|
Q. Why is Compaq issuing this Mandatory Update Patch (MUP) for
OpenVMS?
This Mandatory Update Patch is being issued in response to a recent problem
report on systems running OpenVMS Alpha, OpenVMS VAX, SEVMS VAX or
SEVMS Alpha with the DECwindows Motif Server installed. These systems
have a potential security vulnerability that could be exploited to allow existing
users unauthorized access to data and system resources.
Q. What versions of OpenVMS are impacted?
All supported versions of OpenVMS Alpha, OpenVMS VAX, SEVMS VAX or
SEVMS Alpha have been examined for this vulnerability. All supported
versions with the exception of OpenVMS VAX Version V5.5-2 are impacted.
Supported Versions Impacted:
- OpenVMS Alpha Version 6.2 and all associated hardware releases (for example, Version 6.2-1H1)
- OpenVMS Alpha Version 7.1-2
- OpenVMS Alpha Version 7.2-1H1
- OpenVMS Alpha Version 7.2-2
- OpenVMS Alpha Version 7.3
- OpenVMS VAX Version 6.2
- OpenVMS VAX Version 7.1
- OpenVMS VAX Version 7.2
- OpenVMS VAX Version 7.3
- SEVMS Alpha Version 6.2
- SEVMS VAX Version 6.2
Supported Versions NOT Impacted:
- OpenVMS VAX Version 5.5-2
Q. Do I still need the patch if I am not running the DECwindows Motif
Server on my system?
No. This patch is only required for systems running the DECwindows Motif
Server. Installation of the DECwindows Motif Server is optional during the
installation of the OpenVMS Operating System. You may be running the
DECwindows Motif Server on your system even if you are not running the
DECwindows Motif layered product.
Q. How can I tell if I am running the DECwindows Server on my system?
You can verify whether or not the DECwindows Motif Server has been
installed on your system by using the following command:
$ DIRECTORY SYS$LIBRARY:DECW$*.EXE
If no DECW$*.EXE files are present on your system, the DECwindows Motif
Server is not installed on your system and you do not need to apply this
mandatory update.
Q. How can I get the patch I need for my version of OpenVMS?
There are three ways to get copies of the patches.
- If you have a service contract that provides media updates to the
OpenVMS Operating System or if you have purchased a media kit containing
the OpenVMS Operating System from Compaq in the past six months, a CD-
ROM containing patches for all impacted versions will automatically be
shipped to you in early November.
- You may download the patches from the World Wide Web at the following
address:
» http://www.support.compaq.com/patches
At the web site listed above, use the FTP access option, select VMS then
either the VAX or AXP directory, then choose the appropriate version
directory and download the patch as identified in the applicable .HTML file
accordingly.
Note: Please review the README file(s) for each patch prior to installation.
The patch filenames are:
- OpenVMS ALPHA
- DEC-AXPVMS-VMS73_DW_MOT_MUP-V0100-4.PCSI (Readme)
- DEC-AXPVMS-VMS722_DW_MOT_MUP-V0100-4.PCSI (Readme)
- DEC-AXPVMS-VMS721H1_DW_MOT_MUP-V0100-4.PCSI (Readme)
- DEC-AXPVMS-VMS721_DW_MOT_MUP-V0100-4.PCSI (Readme)
- DEC-AXPVMS-VMS712_DW_MOT_MUP-V0100-4.PCSI (Readme
- ALPDWMOTMUP01_062.A (Readme)
- OpenVMS VAX
- SEVMS
- SE_VAXDWMOTMUP01_062.A (Readme)
- SE_ALPDWMOTMUP01_062.A (Readme)
- Customers who do not automatically receive a CD-ROM and cannot
access the web site kits should contact their local Compaq Sales Office to
order a CD-ROM containing the patches. The part number for the CD-ROM
is QA-MT3AA-T8. There will be a charge for shipping and handling.
Q. How can I tell if this patch has already been installed on my system?
For PSCI kits, use the PRODUCT SHOW HISTORY command. For example:
For VMSINSTAL kits (.A savesets) search for a .TXT file in
SYS$COMMON:[SYSUPD] that has the same name as the kit. For example:
$ DIR SYS$COMMON:[SYSUPD]*DWMOTMUP01*.TXT
Directory SYS$COMMON:[SYSUPD]
ALPDWMOTMUP01_62.TXT;1
Q. Do I need to reboot my system after I install the patch?
After you apply this update, you must reboot your system in order for the
changes to take effect. If you have other nodes in your OpenVMS cluster,
they must also be rebooted in order to make use of the new images. If it is
not possible or convenient to reboot the entire cluster at this time, a rolling
reboot may be performed. However, due to the nature of the problem that
this kit corrects, Compaq strongly recommends a rolling reboot be performed
immediately on each cluster node.
Q. Do I need to reapply the patch if I upgrade my version of the operating
system in the future?
Yes. If you upgrade to any of the impacted versions, you must apply the
patch appropriate to the new version of the operating system.
|
