SGI: Security

New Security Patches 7248 Kerberos and 7249 OpenSSL from Supportfolio for 6.5.28 to .30

Geoman avatar
Geoman
Donor
From Munich, Germany
Who joined May 26, 2005, 3:37 a.m.
Wrote the following at April 1, 2015, 10:10 a.m...
1. Patch_SG0007248_Release_Note

This release note describes patch SG0007248 to IRIX 6.5.28,
6.5.29 and 6.5.30.

Patch SG0007248 replaces no patch(es).

This patch upgrade the Kerberos IRIX images from 1.3.1 to
1.9.4.


1.3 Bugs_Fixed_by_Patch_SG0007249

This patch contains fixes for the following bugs in IRIX
OpenSSL 0.9.7e. OpenSSL is upgraded to version 0.9.7m. Bug
numbers from Silicon Graphics bug tracking system are
included for reference.

Patch 7249:

o 993892: fixes to following security issues:
CVE-2008-5077
CVE-2009-0590
CVE-2009-0789
CVE-2009-3555
CVE-2011-4576
CVE-2011-4619
CVE-2012-0884: PKCS#7 part only.
CVE-2012-2110
CVE-2012-2131

o Replaces and rolls up Patch 7217, which fixes:

o 929557: openssl der_chop script has symlink
vulnerability. der_chop has been removed.

o 956534: fixes to CVE-2006-2937 CVE-2006-3738 CVE-
2006-4343

o 956535: fixes to CVE-2006-2940
:Octane2: 2xR12000 400MHz, 4GB RAM, V12
SGI - the legend will never die!!
pentium avatar
pentium
From Kamloops, BC
Who joined Aug. 28, 2006, 6:29 p.m.
Wrote the following at April 1, 2015, 10:19 a.m...
WOAHHHHHHHHHHHH. :shock:
I they completely stopped releasing updates years ago.
:Crimson: :Onyx: :O2000: :O200: :O200: :PI: :PI: :Indigo: :Indigo: :Indigo: :Octane: :O2: :1600SW: :Indigo2: :Indigo2: :Indigo2IMP: :Indigo2IMP: :Indy: :Indy: :Indy: :Cube:

Image <-------- A very happy forum member.
armanox
From Baltimore, MD, USA
Who joined Feb. 23, 2014, 9:31 p.m.
Wrote the following at April 1, 2015, 12:32 p.m...
pentium wrote: WOAHHHHHHHHHHHH. :shock:
I they completely stopped releasing updates years ago.


I thought the final was supposed to be Jan 2014 for patches based on stuff I had read. Color me impressed. Can we say IRIX 6.5 has been receiving updates longer then any other OS at this point?
"Apollo was astonished, Dionysus thought me mad."
:Octane: :Octane: :O2:
Titox avatar
Titox
From Spain
Who joined Aug. 14, 2007, 12:13 a.m.
Wrote the following at April 1, 2015, 12:51 p.m...
SGI_Patches.jpg
SGI patches from 2013
SGI_Patches.jpg (18.56 KiB) Viewed 1193 times
armanox
From Baltimore, MD, USA
Who joined Feb. 23, 2014, 9:31 p.m.
Wrote the following at April 1, 2015, 1:22 p.m...
Titox wrote:
SGI_Patches.jpg

Yeah...just noticed that too when I logged in to look. I wonder if someone with a valid support contract could see if there's been any updates lately...
"Apollo was astonished, Dionysus thought me mad."
:Octane: :Octane: :O2:
foetz avatar
foetz
Moderator
Who joined April 14, 2003, 4:34 a.m.
Wrote the following at April 1, 2015, 1:56 p.m...
7249 was the last
r-a-c.de
ClassicHasClass avatar
ClassicHasClass
Donor
From Sunny So Cal
Who joined July 25, 2012, 7:12 p.m.
Wrote the following at April 1, 2015, 4:24 p.m...
4/1
smit happens.

:Fuel: bigred , 900MHz R16K, 4GB RAM, V12 DCD, 6.5.30
:Indy: indy , 150MHz R4400SC, 256MB RAM, XL24, 6.5.10
:Indigo2IMP: purplehaze , 175MHz R10000, Solid IMPACT
probably posted from Image bruce , Quad 2.5GHz PowerPC 970MP, 16GB RAM, Mac OS X 10.4.11
plus IBM POWER6 p520 * Apple Network Server 500 * HP C8000 * BeBox * Solbourne S3000 * Commodore 128 * many more...