The information in the following Security Bulletin should be acted upon as soon as possible. Hewlett Packard will not be liable for any consequences to any customer resulting from customer's failure to fully implement instructions in this Security Bulletin as soon as possible.
Patches are now available.
In particular the uid or gid must not be stored in a short int. Doing so in a suid program can result in an increase in capability, including root access. This only implies that the files are free from the vulnerability. It may mean the fileset contains no suid files. The script below can be used to identify suid files that are not contained in known safe filesets.