                            TECHNICAL BULLETIN
                               Bulletin 278
                             January 3, 1991

                 Essential Patches to NetWare 386 v3.10 rev. A

Several patches have been released for NetWare 386 v3.10 rev. A, which are
considered essential for the operating system's optimum functionality. 
Each of these patches should be loaded at every installation of NetWare 386
v3.10 rev. A.  (See Technical Bulletin 277 for an explanation of patch
types)

The following list identifies and describes the patch and provides, in
parentheses, the filename on NetWire to download.

CACHEFIX.NLM  is a semi-static patch that corrects the caching problem. 
      Under heavy usage when data is read from cache before the cache is
      written to the disk, the data read could result in the return of
      erroneous data.  If cached data is read and rewritten to cache, the
      corruption would be saved to disk. If the data is not changed in
      cache, the data will be saved correctly.  This problem exists
      primarily with random access applications (for example, database
      servers).  (CACHFX.ZIP)

FIXOPEN.NLM is a dynamic patch that overrides the Read Only security of
      v3.10a, providing pre-v3.10a access functionality.  In NetWare
      versions previous to NetWare 386 v3.10 rev. A, a file flagged with
      Read Only rights could be opened by applications using a Read/Write
      open DOS call.  This deficiency was corrected in the v3.10a security
      enhancements.  However, many applications are written using file open
      calls requiring Read and Write rights.  If these applications are used
      with v3.10a, the errors "File not found" or "Access denied" may appear
      when attempting to open files flagged as Read Only.  (FXOPEN.ZIP)

PASSFIX.NLM is a dynamic patch that corrects a very rare security
      shortcoming which has been identified by Novell.  This patch is for
      NetWare 386 v3.10 rev. A servers.  For most Novell customers who have
      intruder detection set on, this security weakness will not pose a
      problem.  Novell recommends that all customers turn intruder detection
      on.  If a customer has greater concerns for security, this corrective
      patch should be applied. (SEC386.ZIP)

WDOGFIX.NLM is a semi-static patch that corrects a problem where the server
      comes to an abnormal end with the message "Abend: Total sprintf string
      length was too long (Error code 00000000)."  This Abend could occur at
      any time, but occurs more frequently if the console parameter "Console
      display watchdog logouts = ON" was set.  This patch also fixes a
      problem that displays invalid characters or user names on the console
      screen when the watchdog clears a user's connection. (WDOGFX.ZIP)
