booted the AdvFS domain panics on the files systems that were previously mounted as read-only dual mount.

  • Fixes a kernel memory fault from imm_page_to_sub_xtnt_map().

  • Fixes AdvFS AIO write error paths so the I/O completion steps are not repeated.

  • Fixes a hang that occurs in file systems between racing memory-mapping threads.

  • Turns a potential AdvFS panic into a domain panic.

  • Corrects a problem with the AdvFS bitfile state where, under certain circumstances, the state of the bitfile is changed without holding the lock that protects the state.

  • Fixes an issue with vfast in which a vfast thread might cause a "kernel memory fault" panic because of a race condition.

  • Fixes a potential panic on an active domain doing heavy I/O while trying to create a new fileset.

  • Fixes problems that occurs when volume expansion (mount -u -o extend) races with other code.

  • Fixes a rare simple lock timeout during domain deactivation.

  • Fixes a potential hang in AdvFS.

  • Converts non-severe system panic calls to AdvFS domain panic calls while renaming files under AdvFS.

  • Corrects a problem in which an ENOSPC error is returned on a fragmented AdvFS file system even though space is available. On a cluster, this can lead to a CFS WRITE ERROR.

  • Fixes a premature out-of-space condition that can occur as a result of repetitively extending the size of the volume.

  • Fixes resource leaks seen after a device file gets revoked.

  • Fixes a delete failure due to a “Disc quota exceeded (EDQUOT)” condition.

  • Fixes a data inconsistency that could result from the failure of an I/O request at the CFS Server due to exceeding the fileset quota.

Patch 27004.00

OSFADVFSDAEMON540

  • Improves the /sbin/init.d/advfsd startup script to allow the user to control the boot time invocation of the advfsd daemon.

Patch 27009.00

OSFBASE540

  • Corrects a problem with the adduser command so that duplicate UIDs are allowed.

  • Corrects a problem seen with -i option of the pr command with respect to white-space substitution.

  • Corrects a problem in which the quotacheck utility may incorrectly report that a disk quota has been exceeded.

  • Corrects default values for YESEXPR and NOEXPR defined in the localedef command and libc to get correct return value from nl_langinfo(YESEXPR) and nl_langinfo(NOEXPR).

  • Updates the audit system to display additional information for the numa_syscalls and msfs_syscall system calls.

  • Corrects a problem with the rm command in which the command fails due to excessive depth when the path name is longer than PATH_MAX.

  • Corrects a problem with the repquota command that causes it to fail with "out of memory for quotause structure."

  • Fixes a mailsetup failure if the host name is “unix.”

  • Corrects a problem in which crash dumps to Fibre Channel swap devices do not always succeed.

  • Fixes the following problems with the acl_set_file() function:

    acl_set_file() fails and returns errno = 22
    acl_set_file() does not fail if file does not exist
  • Corrects a problem with the arena memory allocator. The problem stems from a conflict between libc and libnuma on handling errors from the numa_syscalls system call. For example, an mfs request that fails due to insufficient memory should report back a failure message but instead triggers a segfault in the caller.

  • Resolves a problem that could cause rexec() to hang.

  • Provides a switch that allows users to specify a port number for mountd.

  • Fixes getaddrinfo so it works properly when IPv6 is not configured.

  • Fixes an issue of sendmail registration with PSM

  • Fixes a problem found during invalid options passed to mount while updating UFS file system

  • Enables uudecode to take care of both absolute and symbolic mode while decoding a file.

  • Corrects the message catalogue for /usr/sbin/auditd.

  • Corrects a problem with the cp command by which it continues to be POSIX compliant when the environment variable STDS_FLAG is set to the value ALL.

  • Provides a symbolic representation of the table syscall numeric option when using the audit_tool in "brief" mode.

  • Corrects a problem with the ex, and vi commands so they use the POSIX compliant shell as the default command line interpreter when the SHELL environment variable is set to NULL.

  • Implements the FC-HBA standard and additional FC-HBA API functionality.

  • Fixes an issue with the KZPCC backplane RAID adapter device driver (I2O) that causes its logical disk drives to be identified as SCSI devices.

  • Fixes the chmod command to ensure that umask is taken into consideration when the who(ugoa) field is not specified.

  • Fixes cryptic error messages generated by the newfs command on a volume 1T-512 Bytes.

  • Fixes the sulogin program to work in a cluster.

  • Fixes the find command to ignore "--" if it is given as the first argument.

  • Provides type checking in EvmVarGet wrapper functions.

  • Fixes a problem in SIA by resetting the mechanism's context pkgind on successful return of (set|end)*ent calls.

  • Provides enhancements to the AdvFS rmvol utility, allowing multiple volumes to be removed with one command.

  • Fixes a POSIX standard violation in the strfmon() function by padding the preceding and following spaces of the returned positive value strings to make an equal length between positive and negative values.

  • Fixes a security issue with the C library function getnameinfo().

  • Fixes a problem whereby, in a specific circumstance, a memory fault could occur when creating SCS threads.

  • Fixes sdiff to not show nulls when the -w option is used with more than 198 characters.

  • Corrects the audit_tool output with delimited fields and the output for the "net" and "host" fields.

  • Fixes the /usr/bin/which command to not display an error message when the environment variable SHELL is not set.

  • Corrects a problem with the “rcmgr set” command.

  • Fixes a POSIX standard violation in the strfmon() function by causing preceding and following spaces to be padded to the return value to make an equal length between positive and negative values.

  • Fixes the getnameinfo routine to display an IPv4 address instead of an IPv4 mapped IPv6 address when the BIND mapping does not exist.

  • Fixes issues with "disklabel -e" that occur when extending a disk partition currently in use and open.

  • Allows the fsdb utility to work on a file system image contained in a regular file, as well as a device. Previously, fsdb could analyze only special files, not regular files.

  • Corrects a memory leak problem associated with the clu_get_info API seen on stand-alone systems.

  • Corrects potential security vulnerabilities in the gzip program. These vulnerabilities could be exploited by a remote unauthorized user to execute arbitrary code or cause a Denial of Service (DoS).

  • Fixes a POSIX standard violation in the wcstod() function. Previously, an incorrect pointer was set to the endptr parameter of wcstod() for cases where no conversion was made.

  • Fixes the awk command to ensure that the -f option exhibits the right behavior with numeric strings.

  • Modifies the ex command to return 1 as the exit status when a read-only option with write fails.

  • Changes the return value of swprintf() so it returns the correct value if swprintf() detects an invalid wide-character.

  • Fixes the awk command to ensure that operands that begin with a numeric character or “=” are considered as valid pathnames.

  • Updates the time zone data files in /etc/zoneinfo/ to include the most recent changes from the latest PD time zone source kit (tzdata2005n).

  • Fixes a problem whereby the /proc file system could remain open after a debugging application exits.

  • Corrects a potential security vulnerability issue that could result in unauthorized privileged access or denial of service (DoS)

  • Implements the FC-HBA standard

  • Modifies the cksum command to report the correct file size in the xpg4 environment when the file is greater than 4GB.

  • Fixes the problem of syslogd dying intermittently when sent a SIGHUP to reconfigure.

  • Fixes the problem of a core dump occurring while running the fsck command on a fake UFS file system.

  • Improves space utilization in small MFS file systems by decreasing metadata overhead.

  • Fixes a problem with the mkcdsl command in which the -a option misbehaves when used on a context-dependent symbolic link (CDSL).

  • Fixes RPC timeout error messages in the ypwhich -m command.

Patch 27010.00

OSFBIN540

  • Provides support for identifying references to half-open pipes via the fuser utility.

