Patch Name: PHSS_31825 Patch Description: s700_800 11.04 Virtualvault 4.6 IWS update Creation Date: 04/08/06 Post Date: 04/08/17 Hardware Platforms - OS Releases: s700: 11.04 s800: 11.04 Products: Virtualvault A.04.60 Filesets: VaultTS.VV-IWS,fr=A.04.60,fa=HP-UX_B.11.04_32/64,v=HP Automatic Reboot?: Yes Status: General Release Critical: No Category Tags: defect_repair general_release Path Name: /hp-ux_patches/s700_800/11.X/PHSS_31825 Symptoms: PHSS_31825: 1. SSL-enabled Apache Administration web server may exhibit unexpected behavior for mod_ssl versions prior to 2.8.19 PHSS_30946: 1. Apache Administration web server may exhibit unexpected behavior with Apache versions prior to 1.3.31. 2. SSL-enabled Apache Administration web server may exhibit unexpected behavior for mod_ssl versions prior to 2.8.18 3. mod_proxy module of Apache Administration web server may exhibit unexpected behavior in versions 1.3.26 to 1.3.31. PHSS_30643: SSL-enabled Apache Administration Web server may exhibit unexpected behavior with OpenSSL versions prior to 0.9.7d PHSS_30153: Apache Administration Web Server may exhibit unexpected behavior in versions prior to 1.3.29. PHSS_29893: SSL-enabled Apache Administration Web server may exhibit unexpected behavior for OpenSSL versions prior to 0.9.7c PHSS_29542: Apache Administration Web Server may exhibit unexpected behavior in versions prior to 1.3.28. PHSS_28684: Apache Administration Web Server does not clean up allocated shared memory segment. PHSS_28090: Apache Administration Web Server may exhibit unexpected behavior in versions prior to 1.3.27. PHSS_27423: Apache Inside Web Server may exhibit unexpected behavior. Defect Description: PHSS_31825: 1. SSL-enabled Apache Administration web server may exhibit unexpected behavior for mod_ssl versions prior to 2.8.19 Resolution: 1. Migrated mod_ssl module of Apache Administration Web Server version from 2.8.18 to 2.8.19. PHSS_30946: 1. Apache Administration web server may exhibit unexpected behavior with Apache versions prior to 1.3.31. 2. SSL-enabled Apache Administration web server may exhibit unexpected behavior for mod_ssl versions prior to 2.8.18 3. mod_proxy module of Apache Administration web server may exhibit unexpected behavior in versions 1.3.26 to 1.3.31. Resolution: 1 Migrated Apache version for the Administration web server from 1.3.29 to 1.3.31. 2. Migrated mod_ssl module of Apache Administration Web Server version from 2.8.17 to 2.8.18. 3. Apache provided a patch for the mod_proxy module that adds a check for invalid content length. PHSS_30643: SSL-enabled Apache Administration Web server may exhibit unexpected behavior with OpenSSL versions prior to 0.9.7d Resolution: Migrated OpenSSL version to 0.9.7d PHSS_30153: Apache Inside Web Server may exhibit unexpected behavior in versions prior to 1.3.29. Resolution: Migrated Apache version for the administration server from 1.3.28 to 1.3.29. PHSS_29893: SSL-enabled Apache Administration Web server may exhibit unexpected behavior for OpenSSL versions prior to 0.9.7c Resolution: Migrated OpenSSL version to 0.9.7c PHSS_29542: Apache Inside Web Server may exhibit unexpected behavior in versions prior to 1.3.28. Resolution: Migrated Apache version for the administration server from 1.3.27 to 1.3.28. PHSS_28684: Apache Administration Web Server does not clean up allocated shared memory segment. Resolution: Dynamic memory is used instead of shared memory segment. PHSS_28090: Apache Inside Web Server may exhibit unexpected behavior in versions prior to 1.3.27. Resolution: Migrated Apache version for the administration server from 1.3.19 to 1.3.27. PHSS_27423: Apache Inside Web Server may exhibit unexpected behavior. Resolution: Corrected the Apache Inside Admin Server to function as expected. Enhancement: No SR: 8606374112 8606355700 8606339401 8606295989 8606283593 8606269065 8606272389 8606295386 8606322520 8606363846 8606367047 8606367048 Patch Files: VaultTS.VV-IWS,fr=A.04.60,fa=HP-UX_B.11.04_32/64,v=HP: /opt/vaultTS/ws-admserv/bin/httpd what(1) Output: VaultTS.VV-IWS,fr=A.04.60,fa=HP-UX_B.11.04_32/64,v=HP: /opt/vaultTS/ws-admserv/bin/httpd: mod_ssl/2.8.19 $Source: apache/src/main/http_main.c, vaultTS, vault TS_4.6 $ $Date: 04/06/17 04:30:25 $ $Revisio n: 1.11 PATCH_11.04 (PHSS_30946) $ src/lib/vvcertutil/certutil.c, vaultTS, vaultTS_4.6 1.9 08/14/98 src/lib/vvcertutil/b64dec.c, vaultTS, vaultTS_4.6 1. 1 06/07/97 cksum(1) Output: VaultTS.VV-IWS,fr=A.04.60,fa=HP-UX_B.11.04_32/64,v=HP: 1942425970 2825875 /opt/vaultTS/ws-admserv/bin/httpd Patch Conflicts: None Patch Dependencies: None Hardware Dependencies: None Other Dependencies: None Supersedes: PHSS_27423 PHSS_28090 PHSS_28684 PHSS_29542 PHSS_29893 PHSS_30153 PHSS_30643 PHSS_30946 Equivalent Patches: PHSS_31823: s700: 11.04 s800: 11.04 PHSS_31827: s700: 11.04 s800: 11.04 Patch Package Size: 1070 KBytes Installation Instructions: Please review all instructions and the Hewlett-Packard SupportLine User Guide or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and, limitation of liability and warranties, before installing this patch. ------------------------------------------------------------ 1. Back up your system before installing a patch. 2. Login as root. 3. Copy the patch to the /tmp directory. 4. Move to the /tmp directory and unshar the patch: cd /tmp sh PHSS_31825 5. Run swinstall to install the patch: swinstall -x autoreboot=true -x patch_match_target=true \ -s /tmp/PHSS_31825.depot By default swinstall will archive the original software in /var/adm/sw/save/PHSS_31825. If you do not wish to retain a copy of the original software, include the patch_save_files option in the swinstall command above: -x patch_save_files=false WARNING: If patch_save_files is false when a patch is installed, the patch cannot be deinstalled. Please be careful when using this feature. For future reference, the contents of the PHSS_31825.text file is available in the product readme: swlist -l product -a readme -d @ /tmp/PHSS_31825.depot To put this patch on a magnetic tape and install from the tape drive, use the command: dd if=/tmp/PHSS_31825.depot of=/dev/rmt/0m bs=2k Special Installation Instructions: None