Empfohlene Patches für HP-UX

Patches für HP-UX 9.x
Patches für HP-UX 10.x

Die Angaben für andere Systemversionen bzw. Hardware-Plattformen entnehmen Sie bitte den Security-Bulletins.

Die Installation der folgenden Patches wird für HP-UX 9.x auf Maschinen HP9000 der Serien 700 bzw. 800 dringend empfohlen.

Patchname HP 9000 Serie HP-UX Release betrifft
PHNE_3564 700/800 9.01 Security: subnetconfig
PHNE_4842 700/800 9.0x Security: remshd/rexecd
PHSS_5568 700 9.0x Security: X Server
PHSS_7652 700/800 9.0x Security: VUE 3.0
PHSS_6155 700/800 9.0x Security: hpterm
PHSS_5902 700/800 9.0x Security: X-Clients and modmap files
PHCO_5015 700 9.0x /bin/csh memory leak
PHKL_6869 700 9.0[357] various kernel defects
PHSS_5107 700 9.0x Security: Remote Watch
PHSS_5140 700/800 9.0x Security: xwcreate/gwind
PHCO_6861 700 9.0x Security: at/cron
PHNE_7480* 700/800 9.0x Security: sendmail
PHSS_7587 700 9.0[357] Security: CORE-DIAG
PHNE_7072 700/800 9.0x Security: NFS/NIS
PHNE_6363 700/800 9.0x Security: expreserve(1)
PHNE_7342 700/800 9.0x Security: elm(1)
PHCO_9603 700/800 9.0x Security: netgrp(1)
PHCO_9742 700/800 9.0x Security: passwd(1)
PHSS_8231 700 9.0x Security: Glanceplus
PHSS_8232 800 9.0x Security: Glanceplus
PHCO_9600 700/800 9.0x Security: chsh(1)
PHCO_9595 700/800 9.0x Security: chfn(1)

Die Installation der folgenden Patches wird für HP-UX 10.x auf Maschinen HP9000 der Serien 700 bzw. 800 empfohlen. Die Notwendigkeit der Installation ist natürlich davon abhängig, ob die jeweilige Systemkomponente in Ihrer Installation von Bedeutung ist.

Patchname HP 9000 Serie HP-UX Release betrifft
PHCO_6573 700/800 10.X Security: su(1) und NIS
PHCO_6588 700/800 10.X fuser(1) und MC/Serviceguard
PHCO_6608 700/800 10.01 extendfs(1M) patch for VxFS filesystems
PHNE_6961 700/800 10.X remsh(1) does not handle SIGINT properly
PHCO_7035 700/800 10.10 top(1) and ps(1)
PHNE_7073 700/800 10.X Security: NFS/NIS
PHCO_7201 700/800 10.01 top(1)
PHCO_7257 700/800 10.X prevents corruption of passwd-related Filed
PHNE_7481* 700/800 10.X Security: sendmail
PHCO_7798 700/800 10.0X libc cumulative patch
PHCO_7799 700/800 10.10 libc cumulative patch
PHCO_7830 700/800 10.10 LVM commands cumulative patch
PHCO_7978 700/800 10.01 LVM commands cumulative patch
PHKL_7018 800 10.10 VxFS (JFS) cumulative patch
PHKL_7208 800 10.10 VxFS (JFS) VxFS (JFS) vx_remove patch
PHKL_7477 800 10.10 vfork() panic
PHKL_7909 800 10.01 VxFS (JFS), LVM, and HFS (UFS) cumulative patch
PHNE_7343 700/800 10.0x/10.10 Security: elm(1)
PHNE_8107 700/800 10.0x Security: rdist(1)
PHNE_7919 700/800 10.10 Security: rdist(1)
PHNE_7920 700/800 10.20 Security: rdist(1)
PHCO_7798 700/800 10.0x libc cumulative patch
PHCO_9604 700/800 10.01 Security: newgrp(1)
PHCO_9605 700/800 10.1x, 10.20 Security: newgrp(1)
PHCO_9640 700/800 10.01, 10.10 Security: passwd(1)
PHSS_9690 700/800 10.10 Security: dtlogin(1)
PHSS_8665 700/800 10.10 Security: CDE-Runtime
PHSS_8667 700/800 10.20 Security: CDE-Runtime
PHSS_9627 700/800 10.20 Security: dtlogin(1)
PHCO_9601 700/800 10.01, 10.10 Security: chsh(1)
PHCO_9602 700/800 10.20 Security: chsh(1)
PHCO_9596 700/800 10.01, 10.10 Security: chfn(1)
PHCO_9597 700/800 10.20 Security: chfn(1)
PHSS_9343 700/800 10.10, 10.20 Security: hpterm(1)

* Beachten Sie, daß der sendmail-Patch (PHNE_5402) nur benoetigt wird, wenn Sie den empfohlenen sendmail-Klienten nicht verwenden!


Thomas Müller, 12. April 1996, 21. Januar 1997