Re: Re: Re: Re: Sun Patch Id #102060-01

[Mark.Graff () Eng Sun COM ( Mark Graff )]

I don't have yet an "official", releasable list of security patches that
were integrated into 4.1.4. But I do know that the pre-FCS version that 
I tested in early September had *every* 4.1.x security patch integrated 
into it. 

Now that's not official. But I can't think of any reason why one would
have been pulled after I signed off on my part.

It sure stinks that the software we send out has that many bugs. But hey,
this is the first release that (so far as I am aware, remember) actually
has all of the known security patches in it. There are a few folks here who
worked real hard to make that happen. It's a kind of progress.

I've got a couple of queries out, trying to pull in a copy of the
official list. If I get it soon and I can release it I'll post it here.
No promises, this is a short week.

-mg-

 From bugtraq-owner () fc net  Tue Dec 20 11:03:34 1994
 Date: Tue, 20 Dec 94 11:07:34 -0600
 To: bugtraq () fc net
 Subject: Re: Re: Re: Re: Sun Patch Id #102060-01
 Precedence: bulk
 
> > > > 4.1.4 ??? I thought that 4.1.3_U1b was to be the very last release
> > > > of sunos4...
> > The people I spoke with were quick to point out that you don't buy 
> > much over Solaris 1.1.1_U1 except to have a kernel for new HyperSparc 
> > machines.  Notably, I was told that it doesn't have the patches integrated 
> > into it, just along in a subdirectory on the CDROM.
> Not what I heard from Mark Graff (A SUN Internal Security guy).
> He indicates that the patches are integrated.  Now I have no 
> personal knowledge of this yet.
 
 
 Several people have told me this, as well as the fact that the
 name resolver is based on a newer version of BIND (4.8.3 from
 memory, but that may be wrong) as well.
 
 I guess the CE I was talking to was not quite up on things, though
 that seems atypical for him.