Updates for the Sun Cobalt RaQ4

Downloads MUST be applied from the bottom of the page to the top, as they must be applied in chronlogical order. Application of these patches in improper order will likely result in problems with the Sun Cobalt™ product.
ALWAYS MAKE A GOOD BACKUP BEFORE DOING ANY UPDATE!!!

FTP ACCESS IS NO LONGER AVAILABLE

BIND 9.9.11

HTTP RaQ4-BIND-9.9.11-Built-by-Zeffie.com.pkg Posted:September 1, 2017 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 5,594,913

This is a Security Update for the DNS Server. It's 9-1-2017 and the Raq4 is Still Current with BIND!

Pre-Requisites:
At some point in time when you can do then out of order I'll let you know. until then please do all the updates

Reboot Required: no

MD5 Check Sum: 10787cfc053decae393511d79f83e6b5

Bind 8.4.6 Upgrade.

HTTP RaQ4-BIND-8.4.6-Built-by-Zeffie.com.pkg Posted:January 26, 2005 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 3,596,936

This updates your DNS Server to the current version of bind.

Pre-Requisites:
RaQ4-BIND-8.4.5-Built-by-Zeffie.com.pkg

Reboot Required: no

MD5 Check Sum: 4c4c09dd37855fc767e7bd65fb89696b

Bind 8.4.5 Upgrade.

HTTP RaQ4-BIND-8.4.5-Built-by-Zeffie.com.pkg Posted:January 9, 2005 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 4,224,381

This upgrades your DNS Server to the current version of bind.

This pkg includes an updated version of...

• bind
• man-pages

Pre-Requisites:
RaQ4-All-Security-2.0.1-16662.pkg

Reboot Required: Yes

MD5 Check Sum: 9385ca3b9890fb31158768903194746c

Apache, OpenSSL, and Mod_SSL Upgrade.

HTTP RaQ4-Apache-1.3.33-Built-by-Zeffie.com.pkg Posted:November 29, 2004 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 3,055,247

This update fixes several security vulnerabilities.

This pkg includes an updated...

• Apache
• mod_ssl
• openssl
• mod_perl

Pre-Requisites:
RaQ4-All-Security-2.0.1-16343.pkg

Reboot Required: Yes

MD5 Check Sum: be3e0daaa8ed329f1ad9c8bf43151ed5

Please note that you are using these updates at your own risk and I do not provide free support for them. If you have problems you should try installing the pkgs from the command line and watch for any error messages...

These pkg files also represent a basic change in the way updates have been made in the past... While most software was "patched" in the past, it will be my goal to build updated pkgs equivalent to the now Current RedHat Enterprise 3 or best... I will be doing my very best to avoid building "patched" versions of old software however in some places there is no choice.

Mutt Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-16706.pkg Posted:April 12, 2004 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 418,941

This update fixes security vulnerabilities with mutt.

Pre-Requisites:
None.

Reboot Required: No

MD5 Check Sum: 4a1b391bc789cd469fbcb20f1fe2eb55

ProFTPD Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-16717.pkg Posted:April 19, 2004 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 838,029

This update addresses a buffer overflow vulnerability with ProFTPD.

Pre-Requisites:
RaQ4-All-Security-2.0.1-15823.pkg

Reboot Required: No

MD5 Check Sum: d47fcf99b19603d5096a18e63d3f5c72

Pine Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-16612.pkg Posted:March 17, 2004 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 1,861,438

This patch fixes security vulnerabilities in Pine.

Pre-Requisites:
None.

Reboot Required: No

MD5 Check Sum: 5173af407a7acffbd47d300d48279266

Fileutils Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-16648.pkg Posted:February 10, 2004 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 638,880

This updates address a remote denial of services vulnerability in the ls program, a utility that is part of the fileutils package.

Pre-Requisites:
None.

Reboot Required: No

MD5 Check Sum: 0160b0e292073272a0062e3ed64c8e1d

Rsync Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-16675.pkg Posted:February 10, 2004 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 123,565

This update addresses a heap overflow vulnerability in rsync, is a program for sychronizing files over the network.