  • Improves performance for some multithreaded applications running on AlphaServer GS320 and GS1280 class systems.

  • Corrects a scenario in which a spurious wakeup is sent to a process that had interrupted a blocked attempt to set a mandatory file lock.

  • Provides performance enhancements to the vm_overflow feature.

  • Changes the way page migrations occur on a NUMA system to address poor performance due to excessive paging.

  • Corrects an incompatibility between the cpus_in_rad and gh_chunks/rad_gh_regions tunable attributes that could result in a boot failure.

  • Corrects a problem with pagetable page allocations that could leave a thread waiting indefinitely during a fork operation.

  • Corrects "ubc_wire: hash failed" panics on non-NUMA systems.

  • Corrects a "not wired" panic that occurs with System V shared memory and bigpages.

  • Reduces scheduling contention when unmapping shared address space that has an extremely high number of mappers.

  • Handles reservation conflict errors to address cluster node hang during boot.

  • Updates the audit system to display additional information for numa_syscalls and msfs_syscall system calls.

  • Provides a tunable attribute to allow the reserving of a percentage of vnodes for root use.

  • Fixes an issue in the VM subsystem in which a page that is not managed by VM is incorrectly identified as being managed by VM.

  • Fixes a problem in UFS superblock update logic that could result in a failure to report errors encountered when writing cylinder group summary blocks.

  • Provides a new cluster-specific link aggregation distribution algorithm when using LAG in a LAN cluster.

  • Reduces fork/exec overhead on systems with large default stack sizes.

  • Fixes a cluster deadlock/hang issue when a new device is discovered.

  • Fixes a kernel memory fault panic that occurs during a NetRAIN interface failure.

  • Fixes a CPU hang caused by /dev/random.

  • Corrects a condition that causes a process hang and system panic when using System V shared memory and asynchronous I/O.

  • Corrects a minor tuning issue with netisrthreads on NUMA machines. Previously, four netisr threads were started per RAD, whereas the default number of netisr threads per RAD now equals the number of CPUs per RAD.

  • Fixes problems with RPC for configurations with no RAD 0.

  • Fixes a problem in which unkillable processes occur when debugging multi-threaded programs with the totalview debugger on a Sierra Cluster.

  • Fixes an underlying problem in NFS that can trigger an assert failure in CFS. These conditions can be triggered by a failed NFS mount.

  • Resolves a synchronization issue between pageout and exit paths.

  • Introduces sysconfig tunable attibutes for NFS/RPC

  • Fixes multiple panics and application hangs seen when interacting with Process Shared POSIX 1003.1c objects.

  • Fixes the handling of NFS requests that have an erroneous file handle length field.

  • Corrects the output of wired pages and gh regions found in the -P option of the vmstat command when run on a NUMA system.

  • Improves the performance and chances of success of the Tru64 kernel malloc routine, especially when used by drivers which use the M_NOWAIT option.

  • Fixes an invalid kernel memory fault panic in the code responsible for the generation of random numbers.

  • Corrects a defect in the audit subsystem that causes it to fail to record inode information on closed file descriptors.

  • Corrects a problem that occurs after an upgrade from Version 5.1B patch kit 3 to Version 5.1B-3 (PK5) in which the system may fail to boot with the following panic:

    KMF - invalid memory read access from kernel mode
  • Fixes a race within NFS over TCP when connection reaches idle timeout.

  • Improves the performance of Tru64's MACH implementation and also enhances stability while under heavy load.

  • Corrects several potential security vulnerabilities in TCP/IP, including ICMP. These exploits could result in a remote Denial of Service (DoS) from predictable Initial Sequence Numbers (ISNs), network throughput reduction for TCP connections, or the reset of TCP connections.

  • Corrects the following potential security vulnerabilities:

    SSRT4743, SSRT4884 - TCP/IP ICMP (Severity - High)
  • Fixes a panic condition resulting from DVDFS using a deallocated vnode.

  • Fixes a panic condition in the NFS client code resulting from the mishandling of unaligned data on clustered systems.

  • Corrects a kernel memory fault that results from the de-referencing of a null processor pointer encountered when auditing a network event after having sent a SIGKILL to the auditd daemon.

  • Forces the use of a non-cluster interconnect address in audit records.

  • Fixes a kernel memory fault panic in IPv6, and corrects improper or leaked reference counts with IPv6 route entries.

  • Fixes a panic that occurs when using the TCP SACK option.

  • Fixes a kernel memory fault panic that occurs when the vm tunable anon_rss_enforce is set.

  • Fixes a socket kernel memory leak.

  • Fixes a race condition in the UBC.

  • Corrects tracking of controlling terminal reference to session structure.

  • Corrects a problem that causes the transmission of duplicate FIN packets, which could result in a stuck connection.

  • Allows systems with multiple paths to a large number of devices to boot faster.

  • Fixes an issue with the NFS client async daemon that can occur in specific NUMA configurations. These configurations would have RAD numbers that are not part of the partition but within the range of valid RAD numbers for that partition.

  • Fixes an fsync (NFS/UFS) operation that failed to always flush all dirty pages.

  • Fixes a “lock_done: lock not currently owned” panic that occurs early in a boot.

  • Resolves lock management issues within the UBC that can lead to “mcs_unlock: current lock not found” and “mcs_lock: time limit exceeded” panics.

  • Removes NFS warning message about malaligned RPC messages.

  • Makes the poll() function compliant with revised UNIX98 standards.

  • Fixes a hang caused by the Async I/O subsystem.

  • Corrects a problem with the mount command in which issuing a mount -l command lists the property of a dual mounted fileset incorrectly as nodual.

  • Fixes a problem that causes some TCP connections to reset when sending large amounts of data (more than 2GB) to a very efficient receiving host.

  • Corrects the incompatibility of the waitpid() system call with revised UNIX98 standards.

  • Fixes an internal kernel declaration for variable maxuthreads that resolves the following types of kernel failures when the sysconfig value for max_threads_per_user in the proc subsystem is set to a value larger than 2147483647:

    thread_create() failed for pid # : maxuthreads (=-1) exceeded for uid 201
    thread_create() failed for pid 1479950: maxuthreads (=-#) exceeded for uid 15
  • Fixes a panic resulting from CDFS using a deallocated vnode.

  • Corrects a problem in which the tmt_walk_list() function in nifftmt.c mallocs memory for the tmt_state_info array, but fails to free memory when thread terminates.

  • Reduces the default value of IPFRAGTTL from 60 to 18 to avoid reassembly problems.

  • Modifies the setluid system call to handle the license correctly when a non-root user switches to different non-root user using login command.

  • Corrects a problem in which elevated load averages were reported on NUMA class systems.

  • Fixes resource leaks seen after a device file is revoked.

Patch 27011.00

OSFBINCOM540

  • Fixes a rare kernel memory fault problem that occurs during an ES80 boot.

  • Provides a new cluster-specific link aggregation distribution algorithm when using LAG in a LAN cluster.

  • Allows for control ports to be deleted using the hwmgr command.

  • Fixes a potential deadlock hang between a migration and a flush on a file.

  • Addresses a potential I/O performance bottleneck in which the tape driver may select the same path for all tape drives in a system containing multiple HBAs and multiple tapes. The tape driver can now assign different paths to different tape drives to improve tape I/O performance.

  • Fixes problems that happen when volume expansion (mount -u -o extend) races with other code.

  • Corrects a C++ compilation error when including conf.h.

  • Makes the poll() function compliant with revised UNIX98 standards.

  • Revises the btcreate utility to overcome the 32MB firmware limitation on SAS kernel size.

