Patch Applicability

This patch can be applied to any version of PC-DCE from 4.0.0 through 4.0.16.

New Features in This Release

Problems Fixed in This Release

The following problems were fixed in PC-DCE 4.0.17 (and also in 5.0.9):

1. Fixed the buffer overflow, heap corruption, and double free bugs that were announced in the MIT krb5 Security Advisories SA-2005-002 and SA-2005-003.
   
   
2. Fixed pthread_setprio() to actually change the thread's priority.
   
   A process may have a priority class of Real Time, Idle, Below Normal, Normal, Above Normal, or Highest.
   
   For processes in the Real Time priority class, Entegrity maps the pthreads priority values from PRI_OTHER_MIN (zero) to PRI_OTHER_MAX (15) as listed in the following table.
   
   
   

   Priority	Mapped To
   0 (PRI_OTHER_MIN)	Idle (-8)
   1 through 5	Windows thread priorities -7 through -3
   6	Thread-Priority-Lowest
   7	Thread-Priority-Below-Normal
   8	Thread-Priority-Normal (the default)
   9	Thread-Priority-Above-Normal
   10 through 14	Windows thread priorities 3 through 6
   15 (PRI_OTHER_MAX)	Thread-Priority-Time-Critical

   
   
   
   For processes in the Idle, Below Normal, Normal, Above Normal, and Highest priority classes, Entegrity maps the pthreads priorities as listed in the following table.
   
   
   

   Priority	Mapped To
   0 (PRI_OTHER_MIN) and 1	Thread-Priority-Idle
   2 through 4	Thread-Priority-Lowest
   5 through 7	Thread-Priority-Below-Normal
   8	Thread-Priority-Normal the default)
   9 through 11	Thread-Priority-Above-Normal
   12 through 14	Thread-Priority-Highest
   15	Thread-Priority-Time-Critical

   
   For more details on thread priorities, consult the Microsoft Developers Network (MSDN) documentation.
   


3. Additional fix for Terminal Server Version: The TS version also includes a bug fix for a policy change introduced by Microsoft in Windows 2000 Server SP4. Microsoft added a new security policy that, by default, prevents users from creating objects in the Windows global namespace. PC-DCE used global file-mapping objects during the creation of CDS per-user caches. PC-DCE now uses local file-mapping objects.
   
   

Obtaining PC-DCE 4.0.17

If you have Windows Terminal Services or a Terminal Services client running on the machine on which you will install PC-DCE, you must download the version for Terminal Server.

Click here to request a download of PC-DCE 4.0.17

Applying PC-DCE 4.0.17

To upgrade to PC-DCE 4.0.17 :

1. Download PC-DCE 4.0.17 . (See "Obtaining PC-DCE 4.0.17 " above for download links.) 
     
   
2. Double-click the file you just downloaded. PC-DCE will be automatically updated. When the update finishes, a message will appear indicating the update was successful.
     
   
3. Reboot the machine. The update does not take effect until the machine has been rebooted.

   Note: When the cell comes back up, it may take a minute or two for the daemons to resynchronize themselves with the master. Initially, the PC-DCE Service Panel may say the daemons are unavailable. After about one minute, click Refresh and the servers will run normally.