Pre-Requisites:
None.

Reboot Required: No

MD5 Check Sum: 982e0aee16bfef2c7bf6941fd82a2134

BIND Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-16662.pkg Posted:January 16, 2004 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 3,126,152

This update addresses a vulnerability in BIND, that could allow an attacker to conduct cache poisoning attacks on the name servers by convincing the servers to retain invalid negative responses.

For more information, see: CAN-2003-0914

Pre-Requisites:
RaQ4-All-Security-2.0.1-16311.pkg

Reboot Required: No

MD5 Check Sum: 3ccc453abf220577299a29602147e8aa

Slocate Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-16633.pkg Posted:January 16, 2004 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 30,057

This update addresses a vulnerability in slocate where the heap management structures could be corrupted possibly lead to an attacker gaining slocate group privileges.
for more information, see: CAN-2003-0848

Reboot Required: No

MD5 Check Sum: 7da97b57a3e721a506f95159337dc18e

Tcpdump Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-16504.pkg Posted:January 16, 2004 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 260,171

This update adresses a vulnerability in tcpdump, where the privileges were not dropped corrextly at startup time. for more information, see: CAN-2003-0194

Pre-Requisites:
RaQ4-All-Security-2.0.1-14559.pkg

Reboot Required: No

MD5 Check Sum: 68c07c7d46673e2505ce769192557061

Bash Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-16602.pkg Posted:December 19, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 232,034

This update addresses a vulnerability in the bash shell. Temporary files were created with insecure permissions, which could allow an attacker to launch a symlink attack to overwrite arbitrary files.
For more information, see: CAN-2000-1134

Reboot Required: No

MD5 Check Sum: 637eeb5554fd973769ca9c2904a24b8a

Sendmail Security Update 2.0.2

HTTP RaQ4-All-Security-2.0.2-16620.pkg Posted:December 05, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 860,843

This update addresses two vulnerabilities in Sendmail.

• The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks. See: CAN-2003-0694
• A potential buffer overflow in ruleset parsing. See: CAN-2003-0681

Version 2.0.1 ofthe patch did not preserve the configuration file correctly. This updated version (2.0.2) addresses this problem.

Pre-Requisites:
RaQ4-All-Security-2.0.1-16429.pkg

Reboot Required: No

MD5 Check Sum: bbe4af96f826c3476286fdd48ae3497f

NFS-Utils Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-16571.pkg Posted:December 01, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 176,789

This update addresses a buffer overflow in nfs-utils that could be exploited by an attacker, causing a remote Denial of Service.
For more information, see CAN-2003-0252

Reboot Required: No

MD5 Check Sum: 3afb09c7032e5fcd94e5ee291c328d43

Imap Clients Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-16505.pkg Posted:September 22, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 4,691,014

This update addresses multiple buffer overflow vulnerabilities discovered in various IMAP clients (Pine, Mutt, Imap).

Pre-Requisites:
RaQ4-All-Security-2.0.2-14936.pkg
RaQ4-All-Security-2.0.1-16306.pkg

Reboot Required: No

MD5 Check Sum: 8e61a1e9a313f87d269ceae03f33104d

BIND Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-16311.pkg Posted:September 22, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 3,279,749

This update addresses multiple vulnerabilities discovered in the Berkeley Internet Name Domain Server (BIND).

• BIND SIG Cached RR Overflow Vulnerability: CAN-2002-1219
• BIND OPT DoS: CAN-2002-1220
• BIND SIG Expiry Time DoS: CAN-2002-1221

Reboot Required: No

MD5 Check Sum: c26bbca1ac66a5b759b65afc4c783c31

Unzip Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-16561.pkg Posted:September 04, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 131,889

Updated unzip packages resolve a vulnerability allowing arbitrary files to be overwritten. The original patch to fix this issue (16170) missed a case where the path component included a quoted slash. These updated packages contain a new patch that corrects this issue.

for more information, see: CAN-2003-0282

Reboot Required: No

MD5 Check Sum: 0768c2e8ebbbc2997026eac6cf15d989

Zlib Security Update 2.0.2

HTTP RaQ4-All-Security-2.0.2-16487.pkg Posted:August 25, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 100,045

This update addresses a buffer overflow vulnerability in the gzprintf function of the zlib compression package.