  • Reduces the default value of IPFRAGTTL from 60 to 18 to avoid reassembly problems.

Patch 27012.00

OSFC2SEC540

  • Fixes problems with prpasswdd and rpc.yppasswdd that can cause these daemons to consume high CPU time when run in a TruCluster Server environment.

  • Allows root to log in on the console when Enhanced Security is enabled and u_numunsuclog exceeds u_maxtries.

Patch 27013.00

OSFCDEAPPS540

  • Resolves security vulnerabilities within the X PixMap routines used in the IMG library.

Patch 27019.00

OSFCDEMIN540

  • Resolves a problem that occurs when opening big file using dtfile.

Patch 27020.00

OSFCLINET540

  • Fixes a problem with the niffconfig command whereby certain characters in the interface name may be ignored.

  • Fixes a problem in the /etc/.mrg..inetd.conf merge script that causes customer-specific changes in the /etc/inetd.conf file to be ignored.

  • Fixes a problem with inetd -L in which a cluster loops in shutdown -c or rcinet start.

  • Upgrades BIND 8 to BIND 9.

  • Fixes a problem that occurs when starting inetd on all RADs in which there are holes between the RADs.

  • Fixes a potential remotely exploitable Denial of Service (DoS) vulnerability in the File Transfer Protocol server daemon, (ftpd) in which under certain circumstances authorized users could cause an ftp server to become unresponsive.

  • Adds a -n option to the ftpd daemon to prevent login delays and time-outs in an environment where host name resolution is sluggish.

Patch 27021.00

OSFCMPLRS540

  • Corrects default values for YESEXPR and NOEXPR defined in the localedef command and libc to get correct return value from nl_langinfo(YESEXPR) and nl_langinfo(NOEXPR)

  • Resolves a problem that could cause the rexec() function to hang.

  • Fixes the getaddrinfo() routine to work properly when IPv6 is not configured.

  • Fixes memory leaks in the libc getipnodebyname routine, which is used by ldapcd. The leaks caused intermittent SSO SIA authentication failures.

  • Fixes an issue with the KZPCC backplane RAID adapter device driver (I2O) that causes its logical disk drives to be identified as SCSI devices

  • Fixes the mountd daemon to prevent it from becoming unresponsive at a few large sites.

  • Fixes a problem in SIA by resetting the mechanism's context pkgind on a sucessful return of (set|end)*ent calls.

  • Fixes a POSIX standard violation in the strfmon() function. The preceding and following spaces will be padded to return value to make equal length between positive and negative values.

  • Fixes a security issue with the C library routine getnameinfo().

  • Fixes getnameinfo() to display an IPv4 address instead of an IPv4 mapped IPv6 address when the BIND mapping does not exist.

  • Fixes a POSIX standard violation in the wcstod() function. An incorrect pointer was set to the endptr parameter of wcstod() for cases where no conversion was made.

  • Fixes the swprintf() function to return the correct value if it detects an invalid wide-character.

  • Fixes the ypwhich -m command to prevent RPC timeout error messages.

Patch 27028.00

OSFENVMON540

  • Fixes the envmond daemon to use EVM events for monitoring environmental events.

  • Fixes envmond to report redundant power supply restoration on systems that support environmental monitoring through the sysconfig command.

Patch 27031.00

OSFEXER540

  • Corrects the memory exerciser user.syslog message from "Started" to "Stopped".

Patch 27034.00

OSFHWBASE540

  • Enhances hwmgr show functionality for scsi path information.

  • Provides for FCP-2 Link Level Error Recovery for tape operations so that tape I/O can be successfully performed during periods of link errors, noisy lines, bit errors, and lost or corrupted data frames.

  • Enables Tru64 UNIX to work with tape devices that do not support non-tagged commands.

  • Fix for netstat trying to resolve the IP address 0.0.0.0 (INADDR_ANY) to a hostname.

  • Fix to netstat, kdbx displaying partial kernel addresses.

Patch 27035.00

OSFHWBIN540

  • Prevents the state machine performing Bad Block Replacement on a disk for which BBR is disabled.

  • Fixes a rare panic during boot on GS1280/ES80/ES47.

  • Fixes a "lock_fault" panic that can happen during system startup and shutdown.

  • Corrects the handling of certain disk “not ready” conditions to prevent long I/O stall times.

  • Provides performance enhancements based on the vm_overflow feature added in V5.1B-3.

  • Changes the way page migrations occur on a NUMA system to address poor performance due to excessive paging.

  • Corrects a problem with pagetable page allocations that can leave a thread waiting indefinitely during a fork operation.

  • Corrects the cause of "ubc_wire: hash failed" panics on non-NUMA systems.

  • Correct the cause of "not wired" panics with System V shared memory and bigpages.

  • Fixes an issue in the VM subsystem, wherein a page that is not managed by VM is incorrectly identified as being managed by VM.

  • Provides enhanced hwmgr show functionality for scsi path information.

  • Fixes a problem in which crash dumps to Fibre Channel swap devices do not always succeed.

  • Allows for control ports to be deleted by the hwmgr utility.

  • Fixes a cluster deadlock/hang issue that occurs when a new device is discovered.

  • Fixes a problem in which the “hwmgr refresh scsi -all” command does not always remove stale paths.

  • Corrects the cause of a process hang and system panic that occurs when using System V shared memory and asynchronous I/O.

  • Provides preferred path support for active-active, asymmetric storage devices.

  • Improves tape read/write command reliability in SANs by allowing the use of FCP-2 Link Level Error Recovery (LLER) for read and write tape commands if the destination Fibre Channel port supports LLER.

  • Enables Tru64 UNIX to work with tape devices that do not support non-tagged commands.

  • Addresses a potential I/O performance bottleneck in which the tape driver may select the same path for all tape drives in a system containing multiple HBAs and multiple tapes. With this change, the tape driver can assign different paths to different tape drives to improve tape I/O performance.

  • Addresses a NUMA memory initialization issue that can lead to system instability.

  • Allows systems with multiple paths to a large number of devices to boot faster.

  • Fixes the cause of the "pmap_pagemove" panic that occurs with some third party drivers.

  • Fixes a problem in which the changer code causes a kernel memory fault.

  • Fixes an issue with the KZPCC backplane RAID adapter device driver (I2O) that causes its logical disk drives to be identified as SCSI devices.

  • Makes adapter error messages more descriptive.

  • Corrects a memory leak.

  • Fixes the problem with the hwmgr utility displaying the wrong output for network device MTU.

  • Addresses an issue in which the cam changer driver does not unwire user pages when a path fails.

  • Fixes a problem of system hangs that occur due to combined memory leak and DMA resource leak in the EMX driver during the processing of an UNTAGGED request like device/lun reset.

  • Fixes a problem with KZPAC (SWXCR controller) that occurs when an open() issued on a deleted unit succeeds and a read I/O request results in a system crash.

  • Allows systems with multiple paths to a large number of devices to boot faster.

  • Changes the way the aha_chim OSM driver handles timeouts. Previously, timeouts were handled by registering a timer in the kernel callout queue for each I/O that timed out. As a result, a burst of aha_chim timeouts could flood the kernel callout queue. The new method times the I/O itself, so no entries are put in the kernel callout queue.

  • Ensures that the alt firmware is stopped before freeing buffers when the alt card is re-initializing.

  • Fixes a problem with the alt driver regarding receiving 9000-byte packets.

  • Provides transmit/receive flow control settings and driver revision to the bcm Gigabit Ethernet driver boot time startup messages.

  • Provides a fix for the proper operation of DS25 onboard bcm LEDs.

