What happened to CDE overflow patch for Tru64 v4.0g?

From: Phil Farrell (farrell@pangea.Stanford.EDU)
Date: Thu Aug 28 2003 - 12:56:19 EDT


Hi Managers,

Back in May, I got a UNIX patch digest from HP describing a
security patch for the CDE buffer overflow problem. I was
too busy to deal with it then, and just yesterday wanted to
get back to installing it. When I went to HP's ftp site,
the patch was gone for Tru64 versions 4.0f and 4.0g. It
was still there for versions 5.1a and 5.1b. I run 4.0g, so
I was a bit disconcerted by this. Anyone know what happened
to this patch? Was it deliberately withdrawn? Or is this
an accident? If anyone has installed this patch on their
4.0g machine with no problems and still has the tarball, can
you let me have a copy? Thanks.

-Phil Farrell, Computer Systems Manager
Stanford University School of Earth Sciences
farrell@pangea.stanford.edu

Here's the first part of the patch digest referencing the patch
name and location. It is no longer at that location, nor
anywhere else that I could find on HPs web site.

UNIX Digest for Wednesday, May 28, 2003.

1. Potential CDE Buffer Overflows (PK3)
2. Potential CDE Buffer Overflows (PK4)
3. Potential CDE Buffer Overflows (PK6)
4. Potential CDE Buffer Overflows

----------------------------------------------------------------------

Subject: Potential CDE Buffer Overflows (PK3)
From: system PRIVILEGED account <root@stage1.cxo.cpqcorp.net>
Date: Wed, 28 May 2003 01:30:08 -0600 (MDT)
X-Message-Number: 1

*******************************************************************************
* *
* This is a newly released patch... *
* *
* Online links can be found at *
* http://ftp.support.compaq.com/patches/public/unix/v4.0g/t64v40gb17-c0029600-18524-es-20030506.README
*******************************************************************************



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:49:34 EDT