For more information, see CAN-2003-0107

Version 2 corrects dependency on update 13323

Pre-Requisites:
RaQ4-All-Security-2.0.1-13323.pkg

Reboot Required: No

MD5 Check Sum: 0d06c35dd17e60482ac87297bbdc2ef9

Maximum Disk Space Update 2.0.1

HTTP RaQ4-All-System-2.0.1-16494.pkg Posted:May 28, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 2,275

This update addresses a problem when setting the maximum disk space for a virtual site to a value divisible by 10.

Reboot Required: No

MD5 Check Sum: 1cf0bfa6f15770a69b63ecf9a387eb6a

Kernel Update C37 2.0.1

HTTP RaQ4-All-Kernel-2.0.1-2.2.16C37-III-1-2.pkg Posted:May 19, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 4,205,939

This updated kernel fixes a vulnerability in ptrace that could allow local users to obtain full privileges. Remote exploitation of this hole is not possible. For more information see: CAN-2003-0127

This kernel also fixes a problem with the I2C driver where the locks were not IRQ safe. This could cause problems including the system reporting false fan failures, repeated raid syncs, and random reboots.

Reboot Required: Yes

MD5 Check Sum: a5b1f97c372cb5b517558e141792e3d9

Vim Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-16358.pkg Posted:May 08, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 3,815,127

This update addresses a vulnerability found in the Vim editor, that could allow attackers to execute arbitrary commands using the libcall feature in modelines. For more information, see CAN-2002-1377

Reboot Required: No

MD5 Check Sum: 8b0f0b92200cff373028a338dca568e8

Apache & SSL Security 2.0.1

HTTP RaQ4-All-Security-2.0.1-16343.pkg Posted:May 08, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 2,831,977

This update addresses multiple vulnerabilities found in Apache and OpenSSL.

• Timing attack on OpenSSL, ref:CAN-2003-0078
• Buffer overflows in ApacheBench, ref:CAN-2002-0843
• Cross-site scripting vulnerability in the mod_ssl Apache module, ref:CAN-2002-1157
• Cross-site scripting (XSS) vulnerability, ref:CAN-2002-0840
• Shared memory scoreboard vulnerability, ref:CAN-2002-0839
• OpenSSL does not use RSA blinding by default, ref:CAN-2003-0147
• Information Leak in OpenSSL, ref:CAN-2003-0131

Reboot Required: Yes

MD5 Check Sum: 187867bd991cfdd0eab0b8c0e913b0e0

Qpopper Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-16409.pkg Posted:May 01, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 97,098

This update addresses a buffer overflow vulnerability found in Qpopper.
For more information, see: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0143

Reboot Required: No

MD5 Check Sum: 46730b7b3beb48f2ece82730142fd486

Wget Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-16342.pkg Posted:May 01, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 346,809

This update addresses a directory traversal vulnerability in wget.
For more information see: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-1344

Reboot Required: No

MD5 Check Sum: a010a4c05392cc1486ca0f2d7dfa4125

Pine & File Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-16306.pkg Posted:April 21, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 1,977,159

This update addresses vulnerabilities found in the pine mail program and the file program.

Pine was vulnerable to a remote denial of service. For more information, see http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-1320

File was vulnerable to a local buffer overflow. For more information, see http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0102

Reboot Required: No

MD5 Check Sum: 2e13e4520140d9bd3ef7e0a1e1d1f9c0

Glibc Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-15578.pkg Posted:April 17, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 24,228,174

This update addresses a security vulnerability in the glibc resolver. For more information, see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-1146

Reboot Required: Yes

MD5 Check Sum: cbcbb45e653b62c9005e7de2347c2173

Sendmail Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-16429.pkg Posted:April 10, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 865,056

This patch updates the Sendmail program on your server to address a buffer overflow vulnerability. See http://www.cert.org/advisories/CA-2003-12.html for more information.

