HP Tru64 UNIX and TruCluster Server Version 5.1B-6 Patch Summary and Release Notes

• Fixes the handling of NFS requests that have an erroneous file handle length field.
• Corrects the output of wired pages and gh regions found in the -P option of the vmstat
command when run on a NUMA system.
• Improves the performance and chances of success of the Tru64 kernel malloc routine,
especially when used by drivers which use the M_NOWAIT option.
• Fixes an invalid kernel memory fault panic in the code responsible for the generation of
random numbers.
• Corrects a defect in the audit subsystem that causes it to fail to record inode information on
closed file descriptors.
• Corrects a problem that occurs after an upgrade from Version 5.1B patch kit 3 to Version
5.1B-3 (Version 5.1B-3) in which the system may fail to boot with the following panic:
KMF - invalid memory read access from kernel mode
• Fixes a race within NFS over TCP when connection reaches idle timeout.
• Improves the performance of Tru64's MACH implementation and also enhances stability
while under heavy load.
• Corrects several potential security vulnerabilities in TCP/IP, including ICMP. These exploits
could result in a remote Denial of Service (DoS) from predictable Initial Sequence Numbers
(ISNs), network throughput reduction for TCP connections, or the reset of TCP connections.
• Corrects the following potential security vulnerabilities:
SSRT4743, SSRT4884 - TCP/IP ICMP (Severity - High)
• Fixes a panic condition resulting from DVDFS using a deallocated vnode.
• Fixes a panic condition in the NFS client code resulting from the mishandling of unaligned
data on clustered systems.
• Corrects a kernel memory fault that results from the de-referencing of a null processor
pointer encountered when auditing a network event after having sent a SIGKILL to the
auditd daemon.
• Forces the use of a non-cluster interconnect address in audit records.
• Fixes a kernel memory fault panic in IPv6, and corrects improper or leaked reference counts
with IPv6 route entries.
• Fixes a panic that occurs when using the TCP SACK option.
• Fixes a kernel memory fault panic that occurs when the vm tunable anon_rss_enforce is set.
• Fixes a socket kernel memory leak.
• Fixes a race condition in the UBC.
• Corrects tracking of controlling terminal reference to session structure.
• Corrects a problem that causes the transmission of duplicate FIN packets, which could result
in a stuck connection.
• Allows systems with multiple paths to a large number of devices to boot faster.
• Fixes an issue with the NFS client async daemon that can occur in specific NUMA
configurations. These configurations would have RAD numbers that are not part of the
partition but within the range of valid RAD numbers for that partition.
• Fixes an fsync (NFS/UFS) operation that failed to always flush all dirty pages.
• Fixes a “lock_done: lock not currently owned” panic that occurs early in a boot.
• Resolves lock management issues within the UBC that can lead to “mcs_unlock: current
lock not found” and “mcs_lock: time limit exceeded” panics.
• Removes NFS warning message about malaligned RPC messages.
• Makes the poll() function compliant with revised UNIX98 standards.
• Fixes a hang caused by the Async I/O subsystem.
• Corrects a problem with the mount command in which issuing a mount -l command lists
the property of a dual mounted fileset incorrectly as nodual.
Summary of Base Operating System Patches 91