|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
foreseeing (cough) critical problems futile? (was: Oracle, where are the patches???)
From: Michael Shigorin (mike
osdn.org.ua)
Date: Wed May 03 2006 - 04:52:24 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
On Tue, May 02, 2006 at 04:10:27PM +0100, David Litchfield wrote:
> That's what good regular patches allow me to do. The benefits
> are absolutely clear. There are two major problems that can
> cause these benefits to evaporate into thin air, however.
> 1) Late Patches
> 2) Re-issued Patches
3) Artificially late patches -- those which could be made
available ahead of usual schedule to reduce vulnerability window.
I guess regular approach is OK for low-to-moderate but guarantees
enough additional headache for critical updates. After all, it's
only vendor-found ones that can wait, and that's not exactly
"responsible" too since nobody can tell for sure the particular
problem isn't already known out there.
--
---- WBR, Michael Shigorin <mikealtlinux.ru>
------ Linux.Kiev http://www.linux.kiev.ua/
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]