Pre-Requisites:
RaQ4-All-Security-2.0.1-16402.pkg

Reboot Required: No

MD5 Check Sum: 911dd676681b050a6c17e5733c79fb45

Kernel Update 2.0.1 C35

HTTP RaQ4-All-Kernel-2.0.1-2.2.16C35-III-1.pkg Posted:April 07, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 3,325,220

This patch will update your kernel to version 2.2.16-C35. This kernel addresses a RAID issue on the RaQ4 where synchronization of a RAID array could take a long time.

Reboot Required: Yes

MD5 Check Sum: e778ebe202cca27540d2cf28cb3ca1c8

Sendmail Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-16402.pkg Posted:March 28, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 862,247

This patch updates the Sendmail program on your server to address a remote buffer overflow vulnerability. See http://www.cert.org/advisories/CA-2003-07.html for more information.

Reboot Required: No

MD5 Check Sum: 8d01bb169854393f6547d2718f8f7f56

PHP & PostgreSQL Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-15959.pkg Posted:March 20, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 7,025,658

This package addresses several issues with PHP and postgresql. Two PHP bugs have been fixed; the first is arbitrary command execution via the 5th parameter of mail() and the second is URL redirection using fopen(). In Postgresql, multiple buffer overruns have been recently identified and patched. In addition, Postgresql debugging is now disabled by default.

Reboot Required: Yes

MD5 Check Sum: f4798e1d90d332e23855dd5161ad5496

Root DNS server update 2.0.1

HTTP RaQ4-All-System-2.0.1-16365.pkg Posted:March 13, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 2,322

The IP address of one of the root DNS servers (J.ROOT-SERVERS.NET) has been changed. This patch updates the list of root DNS servers on your appliance.

Reboot Required: No

MD5 Check Sum: f4216e305ee5341a6e6d043667c024a1

Tar & Unzip Security update 2.0.1

HTTP RaQ4-All-Security-2.0.1-16170.pkg Posted:March 13, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 504,087

The unzip and tar utilities contain vulnerabilities which can allow arbitrary files to be overwritten during archive extraction. See http://www.securityfocus.com/archive/1/196445 for more information.

Reboot Required: No

MD5 Check Sum: b00b98f358c6bfdd239a188938e930d9

Cgiwrap Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-16261.pkg Posted: February 14, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 41,402

This package addresses a cross-site scripting vulnerablity with cgiwrap when used with browsers that ignore input before the HTML and BODY tags.

Reboot Required: No

MD5 Check Sum: 04c0e33304a3225498ac7667ff8b4a55

Proftpd Security Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-15823.pkg Posted: January 27, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 396,743

This patch fixes an upload file permission issue in proftpd. It also adds an extra security measure by preventing some default system accounts from logging in via ftp

Reboot Required: No

MD5 Check Sum: 72542c19fca67a688f88ef9f017ffbd0

Util-linux Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-15673.pkg Posted: January 08, 2003 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 857,844

The chfn binary from the util-linux package could be used to gain unauthorized access.

Reboot Required: No

MD5 Check Sum: 901504d66b3a9d5500dea101765bebce

Kernel Update 2.0.1 C33

HTTP RaQ4-All-Kernel-2.0.1-2.2.16C33III-1.pkg Posted: December 05, 2002 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 4,195,898

Kernel C33 fixes the "do_try_to_free_pages failed" VM problem under heavy load and also adds support for raw I/O.

Reboot Required: Yes

MD5 Check Sum: 0ea53b2ef29a724c16111c32b167ef17

SHP Removal 2.0.1

HTTP RaQ4-en-Security-2.0.1-SHP_REM.pkg Posted: November 21, 2002 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 1,380,859

This patch removes the SHP package. Customers who installed SHP are advised to install this patch to remove a serious vulnerability issue. For more information please see:
http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fsalert/49377

Reboot Required: Yes

MD5 Check Sum: ca100017bc957075ba6b142f337ef0a4

IMAP Update 2.0.2

HTTP RaQ4-All-Security-2.0.2-14936.pkg Posted: November 4, 2002 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 2,114,094

This patch fixes a Remote Buffer Overflow in imapd.

