[Info-vax] HPE support still issuing new V/I64 V8.4 patches beyond Q1/2017?

[Simon Clubley]

On 2018-08-03, Volker Halle <volker_halle at hotmail.com> wrote:
> Rod,
>
> yes, HPE has issued the following patches for HP OpenVMS I64 V8.4 since Q1 2017.
>
> VMS84I_UPDATE-V1300                     08-DEC-2017
> VMS84I_DCL-V0200                        15-MAR-2018
> VMS84I_RMS-V0700                        08-MAY-2018 
>

It would be interesting to compare the number of VSI issued patches
for Itanium with the number of HPE issued patches over the same
time period.

The DCL one is interesting because I think it's the one which fixes
my DCL CVE on Itanium. While my specific version of the exploit only
causes a process crash on Itanium, VSI still decided to fix it at the
same time as the Alpha exploit and they confirmed they were going to
tell HPE about it at the same time.

I wonder why it took HPE another 5 months to issue their own version
of the patch ? I wonder if HPE issue their other VMS patches within
the timeframe you would expect these days.

It would be interesting also to know if there is cross-communication
between VSI and HPE when it comes to issuing patches so both versions
of Itanium VMS are kept in sync when it comes to fixing problems.

Simon.

-- 
Simon Clubley, clubley at remove_me.eisner.decus.org-Earth.UFP
Microsoft: Bringing you 1980s technology to a 21st century world