  • Fixes an issue in the error recovery procedure of CISS adapters.

  • Improves failure detection handling due to command timeouts.

  • Fixes a potential race condition that causes a kernel memory fault by the changer code.

  • Allow systems with multiple paths to a large number of devices to boot faster.

  • Fixes inappropriate handling of failures during tape changer opens.

  • Corrects a problem in which the consvar command can panic or fail without error when setting some console environment variables.

  • Fixes problems in the aha_chim (KZPEA) driver.

  • Corrects a potential hang issue with tapes when their SCSI address changes.

  • Enables FCP-2 Link Level Error Recovery for tape operations.

  • Corrects the handling of LS_RJT messages in the emx driver.

  • Corrects the cause of a kernel memory fault panic in the KZPEA driver.

  • Fixes a simple lock fault in wakeup_async_waiter.

  • Fixes a problem with the environmental monitoring daemon on partitioned AlphaServer GS80/GS160/GS320 systems.

  • Provides new EMX driver hardware attributes.

  • Improves selection timeout handling in RAID services.

  • Fixes a simple lock fault in cdisk_bbr_comp.

  • Fixes an issue related to aha_chim driver blocking in interrupt context.

  • Fixes the cause of a kernel memory fault that occurs in the ctape_generic_pass_thru routine when bus resets were detected.

  • Prevents system hangs due to certain internal Fibre Channel adapter failures.

  • Fixes an issue in which the hwmgr utility displays an incorrect MTU size for a network interface.

Patch 27038.00

OSFINCLUDE540

  • Corrects a problem introduced in Tru64 UNIX V5.1B-2 that causes a syntax error when compiling programs using the header file /usr/include/netdb.h and defining _XOPEN_SOURCE_EXTENDED.

  • Corrects the assert macro definition in /usr/include/assert.h.

Patch 27039.00

OSFINET540

  • Provides changes in the bindconfig application (sysman dns) to support BIND 9 version.

  • Addresses a formatting error in the output of the tcpdump -r command whereby timestamps may be displayed as negative numbers.

  • Fixes invalid permission and ownership of the /usr/bin/deliver IMAP image.

  • Fixes a problem with the TruCluster software product running as a NIS server without Enhanced Security installed.

  • Upgrades BIND 8 to BIND 9.

  • Fixes a cyradm memory fault for an improper directory entry in the /etc/imapd.conf file.

  • Corrects the cause of RPC timeout error messages in the ypwhich -m command.

  • Adds support to decode TCP SACK packets in tcpdump.

  • Corrects the decoding of NFSv3 sattr structure in tcpdump.

Patch 27045.00

OSFKTOOLS540

  • Enhances the inpcb kdbx extension to display additional PID information.

  • Updates the kdbx audit extension to accommodate a new device driver state and optionally fetch data appropriately.

  • Enhances the kdbx netstat extension.

Patch 27050.00

OSFLIBA540

  • Updates the audit system to display additional information for the numa_syscalls and msfs_syscall system calls.

  • Fixes problems in which acl_set_file() fails and returns errno = 22 and does not fail if a file does not exist.

  • Corrects a problem in the arena memory allocator that stems from a clash between libc and libnuma on handling errors from the numa_syscalls system call.

  • Provides type checking in EvmVarGet wrapper functions.

  • Enhances the AdvFS rmvol utility to allow multiple volumes to be removed with one command.

Patch 27051.00

OSFLSMBASE540

  • Fixes a problem with vold logging (vold -k -x log) in which the default log file cannot be created.

  • Improves LSM's volunmigrate disk processing to produce more informative error messages on command line errors rather than defaulting to a general usage statement.

  • Corrects volunmigrate to allow for the full pathname to the device as input and to properly reject partitions with an invalid partition length.

  • Fixes an issue whereby the volevac command can appear hung when the number of volumes exceeds 512.

  • Provides enhancements to LSM hot-sparing.

  • Fixes a problem of adding LUNs off a SWXCR controller to LSM.

  • Fixes an issue seen in CLSM that causes a diskgroup import to fail when clsm collision proposals are seen in messages file.

  • Fixes a LSM diskgroup deport problem.

  • Prevents a "Too Many Volumes" error when attempting to add a volume and the maximum volumes allowed has not been reached.

  • Fixes an issue with the initialization of large disks.

  • Fixes an issue seen when using KZPAC/SWXCR disks in LSM.

Patch 27052.00

OSFLSMX11540

  • Prevents a process hang occurring when large I/O's are performed on multiple drl-enabled LSM volumes simultaneously on Multi-CPU systems.

  • Causes zero length I/O requests to be flagged with the proper error message to the user rather than causing a panic.

  • Fixes a “clsm_config" dlm_lock deadlock issue.

Patch 27054.00

OSFMANOP540

  • Updates the uucp(1), gethostbyaddr(3), getnameinfo(3), sys_attrs_io(5), kdbx(8), named(8), and volwatch(1) reference pages.

  • Updates the dd(1), ksh(1), vi(1), aio_return(3), sshd2_config(4), emx(7), dxshutdown(8), newfs(8), prpasswdd(8), sshd2(8), and ypset(8) reference pages.

Patch 27055.00

OSFMANOS540

  • Updates the following reference pages: uucp(1), gethostbyaddr(3), getnameinfo(3), sys_attrs_io(5), kdbx(8), named(8), and volwatch(1) .

  • Updates the following reference pages: awk(1), chmod(1), cp(1), ex(1), find(1), rm(1), uuencode(1), vi(1), and which(1).

  • Provides the dig(1) and host(1) reference pages to support BIND 9.

  • Updates the following reference pages: poll(2), wait(2), EvmVarSet(3), sys_attrs_cam(5), sys_attrs_cfs(5), sys_attrs_generic(5), sys_attrs_inet(5), sys_attrs_vfs(5), and sys_attrs_vm(5).

  • Adds a new reference page, sys_attrs_nfs(5).

  • Updates the sys_attrs_rdg(5)reference page to document an increase in the maximum number of objects in the RDG endpoint and buffer list.

  • Adds the named.conf(5) and rndc.conf(5)reference pages to support the upgrade to BIND Version 9.

  • Updates the following reference pages: btcreate(8), btextract(8) collect(8), disklabel(8), envconfig(8), fsdb(8), ftpd(8), hwmgr_show(8), mountd(8), rmvol(8), and ddr.dbase(4). Also adds the following new reference pages to support BIND 9: dnssec-keygen(8), dnssec-makekeyset(8), dnssec-signkey(8), dnssec-signzone(8), named-checkconf(8), named-checkzone(8), nsupdate(8), rndc(8), and rndc-confgen(8).

  • Updates the dd(1), ksh(1), vi(1), aio_return(3), sshd2_config(4), emx(7), dxshutdown(8), newfs(8), prpasswdd(8), sshd2(8), and ypset(8) reference pages.

Patch 27060.00

OSFNETCONF540

  • Corrects several potential security vulnerabilities that have been reported on systems using an IPsec configuration of tunnel mode ESP without authentication. Under certain circumstances, a remote attacker could force an error so that a portion of a plain-text message can be intercepted by the attacker. Corrects the following vulnerability:

    SSRT5957 - IPsec (Severity - High)

Patch 27062.00

OSFNFS540

  • Adds a name and IP address cache to NFS mountd to limit problems seen with DNS timeouts.

  • Corrects a problem with pcnfsd that occurs when it is running in a cluster and sends the member's IP address instead of the cluster alias.

  • Fixes the warning message in the daemon.log file when automount starts.

  • Provides an option that allows users to specify port number for mountd.

  • Fixes rpc.lockd to send UNIX authentication.