Reboot Required: No

MD5 Check Sum: 7e28442e0a713afd91fbe5dadad920ab

Apache & SSL Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-2-15787.pkg Posted: September 25, 2002 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 2,829,360

This patch fixes multiple security issues with the Apache HTTP Server and OpenSSL. For more information please see:
http://online.securityfocus.com/advisories/4254
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F45509&zone_32=category%3Asecurity

Reboot Required: Yes

MD5 Check Sum: 38264ad4dfcf3f16101385a6ad139178

CGIWrap Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-14997.pkg Posted: August 27, 2002 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 40,923

This package contains an updated CGIWrap that addresses a security issue recently discovered. For more information, please see: http://online.securityfocus.com/bid/3084

Reboot Required: No

MD5 Check Sum: 579057707156df964a2e3dbf9f1f18d3

Apache Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-15417.pkg Posted: June 28, 2002 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 2,635,768

This package contains an updated Apache HTTP Server that addresses a security issue recently discovered. For more information, please see http://httpd.apache.org/info/security_bulletin_20020617.txt

MD5 Check Sum: d4055016dca256af3070c866cde2bcae

Reboot Required: Yes

TCPDUMP Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-14559.pkg Posted: June 27, 2002 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 542,593

This patch replaces the TCPDUMP network analysis tool with a new version. This version of TCPDUMP contains security fixes for issues that were found in prior releases of TCPDUMP for the Sun Cobalt Server Appliance.

MD5 Check Sum: ed01348f71d8ebdaac8065d444a41269

Reboot Required: No

PHP Service Settings Update 2.0.1

HTTP RaQ4-All-System-2.0.1-14185.pkg Posted: June 18, 2002 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 2,611

This patch fixes a sync issue between what is shown in the web UI and what the actual state is on the server for the PHP service.

MD5 Check Sum: 9968454952f9e0dc773a624016df2948

Reboot Required: Yes

Security Bundle Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-13323.pkg Posted: June 18, 2002 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 20,360,962

This package upgrades the following for a varity of security concerns:

• Bind 8.2.3-C4
• Cyrus SASL 1.5.24-C4
• ProFTPd 1.2.4-C2
• urlview 0.7-5
• Mutt 1.2.5i-C2
• Pine 4.44-C1
• zlib 1.1.3-25.7
• binutils 2.11.90.0.8-12c2r4
• CVS 1.11.1p1-6.2.C1r4
• libstdc++ 2.95.3-1c1r4
• GCC 2.95.3-1c1r4
• Sed 3.02-9

MD5 Check Sum: 08285df27e1420ad8193c689ded57b89

Reboot Required: No

Duplicate Email Alias Update 2.0.1

HTTP RaQ4-All-System-2.0.1-13993.pkg Posted: May 13, 2002 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 2,796

This patch filters email alias entries preventing duplicate virtusertable entries on your server appliance.

MD5 Check Sum: 13151e1c05deb07648056b7f0f1f87c3

Reboot Required: No

PHP Update Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-14039.pkg Posted: April 17, 2002 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 2,320,128

This patch upgrades the version of the PHP scripting engine on your server appliance. This version of PHP contains security fixes for issues that were found in prior releases of PHP for the Sun Cobalt server appliance.

This Update installs PHP version 4.0.6-C4. If you have upgraded PHP through a means other then packages from this website, your changes will be overwritten.

MD5 Check Sum: e640b63ed855068d7df58c17d82885a2

Reboot Required: No

glibc Update 2.0.1

HTTP RaQ4-All-Security-2.0.1-13453.pkg Posted: March 13, 2002 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 24,222,502

This updates the version of glibc to fix a known vulnerability with file globbing functionality. See the following link for details: http://online.securityfocus.com/bid/3707

MD5 Check Sum: af333d0ca687404569c996f2746a4cc1

Reboot Required: Yes

Kernel Update 2.0.1

HTTP RaQ4-All-Kernel-2.0.1-2.2.16C32III.pkg Posted: March 13, 2002 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 3,309,036

