HP-UX 11i Version 2 December 2005 Release Notes

What is New at a Glance
What is New in the September 2004 Release?
Chapter 3
59
— HP-UX XML Web Server Tools 2.00: Updated as primarily a version upgrade
release, with upgrades to Xerces-J, Xalan-J, Cocoon, and FOP.
• Internet Services:
— BIND 9.2.0: Option to enable or disable the Extended DNS (EDNS) option
provided.
— BOOTP and DHCP: Both implement a new tag to configure the IP address of the
tftp server.
— IPv4 Address Display: The IPv4-mapped-IPv6 address display is now changed to
display an IPv4 address.
• LAN Administration Commands: Includes support for IPoIB and VLAN interfaces,
along with new command-line options.
• Mozilla Application Suite 1.4.0.01: Contains full Japanese localization as well as
other defect fixes and enhancements. Security bulletin posted.
• Netscape Directory Server 6.11: New product for customers of HP-UX 11i v2.
• Network Tracing and Logging (NetTL): Changes include formatting support for
IPoIB, Mobile IPv4 extension headers, tunneled IPv6 packets, and Mobile IPv6
packets, as well as new CLI option to support configurable trace buffer timer value.
• Network Transport (ARPA): Changes include Limited Transmit (IPv4 only); support
for TCP Segmentation Offload and for IPoIB links; IPv6 router advertisement
daemon; Multicast Listener Discovery support for IPv6 (host only); and other
changes. Problem and work-around noted: HP-UX sends TCP packets with incorrect
window size.
What is New in
September 2004
for Existing
Customers of
HP-UX 11i v2
September 2004 Release Notes, Chapter 8: “Security”
• HP-UX Host Intrusion Detection System 2.3: Product bundle renamed and
restructured to improve product installation and maintenance.
• HP-UX IPFilter A.03.05.10.02: Includes defect fixes and performance enhancements.
• HP-UX Secure Shell A.03.71.000: Contains several new features, including enhanced
ssh_prng_cmds file for random number generation, new escape character for
requesting a pseudo terminal, and support for generating KEX-GEX groups in the
ssh-keygen file.
• OpenSSL A.00.09.07-d: New to HP-UX 11i v2.
• PAM: 64-bit framework now supported on both PA-RISC and Itanium-based
systems. New PAM module introduced. Defect fixes included.
• PAM-Kerberos v1.23: Supports both Itanium-based and PA-RISC applications in
32-bit mode and 64-bit mode. The pam_sm_acct_mgmt() function returns
PAM_USER_UNKNOWN instead of PAM_SUCCESS when the user is not present in the
Kerberos database.
• Security Patch Check 2.0: Now provides update and manual action analysis, whereas
prior releases only analyzed patches.
• Shadow Passwords: Now supported by SAM.