[pca] pca Digest, Vol 48, Issue 3

[King, Jeff (GE Aviation, US)]

We have recently run into a patch, marked as security related (and therefor required by many governmental agencies), on the patch site for many months as the latest revision, depended on by other patches, and contains a catastrophic issue for oracle database servers. The fact this was known inside Oracle for several months and seen as tolerable by Oracle, is rather disconcerting. My take away message from this, is that security related patches can no longer be assumed to be well tested or unimpactful, nor can the readme files be trusted (at least until the absorption of Sun into Oracle gets better ironed out, if ever.)

This places much more pressure on our development and testing environments, for what was for to here routine.


Jeff ☺


-----Original Message-----
From: pca-bounces at lists.univie.ac.at [mailto:pca-bounces at lists.univie.ac.at] On Behalf Of pca-request at lists.univie.ac.at
Sent: Monday, January 09, 2012 6:00 AM
To: pca at lists.univie.ac.at
Subject: pca Digest, Vol 48, Issue 3

Send pca mailing list submissions to
	pca at lists.univie.ac.at

To subscribe or unsubscribe via the World Wide Web, visit
	https://lists.univie.ac.at/mailman/listinfo/pca
or, via email, send a message with subject or body 'help' to
	pca-request at lists.univie.ac.at

You can reach the person managing the list at
	pca-owner at lists.univie.ac.at

When replying, please edit your Subject line so it is more specific than "Re: Contents of pca digest..."


Today's Topics:

   1. Re: can patch 147440-09 be trusted ? (Martin Paul)


----------------------------------------------------------------------

Message: 1
Date: Mon, 09 Jan 2012 09:52:56 +0100
From: Martin Paul <martin at par.univie.ac.at>
To: dclarke at blastwave.org,	"PCA (Patch Check Advanced) Discussion"
	<pca at lists.univie.ac.at>
Subject: Re: [pca] can patch 147440-09 be trusted ?
Message-ID: <4F0AAAE8.7020609 at par.univie.ac.at>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

Dennis Clarke wrote:
> I guess really the question is, can MOS and Oracle be trusted to 
> provide a kernel patch that won't make things far worse?

I can't answer that, but I agree in that the bug descriptions have become pretty useless recently (since Oracle took over?). Like revision 04 of 145080 ("SunOS
5.10: Firefox 3 patch") which reads:

   Problem Description:
   7030533 problem with Firefox browser

Never would've guessed that the patch for firefox would fix a problem with firefox.

Martin.



------------------------------

_______________________________________________
pca mailing list
pca at lists.univie.ac.at
https://lists.univie.ac.at/mailman/listinfo/pca


End of pca Digest, Vol 48, Issue 3
**********************************