  • Corrects a problem in which autofs skips exported file systems that belong to netgroups in the remote NIS domain, while a mount command for the same exported file system works.

  • Fixes problems due to mountd not blocking SIGHUP when processing NFS exported file systems.

Patch 27065.00

OSFOEMBASE540

  • Updates Tru64 UNIX version information in accordance with HP rebranding efforts.

Patch 27068.00

OSFPGMR540

  • Fixes a sendmail registration issue with PSM.

Patch 27069.00

OSFPRINT540

  • Provides LPD support for the following HP Printers:

    • Color LaserJet 4650

    • Color LaserJet 9500

    • LaserJet 4200

    • LaserJet 4250

    • LaserJet 4300

    • LaserJet 4350

    • LaserJet 9040

    • LaserJet 9050

  • Fixes a problem with lpstat -o in handling hyphens in printer names. If there is a hyphen in printer name, lpstat -o was interpreting it as a job-id instead of printer name.

Patch 27075.00

OSFSER540

  • Fixes a panic on a system with an Oxygen VX1 graphics card when the X server is killed while it is starting up.

Patch 27077.00

OSFSERVICETOOLS540

  • Corrects a problem that can cause the collect utility to die from a memory access fault on systems with a large number of AdvFS domains and filesets.

  • Provides the collect utility with support for long disk names.

  • Corrects a potential security vulnerability that could result in non-privileged users gaining unauthorized privileged access on the system.

  • Provides the ability for the collect utility to salvage data files with missing termination records.

  • Provides the collect utility with the ability to report local and remote I/O access statistics for cluster storage devices in a TruCluster Server environment.

Patch 27079.00

OSFSYSMAN540

  • Fixes a smsd core dump problem in a cluster.

  • Fixes repeated AdvFS domain panics triggered by smsd.

  • Fixes a problem in dxaccounts, where the Modify option dumps core when more than one NIS user is selected on the NIS client.

  • Corrects a problem in the SysMan advfsmgr utility, where the size of a very large fileset is shown as zero.

  • Fixes a problem where sysman -station does not work in the French locale.

Patch 27084.00

OSFUUCP540

  • Corrects a problem with the uucp command in which it changes the time stamps of the destination file when the destination file already exists as a directory.

Patch 27085.00

OSFX11540

  • Corrects a problem that occurs when attempting to open a Java applet on a V1.7 Mozilla browser displayed from a Redhat Linux RHEL 3 (update 6) to a Tru64 UNIX V5.1B-3 graphics console. The browser closes and dtwm spins at 99% CPU usage.

  • Resolves security vulnerabilities in X PixMap routines used in the Motif library.

Patch 27094.00

OSFXLIBA540

  • Corrects a problem that occurs when attempting to open a Java applet on a V1.7 Mozilla browser displayed from a Redhat Linux RHEL 3 (update 6) to a Tru64 UNIX V5.1B-3 graphics console. The browser closes and dtwm spins at 99% CPU usage.

Patch 27100.00

OSFXSYSMAN540

  • Fixes a problem in dxaccounts in which the Modify option dumps core under certain circumstances.

Patch 27106.00

OSFIPSECBASE540

  • Corrects multiple potential vulnerabilities identified on HP Tru64 UNIX operating systems running IPSec, which uses the Internet Security Association and Key Management Protocol (ISAKMP). The vulnerabilities could be exploited remotely to cause Denial of Service (DoS).

Patch 27107.00

OSFLDPAUTH540

  • Allows the ldapcd to exit when there is a permanent error. When ldapcd exits, init respawns the daemon allowing ldapcd to recover and function normally.

Patch 27113.00

OSFSSHBASE540

  • Corrects a potential issue with scp2 and sftp2.

  • Fixes the cause of memory leaks in sshd.

Patch 27115.00

OSFSSOW2K540

  • Fixes memory leaks in the libgssldap library used by ldapcd. The leaks caused intermittent SSO SIA authentication failures.

Patches Delivered in Prior Kits

The following patches were delivered in prior Version 5.1B patch kits. These patches will be installed on your system if they are newer than the last patch kit you installed.

Patch 27001.00

OSFACCT540

  • Fixes the fwtmp command so it does not display invalid (negative) PIDs when the number of decimal digits of PID value exceeds 5.

  • Corrects a potential security vulnerability where, under certain circumstances, system integrity may be compromised. This may be in the form of improper file or privilege management.

  • Corrects an error in the script in lastlogin.sh.

  • Makes start up scripts in /sbin/init.d world readable.

  • Corrects the following problems found in accounting commands:

    • Resolves the differences in the CPU time and connect time found during the conversion of accounting reports from ASCII format to binary and again back to ASCII.

    • Resolves the differences in CPU time found in the output of the acctcom and acctmerg commands for the same input file.

    • Fixes the way accounting files are referenced using CDSLs.

    • Corrects the display of the header from acctcom when accounting is first started.

    • Corrects an error message during execution of the runacct command.

    • Enables acctcom to read more than one input file.

    • Enables acctcom to work with pipes.

  • Fixes the acctcom command with respect to the display of tty lines.

  • Corrects a problem in which accounting reports show the wrong connection time for the users who remain logged in during the execution of runacct.

  • Enables the acctcon1 command to calculate the connect time for local logins in case of run level changes.

Patch 27002.00

OSFADVFS540

  • Corrects a potential security vulnerability where, under certain circumstances, system integrity may be compromised. This may be in the form of improper file access.

  • Provides enhancements for file system suitlets.

  • Improves AdvFS informational messages as follows:

    • Advscan reports if a domain has all of its volumes, but they are stored in a different directories. This scenario will cause mount to fail.

    • The AdvFS I/O error message includes the location of a file that will help users to translate the error number into an error message.

  • Prevents erroneous display of DMAPI messages while using the showfile command.

  • Fixes a problem in which the verify utility core dumps if it encounters a specific type of metadata inconsistency.

  • Improves the information provided in an error message that is displayed when the chfile command to display an informative error message if it fails while trying to enable data logging.

  • Modifies the nvbmtpg utility to display all the data in a specified mcell only if the -v option is selected.

  • Fixes a problem where defragmentation can fail if the process can not obtain enough memory.

  • Provides support for Smart Array disk controllers. Without this patch, if the Smart Array product is installed on the system, the SysMan Station hardware view will fail to operate.

  • Corrects the error message returned when trying to migrate striped files when the -s option is omitted.

  • Makes the following changes to the vdump, rvdump, and vrestore commands:

    • Causes vdump and rvdump to report when all hard links siblings cannot be archived through the specified path and causes them to correct the bytes to backup estimate calculation when hard links are archived.

    • Causes vdump and vrestore to act as expected upon receiving an interrupt (^C).

    • Fixes vdump and vrestore to pick up correct messages in all locales.

    • Causes vdump to avoid some unnecessary function calls, thereby allowing faster vdumps.

    • Fixes vrestore to display bit file attributes with the -l option.

    • Prevents vrestore from failing during a remote system call.

    • Causes vrestore to display a file and directory name along with the error message when the command fails to set a property list.

    • Prevents vrestore from dumping core when a tape has a smaller blocksize than expected.

    • Allows vrestore to handle no-rewind tapes properly.

    • Lets vrestore read environment variables for a user-defined device name.

    • Allows attributes to set to the top level-directory.

    • Disallow block sizes greater than 64 K. (This was a new feature added in Patch Kit 2 which caused forward compatibility problems.)

    • Causes files of less than 512 bytes to be properly backed up.

    • Corrects a cluster drd bandwidth problem that occurs when a restore is attempted via a private tape drive that is not on the current node.

