[Info-vax] Heads up: multiple exploitable security issues in HP SWS

[John Smith (who cares if I'm the one @ HP - if here's even still there)]

"Simon Clubley" <clubley at remove_me.eisner.decus.org-Earth.UFP> wrote in 
message news:jmjona$jl9$1 at dont-email.me...
> Multiple critical security issues exist in HP's VMS version of Apache.
>
> PHP related:
>
> http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03281867
>
> Java related:
>
> http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03281831
>
> I think the most telling thing about this is that the CVEs date back over
> the last several _years_; in Linux land you would generally get a new kit
> to fix the latest CVE within a few days.
>
> So much for this been the "Secure" Web Server.
>


Simon,

It takes time to ship code to India via tramp steamer. Be patient.