Updates Kernel version to C32 to fix following security alert. http://www.securityfocus.com/advisories/3607 NOTE: This package is for Sun Cobalt RaQ 4 Non-StaQware systems only. If you have Sun Cobalt StaQware running, please install kernel update at http://www.cobalt.com/support/download/staqwareraq4.html

MD5 Check Sum: 7cf79a0da0c91a0de98db51977deb430

Reboot Required: Yes

DNS Update 2.0.1

HTTP RaQ4-All-System-2.0.1-12854.pkg Posted: March 13, 2002 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 3,957

This package fixes a number of issues within Sun Cobalt's DNS configuration and management interface and it's interactions with the nameserver. Moreover, after this patch, the administrator will have more options in specifying the method of RFC 2317 style reverse subnet delegation.

MD5 Check Sum: b489ef028b80ceeb30bf5db2348923f9

Reboot Required: No

OS Update 2.0

HTTP RaQ4-en-OSUpdate-2.0.pkg Posted: January 29, 2002 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 33,446,292

This patch is an update to the Sun Cobalt RaQ 4 server appliance. It incorporates all previous patches as well as various bug fixes. See the following PDF for a complete list of bugs addressed in this update.

Prerequisites:

• RaQ4-en-OSUpdate 1.0
• RaQ4-All-Security-1.0.3-8762 (DOS /tmp attack)
• RaQ4-All-System-1.0.1-9882 (DNS update)
• RaQ4-All-Security-1.0.1-10602 (Apache Update)
• RaQ4-All-Kernel-1.0.1-2.216C28III (Kernel Update)

MD5 Check Sum: bd95b7cf9302cb9b7c335f99863889eb

Reboot Required: Yes

Kernel Update 1.0.1

HTTP RaQ4-All-Kernel-1.0.1.216C28III.pkg Posted: September 20, 2001 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 4,452,828

Kernel C24 and C27 would not allow the system to switch to the correct disk after a RAID failure. To correct this a new modutils has been included for the gen III Kernel so that the bandwidth module could correctly load automatically after a reboot. Also included in the update is the fix for the sysctl negative offset bug as well as the ptrace setuid bug.

MD5 Check Sum: dad1efe8427613aa4830f85068529647

Reboot Required: Yes

Apache Update 1.0.1

HTTP RaQ4-All-Security-1.0.1-10602.pkg Posted: August 21, 2001 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 2,599,823

This patch upgrades the version of Apache to 1.3.20. This version of Apache contains various security fixes for issues that were found in prior releases of Apache for the Sun Cobalt Server Appliance.

NOTE: Apache 1.3.20 Sun Cobalt Upgrade Overwrites Sun Chili!Soft Apache 1.3.20 Support. If you have upgraded your 3.5.2 version of Sun Chili!Soft ASP to 3.6 AND you installed the Sun Cobalt patch to support Apache 1.3.20, Sun Chili!Soft ASP 3.6 will not work. Contact Sun Chili!Soft Technical Support at chili.tech@sun.com for instructions on how to patch Sun Chili!Soft ASP 3.6 to support Apache 1.3.20.

If you have not upgraded to Sun Chili!Soft ASP 3.6 and want support for Apache 1.3.20, install ALL Sun Cobalt 1.0.1 patches FIRST (including the Apache Update 1.0.1), and then install Sun Chili!Soft ASP 3.6. To download a free copy of 3.6 with Sun Chili!Soft SpicePack, go to http://www.chilisoft.com/chiliasp/cobalt.asp

MD5 Check Sum: 3b04eebff0e9f12a18415130079b0a72

Reverse Delegation Update 1.0.1

HTTP RaQ4-All-System-1.0.1-9882.pkg Posted: June 29, 2001 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 3,184

This patch fixes reverse delegations for subnets smaller than a /24. It also adds the ability to have 127.0.0.1 map to the localhost for a domain, and ensures that information relating to Secondary Name Services for networks appears in the web interface properly.