    • Corrects a condition that could cause the misinterpretation of the archive version in certain locales, causing vrestore to abort.

  • Corrects several problems with the fixfdmn utility:

    • Shortens the time it can take to repair large AdvFS file domains.

    • Improves the capability of fixfdmn to fix invalid extent data.

    • Improves the secure handling of temporary files by fixfdmn.

    • Allows fixfdmn to repair a rare on-disk structure problem with directories. This condition only shows up on a domains with multiple volume in which property lists are used.

    • Improves the ability of fixfdmn to fix on-disk structure version 3 domains.

    • Fixes several rare cases where fixfdmn could either fail to correct a domain or incorrectly make changes to a valid domain.

  • Fixes many small problems with the dsfmgr command.

  • Provides protection against a class of potential security vulnerabilities called buffer overflows. Buffer overflows are sometimes exploited in an attempt to subvert the function of a privileged program and possibly execute commands at the elevated privileges if the program file has the setuid privilege. This patch allows a system administrator to enable memory management protections that limit potential buffer overflow vulnerabilities.

  • Corrects a problem with the advfsstat command printing negative values for statistics that are over 10 decimal digits long.

  • Corrects several rare cases in which fixfdmn either did not fix, or incorrectly fixed data inconsistencies on AdvFS file domains. On large AdvFS file domains, this patch shortens the time it takes to repair them.

  • Causes vdump and rvdump to report when all hard link siblings cannot be archived through the specified path.

  • Causes vdump and rvdump to correct the bytes-to-backup-estimate calculation when hard links are archived.

  • Enhances /sbin/advfs/tag2name to print out the name of the associated directory, given the tag of an index file.

  • Allows fixfdmn to repair a rare on-disk structure problem with directories. This condition only shows up on a domains with multiple volume in which property lists are used.

  • Corrects several very rare cases where fixfdmn incorrectly fixes certain AdvFS file domains.

  • Causes the vdump -C option to display compression ratio.

  • Causes vrestore to display error message for end of tape.

  • Identifies non-tape target device during rvdump and rvrestore actions.

  • Improves the ability of fixfdmn to fix on-disk structure version 3 domains.

  • Corrects the value nvbmtpg prints for fs_stat.st_unused_1.

  • Ensures that a stripe does not succeed if a write precedes it.

  • Corrects the RBMT free mcell count for multipage RBMTs as displayed by nvbmtpg.

  • Allows the maximum directory entry name size in the vods tools.

  • Corrects several rare cases where fixfdmn incorrectly fixes certain AdvFS file domains.

  • Modifies defragcron.sh to avoid accidentally deleting the /dev/null.

  • Enables the vfast utility to run on a standalone system.

  • Fixes the vfast utility error "vfast: cannot get frag list; 14 - Bad address"

  • Fixes problems with vdump to resolve filesets mounted on a CDSL.

  • Fixes problems with vrestore to restore appropriate ACLs on the directories and sub-directories.

  • Corrects a problem that occurs when fixfdmn is run with an invalid fileset argument and the user is prompted if exit or run it against all the filesets in the domain. If exit fixfdmn is selected, changes may be made to the domain, which could cause problems.

  • Modifies vdump and vrestore to support autoloader or manual loader when the dump size exceeds single tape size

  • Modifies vdump and vrestore so they can be run as cron or batch jobs.

  • Fixes a problem in which the SysMan menu Manage AdvFS File Systems application does not retrieve the volume attributes correctly.

  • Enforces the validation of incorrect date which would go unchecked with the salvage -d option

  • Causes vdump to display the correct number and percentage of bytes to back up when a directory with symbolic links is dumped.

  • Modifies vfast so it displays the correct statistics data for the -L extents option.

  • Causes vrestore to display the correct number of volumes on which the file is striped and to display a new message when the striped file is restored on a single volume.

  • Fixes a situation in which vdump exits with message "Not enough memory to generate link table."

  • Fixes problems with vrestore that wrongly sets ownership/permissions on the top level directory.

  • Fixes a segmentation fault by the salvage utility.

  • Fixes a race condition between two threads in defragment to prevent it from looping indefinitely.

Patch 27003.00

OSFADVFSBIN540

  • Improves AdvFS informational messages as follows:

    • Advscan now reports if a domain has all of its volumes, but they are stored in a different directories. This scenario will cause mount to fail.

    • The AdvFS I/O error message now includes the location of a file that will help users to translate the error number into an error message.

  • Prevents race conditions that could cause a kernel memory fault while doing a migrate and a rmvol on a striped file.

  • Modifies the CFS flushing behavior during an rmvol.

  • Helps reduce the size of extent maps of clone files cases where the original is modified extensively under direct I/O.

  • Enhances /sbin/advfs/tag2name command to print the name of the associated directory when given the tag of an index file.

  • Corrects a potential problem with modifying files via direct I/O when there is a clone fileset.

  • Fixes a race during AdvFS volume removal that can cause a panic in the bs_osf_complete() routine.

  • Fixes a problem when monitoring I/O via advfsstat.

  • Changes the behavior of migrate_normal and migrate_stripe when migrating an original file that has a clone. If the clone was marked out of sync, migrate could come back with E_CLONE_OUT_OF_SYNC even though the migrate succeeded. Now this case is caught, and handled.

  • Fixes a problem in which a domain panic may occur in idx_lookup_node_int or bs_frag_dealloc under heavy file system activity, generating one of the following messages:

    idx_lookup_node_int: bs_refpg failed
    bs_frag_dealloc: rbf_pinpg (4) failed, return code = -1035
  • Fixes a part of AdvFS migration code in order to prevent rmvol "Can't remove volume" error.

  • Replaces the system panics caused by "Can't clear bit twice" with a domain panic.

  • Forces a domain panic instead of a system panic if AdvFS metadata is discovered to be incorrect in frag_group_dealloc.

  • Fixes a problem in which a hang may occur when a rmvol operation is performed after a cluster node failure during volmigrate, volunmigrate, or frag file migration.

  • Fixes a problem in which a crash occurs when an AdvFS file system reports I/O errors and enters into a domain panic state. The AdvFS error cleanup would panic on an invalid pointer and report an "invalid memory read access from kernel mode" panic message.

  • Fixes a standard violation on AdvFS.

  • Helps prevent kernel memory faults in AdvFS.

  • Fixes a problem where gh_min_seg_size could not be set below 8M.

  • Corrects a race condition in AdvFS in which it avoids a potential stranded log record in memory that does not get out to disk.

  • Prevents a potential hang during a reboot after a recent domain panic.

  • Prevents a panic in a cluster that when a fileset mounted -o dual is failed over or unmounted during a shutdown.

  • Fixes a possible kernel system hang in vfast when shutting down or rebooting the system.

  • Fixes a problem in file property lists where the maximum length of a property list name was limited to 245 characters. The new limit is 255.

  • Improves the performance of AdvFS under heavy I/O loads.

  • Avoids a silent infinite loop in vdump by correcting the AdvFS system call OP_GET_BKUP_XTNT_MAP. The call will now return the valid xtntCnt when it fails due to E_NOT_ENOUGH_XTNTS.

  • Adds defensive programming to stat.h to avoid stat.h getting confused if one of its internal temporary #defines is defined before stat.h is processed.

  • Corrects an internal AdvFS check that was always returning true.

  • Improves the scalability and performance of AdvFS.

  • Allows AdvFS to record if a domain panic has occurred, even if a system panic results.

  • Replaces two potential panics in AdvFS with domain panics.

  • Provides scalability improvements to AdvFS that will help reduce lock contention and improve performance.

