Dear SCO Customer, Support Level Supplement (SLS) ptf7691b, the UnixWare 7.1.1 rtpm Supplement, addresses the following problems: - Two security holes, which could lead to local system compromises if left open, are now closed. Both security holes were buffer overflow exploits in user input. One was from the environment and the other was from the command line. Contents -------- /usr/sbin/rtpm Software Notes and Recommendations ---------------------------------- SLS ptf7691b should only be installed on: UnixWare 7 Release 7.1.1 SLS ptf7603k MUST be installed before ptf7691b can be installed. SLS ptf7691b supersedes ptf7691a and SSE059 (also known as sse0759). If your system is running any libraries or commands that are contained in this SLS, then these programs will continue to run with the old versions of these libraries or commands until the the system is rebooted. Note that when all necessary patches have been installed, it is recommended that you reboot the system at the earliest opportunity. This will ensure that no programs continue to run with the old libraries or commands. Installation Instructions ------------------------- 1. Download the ptf7691b.Z file to the /tmp directory on your machine. 2. As root, uncompress the file and add the package to your system using these commands: $ su Password: # uncompress /tmp/ptf7691b.Z # pkgadd -d /tmp/ptf7691b # rm /tmp/ptf7691b Alternatively, this SLS package may be installed in quiet mode, that is, without displaying the release notes and asking for installation confirmation. To do this, use these commands: $ su Password: # uncompress /tmp/ptf7691b.Z # pkgadd -qd /tmp/ptf7691b all # rm /tmp/ptf7691b 3. There is no need to reboot the system after installing this package. The release notes displayed prior to installation can be found in: /var/sadm/pkg/ptf7691/install/ptf7691.txt Removal Instructions -------------------- 1. As root, remove the package using these commands: $ su Password: # pkgrm ptf7691 2. There is no need to reboot the system after removing this package. If you have questions regarding this SLS, or the product on which it is installed, please contact your software supplier.