Do you know if HP-UX also make monitoring of vulnerabilities CVE?

[Carme Torca]

Hi,

Do you know if  HP-UX also make monitoring of vulnerabilities CVE like linux on https://access.redhat.com/security/cve

?

Is there any url on HP-UX?

Thanks,

Carmen.

[Patrick Wallek]

Yes, HP does keep track of those.

You can search the security bulletins by going to:

http://h20566.www2.hp.com/portal/site/hpsc/public/kb/search/

Then you can de-select all the boxes and select ONLY the "Security Bulletins" box to search only through the security bulletins.

There is also an 'archive' link next to the security bulletins, but it is not working for me at the moment.

[Patrick Wallek]

Now the 'archive' link I mentioned is working.  It takes you here:

https://h20565.www2.hp.com/portal/site/hpsc/public/kb/secBullArchive/

This is a list of all security bulletins.  If you are interested in only the HP-UX bulletins, there is a link to HP-UX that will take you here:

http://h20566.www2.hp.com/portal/site/hpsc/public/kb/secBullArchive/#UX

[Ken Grabowski]

You should also take a look at the swa utility which will examine your HP-UX installation and report to you vulnerabilities that need patching or other configuration changes to fix.  It does require a software support contract to be in place.