  • Fixes an AdvFS path that can cause a panic in the advfs_page_busy() routine.

  • Fixes a deadlocking problem in the kernel where a file open on a clone could hang when ACLs are enabled.

  • Fixes a hang that can occur during the renaming of an AdvFS file.

  • Displays the correct error message for freezefs -q on a non-AdvFS file system.

  • Adds comment to reserve 0x10000000 and 0x20000000 for AutoFS flags.

  • Prevents a O_DSYNC write failure under the following situation:

    1. The user creates a new file.

    2. Closes the file.

    3. The vnode for the file is recycled.

    4. Reopens the file with the O_DSYNC flag.

    5. Writes to the file, overwriting already allocated storage.

    6. The write from step 5 returns to the application.

    7. The system crashes.

  • Corrects the NFS server's handling of files open for direct I/O.

  • Fixes an internal problem in the kernel's AdvFS, UFS, and NFS file systems where extended attributes with extremely long names (greater than 247 characters) could not be set on files. The new limit is 254 + a null string terminator.

  • Corrects a problem that can produce the following symptoms:

    • When producing a clone of a file (that is, a fileset has been cloned and one of its files is being written to) or when migrating a file (defragment, migrate, balance, rmvol), directories lose attributes and are seen as files, and files lose their ACLs and other attributes under the following circumstances:

      • On multi-volume domains with a volume that is out of space

      • By the use of a property list on a multi-volume domain

    • The rmvol command enters into an infinite loop while trying to move a file from one volume to another.

  • Fixes a problem where threads can hang when performing a malloc() function.

  • Prevents a kernel memory fault panic in _OtsMove when going through the fs_read() routine.

  • Prevents a potential hang during a umount if a domain_panic has been encountered.

  • Provides a workaround for a domain panic when a data inconsistency in the deferred-delete list of an AdvFS file system is detected.

  • Corrects idle-wait time accounting within the AdvFS file system, as reported by vmstat -w.

  • Corrects a condition in which command response deteriorates to about 30 seconds when doing an rmvol on a domain with a volume containing large files (8 GB).

  • Removes the obsolete function bs_bfdmn_flush_all.

  • Prevents a potential unaligned memory crash when ACLs are on.

  • Eliminates the lock_terminate: lock owned panic.

  • Fixes a problem where data from an AdvFS file with a frag could be written to an incorrect location if an NFS client grew the file.

  • Fixes an AdvFS asynchronous direct I/O problem that can cause a thread to hang.

  • Fixes a problem encountered where a truncated AdvFS file erroneously zeros data for the remaining leading segment of the file.

  • Corrects a condition that causes a panic resulting from a kernel memory fault in access_invalidate.

  • Corrects a problem in mount or domain activation after a panic, where a fileset (domain) cannot be mounted without running fixfdmn.

  • Improves performance for CFS filesets mounted with the server_only option. A log sync for create transactions is not needed for such filesets.

  • Fixes a cluster panic with the following error message:

    panic (cpu 3): ics_unable_to_make_progress: heartbeat checking blocked
  • Fixes an rmvol E_PAGE_NOT_MAPPED error.

  • Eliminates an ENO_MORE_BLKS error seen performing a copy-on-write procedure to a clone file while an rmvol operation is in progress.

  • Increases from 4 to 6 the number of pages that can be pinned at deletion time.

  • Improves the informational messages returned by a few domain panic strings.

  • Fixes an error in some sections of code that get E_PAGE_NOT_MAPPED errors when the code expected the page to exist.

  • Closes a small race accessing internal data structure in AdvFS.

  • Prevent a potential panic when AdvFS looks up a file name.

  • Corrects the following problems in AdvFS write logic:

    • A mismatch between the value reported by the write system call and the number of bytes written.

    • Unavailable and unused storage.

  • Causes the deallocation of preallocated storage that the caller is not using.

  • Improves the flushing of the AdvFS log.

  • Fixes an error that can cause a multivolume domain to report ENO_MORE_BLKS when some volumes still have free storage.

  • Fixes a condition that causes a kernel memory fault.

  • Fixes a condition that causes a system hang that occurs when the rename command is called with "." as the target. This patch also reinforces other rename argument restrictions.

  • Fixes an RBMT metadata inconsistency that prevents a file system from being mounted.

  • Changes a system panic resulting from a kernel memory fault in imm_remove_page_map into a domain panic.

  • Fixes a condition that can cause the invalidation of mmap dirty pages before they can be flushed to disk.

  • Improves the performance of systems performing heavy file I/O.

  • Corrects a potential deadlock hang between a truncate system call and a read system call on a clustered system.

  • Fixes an AdvFS alignment fault panic caused by inconsistent AdvFS metadata in a directory. In particular, the directory's entry size is an unaligned value.

  • Fixes erroneous logic to ensure that a domain panic on the cluster_root results in a regular panic for the cluster node on which the domain panic occurs.

  • Corrects a condition that causes an "mcs_lock: no queue entries available" domain panic.

  • Corrects a problem in which the cp -p command will not copy DMAPI-managed region information.

  • Helps to avoid a kernel panic (kernel memory fault) during a vfexer test.

  • Fixes the cause of a system crash when running with lockmode=4. This correction avoids the following types of panics that result from quotactl requests on AdvFS filesets:

    mf in dyn_hash_remove
    lock_terminate: lock held
  • Eliminates the “neg refCnt panic” in AdvFS.

  • Fixes a potential panic when using the rmfset command.

  • Fixes an infinite loop hang that occurs under special circumstances.

  • Fixes an E_TOO_MANY_ACCESSORS error that can occur when deleting a clone fileset.

  • Fixes a kernel memory leak that occurs when vfast is in use.

  • Fixes a cluster hang where one node tries to get a DIO token and another node tries to start a transaction while a third thread is waiting for the clu_clonextnt_lk lock.

  • Fixes a potential deadlock hang between a truncate system call and a read system call on a clustered system.

  • Prevents a vfast thread from using too much CPU when scanning the AdvFS sbm.

  • Provides corresponding memory frees to various mallocs in AdvFS.

  • Corrects an infinite looping condition in a vfast thread.

  • Corrects a problem in which I/O error codes were not always propagated correctly when AdvFS directIO was used without AIO.

  • Fixes a situation that occurs on a full file system in which a write using directIO via AIO may report the incorrect number of bytes written.

  • Fixes an unaligned access panic in insert_seq().

  • Fixes a check for an invalid lookup operation through the .tags interface and prevents an AdvFS domain panic.

  • Fixes a problem in which a read past the last page of the BMT occurs.

  • Fixes the vfast utility error "vfast: cannot get frag list; 14 - Bad address."

  • Fixes a "u_map_delete failed while deallocating map" error.

  • Extends synchronization during directIO writes to include the storage allocation phase.

  • Fixes a kernel memory fault that occurs while reading a file with a data inconsistency.

  • Fixes a kernel memory fault panic that occurs when recovering an AdvFS domain which was originally crashed for an unrelated reason during a rmfset clone fileset.

  • Adds a missing sanity check into AdvFS log recovery code.

  • Corrects a condition in which a system would panic due to a stale vdIndex found when writing to a file in an AdvFS domain.

  • Fixes a rare race between vfast and mount/unmount in which vfast must open the file differently depending on whether or not the fileset is mounted or not. This fix synchronizes vfast's open with mount/unmount.

  • Prevents a node in a cluster from hanging at boot time.

  • Prevents a vfast thread from using too much of a CPU when scanning the AdvFS SBM.

  • Fixes an AdvFS panic that occurs when deleting an original file and a clone file simultaneously.

