What is Security Supplement P535243C, the BIND 9.4-ESV Update for OpenServer 6.0.0? KEYWORDS: p535243c p535243 openserver osr6 6.0.0 maintenance pack 4 patch supplement security escalations bind 9.4-ESV nslookup dig PROBLEM: What problem is fixed by Escalations Supplement P535243C, the BIND 9.4-ESV Update for OpenServer 6.0.0? SOLUTION: This patch includes an update to BIND 9.4-ESV which includes all the bind related security fixes. In addition, the patch contains fixes to dig and nslookup which have been reported to hang in certain command sequences. Version C of the patch fixes two additional problems: 1. Binaries in Version B were built without /dev/random support. This could also cause scoadmin dns to hang. fz535905 2. MP4 and Version B of this patch both caused custom verify problems which have been fixed by this patch. fz535909 This supplement can be installed on the following SCO OpenServer releases: SCO OpenServer Release 6.0.0 with Maintenance Pack 4 ---------------------------------------------------------- I. Software Notes and Recommendations 1. This package is produced by the SCO Escalations Research Group and is not intended for general distribution. It has been produced to address a particular problem and has not been tested in all system configurations. 2. If you have any questions concerning this supplement, please contact your SCO software supplier or your SCO Support Representative. ---------------------------------------------------------- II. Installation Instructions To install P535243C follow these steps: 1. Login as root 2. Create an empty directory, such as /tmp/p535243c, to which the patch will be downloaded. 3. Download the P535243C patch file p535243c_vol.tar to the directory created in step 2. 4. After the download is complete, change to the directory containing the p535243c_vol.tar file and run the following to extract the media image files: tar xvf p535243c_vol.tar 5. Run the Software Manager with the command: scoadmin software or double-click on the Software Manager icon in the desktop. 6. Pull down the "Software" menu and select "Install New". 7. When prompted for the host from which to install, choose the local machine and then "Continue". 8. In the "Select Media" menu, pull down the "Media Device" menu. Select "Media Images", then choose "Continue". 9. When prompted for the "Image Directory", enter "/tmp/p535243c" (or the directory where you placed the P535243C patch file p535243c_vol.tar in step 2) and choose "OK." 10. When prompted to select software to install, make sure that the "P535243C" entry is highlighted. Choose "Install". Once installation is complete, select "OK". 11. Installation of Escalation Supplement P535243C is now complete. To exit the Software Manager, select "Exit" from the "Host" menu. 12. Once the installation has completed, you can remove or archive the P535243C patch file p535243c_vol.tar, the media image files, and the containing directory created in step 2. 13. There is no need to reboot the system after installing this package. However, if your system is running any libraries or commands that are contained in this package, then these programs will continue to run with the old versions of these libraries or commands until the system is rebooted. Note that when all necessary patches have been installed, it is good practice to reboot the system at the earlier opportunity. This will ensure that no programs continue to run with the old libraries or commands. ---------------------------------------------------------- III. Removal Instructions Note: Patches must be rolled back in the reverse order in which they were installed on a per-component basis. 1. Log in as root. 2. Execute the command: scoadmin software or double-click on the Software Manager icon in the desktop. 3. Highlight the "P535243C" entry. 4. Pull down the "Software" menu and select "Remove Software". 5. Once the removal finishes, quit the Software Manager. 6. It is not necessary to reboot your system immediately. The system will continue to run with the routes defined by the updated route command until the next reboot.