topic Re: vulnerability and security patching alert notification in Operating System - HP-UX

vulnerability and security patching alert notification

Shivkumar — Fri, 30 Dec 2005 18:53:28 GMT

Dear Sirs,

(1) How does HP notify "HP Apache" related vulnerability and security information ?

Is there any URL link for this info and suggesting for required patch ?

(2) Is there a URL link for notifying vulnerability and security information with regard to HPUX Operating System and suggesting required patches ?

Thanks,
Shiv

Re: vulnerability and security patching alert notification

James R. Ferguson — Fri, 30 Dec 2005 19:06:19 GMT

Hi Shiv:

You can receive patch notifications and other information. Go to the ITRC Patch Database:

http://www1.itrc.hp.com/service/patch/mainPage.do

Among the various links there is a "subscribe to patch digests" link in the upper right hand corneer under "useful links".

Regards!

...JRF...

Re: vulnerability and security patching alert notification

Sanjay_6 — Fri, 30 Dec 2005 23:29:03 GMT

Hi Shiv,

Try this link,

https://h30046.www3.hp.com/subprofile.php?regioncode=NA&langcode=USENG&jumpid=in_SC-GEN__driverITRC&subs=ITRC

Hope this helps.

Regds

Re: vulnerability and security patching alert notification

Shivkumar — Sun, 01 Jan 2006 17:00:50 GMT

Someone had told me that hp apache is highly integrated with os and comes along with Operating Environment.
Does it mean that HP Apache security or other patches should be getting published along with operating system publication or bulletin ?

Regards,
Shiv

Re: vulnerability and security patching alert notification

Arunvijai_4 — Sun, 01 Jan 2006 22:58:35 GMT

Hi Shiv, No, Generic OS pathces downloaded from ITRC don't contain patches to Apache. Apache is part of HP-UX OE, not HP-UX OS. Hope this is understandable. If you want to find out about Security vulnerability and assessments, You can visit the following URL and sign up for regular updates.

http://cve.mitre.org/
http://www.cert.org/
http://httpd.apache.org/
http://www.hp.com/go/webserver

-Arun

Re: vulnerability and security patching alert notification

Arunvijai_4 — Mon, 02 Jan 2006 03:07:21 GMT

Hi Shiv, You can also subcribe to HP's ITRC security bulletins and patch sign-up

https://h30046.www3.hp.com/subprofile.php?regioncode=NA&langcode=USENG&jumpid=in_SC-GEN__driverITRC&subs=ITRC

-Arun

Re: vulnerability and security patching alert notification

Cem Tugrul — Mon, 02 Jan 2006 03:27:22 GMT

Shiv,

Once upon a time i had been registered the link
as Arunvijai pointed ;

https://h30046.www3.hp.com/subprofile.php?regioncode=NA&langcode=USENG&jumpid=in_SC-GEN__driverITRC&subs=ITRC

and it has been working properly up to now

Good Luck,