  • Synchronizes clonefset with read/write paths to force clonefset to complete in a determinate and timely fashion.

  • Fixes a problem in which in certain cases the NFS server does not update the access time on the files it serves.

  • Fixes a clone data inconsistency that occurs as a result of a remote write to the original cloned file.

Patch 27007.00

OSFATMBIN540

  • Corrects a problem that causes a kernel memory fault panic in the event_queue_insert() routine on systems using ATM.

  • Fixes a problem of stale arp in ATM Elan connectivity.

Patch 27009.00

OSFBASE540

  • Corrects a problem in which SysMan and SysMan Station are not functional after installing Java 1.3.1-4 or higher.

  • Prevents addvol from adding invalid disks into a domain.

  • Reduces cluster files system I/O in Enhanced Security.

  • Corrects a security issue in which rsh and other rcmds incorrectly report ESUCCESS when the remote side of a connection terminates before fully establishing a connection.

  • Updates sysconfig to use the cluster interconnect, thereby allowing for a greater SSI collaboration. This fix will help with changing variables on hung systems, single user systems, and normal running systems.

  • Improves cryptic warning message during a mount of a dirty file system. The new message includes a suggestion to run the fsck command for a dirty UFS.

  • Adds support in cleanPR for HSG60/HSV100/MSA/HP-XP enclosures.

  • Corrects a panic while creating or extending a large UFS file system.

  • Fixes cron job scheduling for Daylight Savings time events.

  • Corrects a potential security vulnerability where, under certain circumstances, system integrity may be compromised. This may be in the form of improper file or privilege management.

  • Enables the -undo_switch option for the versw command, which is required to delete patches that contain version switches.

  • Corrects a problem in which cp and cat produce different file sizes when reading from a tape device.

  • Adds SCSI reserve and release support to the mt program to assist open SAN tape management.

  • Updates the environmental monitoring daemon, envmond, to ensure the correct EVM events are being sent at the correct time.

  • Allows the auditing of login and su events based in part on the contents of user profiles (for Enhanced Security), the prevailing auditing characteristics of the originating process, and the system-wide audit mask. Previously, only the system audit mask was referenced.

  • Fixes many small problems with the dsfmgr command.

  • Corrects several potential security vulnerabilities where, under certain circumstances, system integrity may be compromised. These may be in the form of improper file access.

  • Adds an event to indicate that the soft or hard error count has changed on the device identified in the event.

  • Fixes the search algorithm to differentiate between prived and non-prived UIDs, and to allow regular expressions in string searches.

  • Corrects a problem found wherein the rmtmpfiles script would leave empty directories in /var/tmp at system startup.

  • Fixes a problem that occurs while encoding $@ in the Bourne shell.

  • Eliminates the warning message "Using an array as a reference is deprecated" when running /usr/sbin/siacfg and during system boot on systems using Perl 5.8.0 and higher.

  • Corrects a potential floating point error in threaded applications.

  • Allows the fuser command to display the reference flag, which indicates the type of reference made; for example, open, closed, unlinked, or mmapped.

  • Fixes a problem with csh that occurs when using a tilde (~) operation in directing standard input and standard output of a command to a file in a home directory.

  • Updates ddr.mod to support new hardware (NHD-6) devices.

  • Corrects a problem in which crontab removes its entries and the vi editor truncates an existing file when a file system is full.

  • Corrects the way RPC-based servers handle ill-formed TCP connections.

  • Allows mount options that take a value to be correctly processed on a cluster.

  • Corrects the tar program to properly handle unusual directory specifications.

  • Prevents segmentation faults when a malformed argument vector is passed to sia_ses_init.

  • Fixes several potential security vulnerabilities where, under certain circumstances, system integrity may be compromised. These may be in the form of improper file or privilege management.

  • Corrects a potential security vulnerability where, under certain circumstances, system integrity may be compromised. This may be in the form of improper file access.

  • Corrects a problem in which a core dump occurs when using csh from the Japanese locale.

  • Corrects a potential security vulnerability that could result in a Denial of Service (DoS). This potential vulnerability may be in the form of local and remote security domain risks.

    (SSRT2384 rpc — Severity - High)

  • Corrects a potential security vulnerability in which the Home Directory and login shell attributes for a user account are not suppled to the audit daemon for authentication failures.

  • Fixes a problem in XTI caused by a blocked mutex lock in which a thread attempting to send an abortive disconnect hangs.

  • Installs DECthreads V3.20-029c.

  • Fixes a problem with floating point data inconsistencies in threaded applications.

  • Corrects possible dead lock with the ./isl/log and ./usr/sbin/log commands.

  • Provides the correct labels for mach events to the audit subsystem.

  • Corrects the find -ls command to display the correct number of blocks.

  • Provides protection against a class of potential security vulnerabilities called buffer overflows. Buffer overflows are sometimes exploited in an attempt to subvert the function of a privileged program and possibly execute commands at the elevated privileges if the program file has the setuid privilege. This patch allows a system administrator to enable memory management protections that limit potential buffer overflow vulnerabilities.

  • Corrects the /usr/sbin/dirclean utility from attempting to remove the AdvFS .tags directory or the quota.group and quota.user files.

  • Fixes an extended regular expression problem where the interval expression {m,n} is handled incorrectly.

  • Corrects several potential security vulnerabilities where, under certain circumstances, system integrity may be compromised. These may be in the form of improper file access.

  • Corrects a potential security vulnerability where, under certain circumstances, system integrity may be compromised when a buffer overflow occurs in the uucp utility. Buffer overflows are sometimes exploited in an attempt to subvert the function of a privileged program and possibly execute commands at the elevated privileges if the program file has the setuid privilege.

  • Fixes memory leaks caused by certain type of scripts that called an infinite loop.

  • Fixes a ksh problem related to cleaning the process when a terminal is abruptly stopped.

  • Corrects the behavior of ln -sf to address the issue caused when a symbolic link points to a nonexisting file.

  • Corrects the exit status of sed when the disk is full.

  • Corrects a problem in which the return value of unlink() call was not checked when two threads were trying to move a file to two different destinations. Although one of the threads could unlink() the source file, no relevant error message was displayed.

  • Fixes a problem from pre-Version 5.0 releases in the libc mktime() function's handling of potentially ambiguous tm struct times; that is, those that fall within a backward clock shift and that have an initially negative tm_isdst value.

  • Fixes a linker error that occurs when the ld -update_registry /dev/null is specified.

  • Fixes various problems in the libc functions getdate(), strptime(), callrpc(), strncasecmp() and fork().

  • Fixes a problem in the libnuma function nacreate() and the system header <sgtty.h.

  • Causes sh to print the correct message when enhanced core file naming is on.

  • Fixes a problem in which attempts by the runtime loader (/sbin/loader) to free a null pointer are in error.

  • Corrects the behavior of the more command when nonexisting file and a nonempty file with a long file name are both specified.

  • Causes /usr/opt/ultrix/usr/bin/make to properly check dependencies on archive libraries.

  • Fixes various problems in the dbx and object file tools: dbx, ostrip, strip, mcs, dis, cord, file, and stdump.

  • Causes the grep command allow blank lines in the pattern file and to not hang when executed with the -w and -f options.

  • Removes compiler warnings addressing outside of array bounds.

  • Addresses compiler warnings caused by calling a function with too few arguments.

  • Adds informative messages during a rolling upgrade when a problem is encountered with the merging of the .login file.

  • Corrects vmstat to display correct free page counts a on NUMA systems.

  • Adds a -M command option to newfs to allow permissions of an MFS root directory to be specified when it is first created.