[Info-vax] HP OpenVMS, local Denial of Service - HP Security Bulletin

[Simon Clubley]

On 2012-04-21, Paul Sture <paul at sture.ch> wrote:
> On Fri, 20 Apr 2012 17:13:58 +0000, VAXman- wrote:
>
>> The DETAILS are here on OpenVMS.org:
>> 
>> http://www.openvms.org/stories.php?story=12/03/30/4174918
>
> Thanks.  I knew I'd seen it before.
>

So had I, which is why I didn't mention it when posting the Apache alert
even though it was in the same notification from HP.

However, I was a bit surprised to see HP re-announce it as a new alert.
Has anyone looked at the VMS MUP kit as it stands now and compared it
to the kit as it stood when the original alert was announced ?

It may be that HP quitely fixed something else in the same kit and
re-announced it. OTOH, it's just as likely they issued two seperate alerts
for the same problem by mistake.

[I don't have the original patch kit to compare as given the current issues
with VMS patch kits I am only installing them when absolutely required.
I determined this was not a concern in the restricted environment I have
the users operating in, so never downloaded the kit at the time of the
original announcement.]

Simon.

-- 
Simon Clubley, clubley at remove_me.eisner.decus.org-Earth.UFP
Microsoft: Bringing you 1980s technology to a 21st century world