security_patch_check catalog

[Michael Steffens]

Hi,

running the security_patch_check tool with a current security_catalog file from today I realized a change in behaviour compared to older revisions. (at least I believe it was different, before...)

Many patches were recommended to be installed, which apparently were from the "current" column of the security patch matrix, rather than "original". From my understanding this will result in unnecessary patching, as only the "original" patches (or any of their successors) should be required for fixing security holes, but not always the latest and greatest ones in a patch family.

Does anyone know why the catalog selection was done this way?

Cheers!
Michael