SGI Logo
 
 

Patch 2459 : pset security vulnerability : [IRIX 6.2]
INDEX

  • Relations
  • Release Notes
  • Inst Subsystem Requirements
  • Inst Subsystem Checksums
  • Inst Subsystem File Listings
  • Download Patch


    RELATIONS

    This patch does not replace any other patches.

    This patch is incompatible with the following patches:
    2401, 2484, 2772, 2777, 2859

    This patch fixes the following bugs:
    494132 - pset has buffer overrun security issue


    RELEASE NOTES

    1. Patch SG0002459 Release Note

           This release note describes patch SG0002459 to IRIX 6.2.
    
    
    1.1 Supported Hardware Platforms
           This patch contains bug fixes for all hardware
           configurations supported by IRIX 6.2.  The software cannot
           be installed on other configurations.
    
    
    1.2 Supported Software Platforms
           This patch contains bug fixes for IRIX 6.2 (all versions).
           The software cannot be installed on other configurations.
           Changes to kernel data structures which were made in Patch
           SG0002401 and its successors make those patches incompatible
           with this patch (Patch SG0002459).  The changes made in this
           patch have been incorporated into Patch SG0002401 and its
           successors.
    
    
    1.3 Bugs Fixed by Patch SG0002459
           This patch contains fixes for the following bugs in IRIX
           6.2.  Bug numbers from Silicon Graphics bug tracking system
           are included for reference.
    
              o pset(1M) buffer overrun security vulnerability (bug #
                494132).
    
    
    1.4 Subsystems Included in Patch SG0002459
           This patch release includes these subsystems:
    
              o patchSG0002459.eoe_sw.unix
    
    
    1.5 Installation Instructions
           Because you want to install only the patches for problems
           you have encountered, patch software is not installed by
           default.  After reading the descriptions of the bugs fixed
           in this patch (see Section 1.3), determine the patches that
           meet your specific needs.
    
           If, after reading Sections 1.1 and 1.2 of these release
           notes, you are unsure whether your hardware and software
           meet the requirements for installing a particular patch, run
           inst.  The inst program does not allow you to install
           patches that are incompatible with your hardware or
           software.
    
    
           Patch software is installed like any other Silicon Graphics
           software product.  Follow the instructions in your Software
           Installation Administrator's Guide to bring up the miniroot
           form of the software installation tools.
    
           Follow these steps to select a patch for installation:
    
             1.  At the Inst> prompt, type
    
                 install patchSGxxxxxxx
    
                 where xxxxxxx is the patch number.
    
             2.  Initiate the installation sequence. Type
    
                 Inst> go
    
             3.  You may find that two patches have been marked as
                 incompatible.  (The installation tools reject an
                 installation request if an incompatibility is
                 detected.)  If this occurs, you must deselect one of
                 the patches.
    
                 Inst> keep patchSGxxxxxxx
    
                 where xxxxxxx is the patch number.
    
             4.  After completing the installation process, exit the
                 inst program by typing
    
                 Inst> quit
    
    
    1.6 Patch Removal Instructions
           To remove a patch, use the versions remove command as you
           would for any other software subsystem.  The removal process
           reinstates the original version of software unless you have
           specifically removed the patch history from your system.
    
           versions remove patchSGxxxxxxx
    
           where xxxxxxx is the patch number.
    
           To keep a patch but increase your disk space, use the
           versions removehist command to remove the patch history.
    
           versions removehist patchSGxxxxxxx
    
    
           where xxxxxxx is the patch number.
    
    
    1.7 Known Problems
    
    
    INST SUBSYSTEM REQUIREMENTS
    No Requirements Information Available.
    

    INST SUBSYSTEM CHECKSUMS

    These checksums help to provide a 'signature' for the patch inst image which can be used to authenticate other inst images. You can obtain this kind of output by running sum -r on the image (from the command line):

    40511      2   patchSG0002459
    15575     78   patchSG0002459.eoe_sw
    54991      2   patchSG0002459.idb
    

    INST SUBSYSTEM FILE LISTINGS

    The following lists the files which get installed from each subsystem in the patch:

    patchSG0002459.eoe_sw.unix
    sbin/pset
    sbin/pset
    usr/relnotes/patchSG0002459/TC
    usr/relnotes/patchSG0002459/ch1.z


    DOWNLOAD PATCH
    Download Server File Name Date Added Size Download
    download.sgi.com patchSG0002459.tar 26-Mar-1998 50 K FTP HTTP Add to download cart 
    download.sgi.com patchSG0002459.tardist 26-Mar-1998 50 K FTP HTTP
     
    FTP = download using FTP protocol
    HTTP = download using HTTP protocol
    Add to shopping list= store in your basket for downloading later
  •  


    Document Id: 20021117070316-IRIXPatch-1144