MD5 Check Sum: 325b2c69db79ef4c2c36e25c13bb8301

DoS Attack Update 1.0.2

HTTP RaQ4-All-Security-1.0.3-8762.pkg Posted: February 7, 2001 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 2,913

This security update prevents a DoS attack by corrupting htpasswd and passwd when a site administrator adds a new user to the system and the "/tmp" directory or the "/" (root) directory is full.

OS Update 1.0

HTTP RaQ4-en-OSUpdate-1.0.pkg Posted: December 21, 2000 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 10,994,408

Prerequisites:

• Point release RaQ4-All-System-0.0.1-7657.pkg (Frontpage Fixes) and
• Point release RaQ4-All-Security-0.0.1-8061 (glibc update)

• RaQ4-All-Security-0.0.1-8577.pkg
• RaQ4-en-System-0.0.6-6375.pkg
• RaQ4-All-System-0.0.1-8061.pkg
• RaQ4-All-System-0.0.2-7709.pkg
• RaQ4-All-Security-0.0.1-8164.pkg
• RaQ4-All-Security-0.0.1-8148.pkg
• RaQ4-All-Security-0.0.1-8008.pkg
• RaQ4-All-System-0.0.1-7565.pkg
• RaQ4-en-Security-0.0.1-6453.pkg
• RaQ4-All-System-0.0.1-7657.pkg
• RaQ4-All-System-0.0.1-7262.pkg
• RaQ4R-All-System-0.0.1-6618.pkg

• "Web Access by Domain" is now active when activating under control panel.
• Generate report now removes duplicate entries
• Analog could cause web stats not to be generated.

• Active monitor was updated to not be activated if anonymous ftp goes over quota
• Active monitor was updated to correctly signal low disk space. Prior to this, files owned by admin and root could cause Active monitor to not correctly signal low disk space.
• Messages were updated which were sent to users
• Deleted users were not being deleted correctly in active monitor tables.
• Active monitor does not turn red if you have a cd-rom connected

• UPS use to shutdown while configuring as a slave
• 255 can now be added as part of an IP address

• Updated Interbase ODBC driver
• Updated MySQL ODBC driver
• Software now prevents malformed ODBC connections which could cause ASP to not function

• FrontPage was unable to establish a connection when reusing a name of a deleted site
• FrontPage forms can now be configured to sent email to a user
• FrontPage sub web creation now is supported.

• Changes to DNS Server will now update all serial numbers of all zones

• Mail lists are now sorts usernames
• Users are now able to use the 'newconfig' option of majordomo
• Deleting a user did not delete POP lockfile
• Blank lines in "relay field" are now correctly handled.
• Duplicate entries now checked for in email server parameters
• Email to mailing list bounces if message contains majordomo commands
• Vacation mail exploit has been fixed.

• New shell tools have been included
• New version of proftpd is installed
• sysreset is now disabled since it is not supported
• syslog was updated to address security exploits.
• traceroute was updated to address security exploit.
• tmpwatch was updated to address security exploits
• bind was updated to address security exploits

glibc Update 0.0.1

HTTP RaQ4-All-Security-0.0.1-8061.pkg Posted: November 29, 2000 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 24,178,405

This updates the version of glibc. Prior to this update it was possible for local users to gain root access.

Due to the size of this update, please place this package in /home/packages and install via the 'Loaded' option under the 'Install Software' screen.

FrontPage Update 0.0.1-7657

HTTP RaQ4-All-System-0.0.1-7657.pkg Posted: October 18, 2000 FTP Point your FTP client to ftp://www.zeffie.com/ Size: 4,090

This update fixes three problems that can occur when using Microsoft FrontPage.

• Using FrontPage form submission displays error and is unable to send email with form information.
• Disabling a FrontPage user web site causes site subweb creation to not work correctly.
• Unable to connect to a virtual site with FrontPage if the site has been deleted and then recreated with same name.

  NOTE: These virtual sites have an inconsistent FrontPage state. This update will fix these inconsistencies and correctly show these sites as being non-FrontPage enabled. The site-administrator needs to re-enable FrontPage for the above sites and give a new webmaster password before any user will be able to connect to this site with FrontPage.