Re: Checking for most recent Solaris Security Patches

• Previous message: Richard Kettlewell: "Re: NetBSD Security Advisory 1999-001: select(2)/accept(2) race"
• Maybe in reply to: spamhaterat_private: "Checking for most recent Solaris Security Patches"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

>Stany (stanyat_private) wrote:
>In my experience there is always a patch that have not been applied ;-)
>I have not applied prtdiag patches on some of my machines, even though
>they are listed as recommended.  Why?  prtdiag is useless on SS10 or SS20,
>and only seems to apply to newer boxes.

Well, sun patch reports are quite strange, i remember last year, the syslog
patch wasn't recommended.
Now, the ToolTalk patch is recommended for 2.5.1, 2.5.1_x86 and 2.6_x86 but
not for 2.6. Was it because the public ttdb exploit was only for 2.5.1?
Little work is needed to make it work on 2.6.
Too bad for people who blindly install the recommended patch cluster.
Anyway, i parsed the latest Sun patch report for easy reading and retrieving:
http://www.hert.org/solaris/patches, i'll add cross links to advisory later.

--
Anthony C. Zboralski ED8D8A39 <aczat_private>
"Truth may seem but cannot be", William Shakespeare

• Next message: Aleph One: "Re: Personal web server"
• Previous message: Richard Kettlewell: "Re: NetBSD Security Advisory 1999-001: select(2)/accept(2) race"
• Maybe in reply to: spamhaterat_private: "Checking for most recent Solaris Security Patches"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:29:37 PDT