'Re: [ngw] bash'd'

[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ngw
Subject:    Re: [ngw] bash'd
From:       Mark Currie <MCurrie () laserfast ! com ! au>
Date:       2014-09-30 12:20:02
Message-ID: F3AA33DC6ACA154286EF52E47C2A82B3014DB6D3D223 () LFSERVER ! LF ! local
[Download RAW message or body]

The following TID relating to OES2 / OES11 has just been posted...

http://www.novell.com/support/kb/doc.php?id=7015701

Cheers,
Mark Currie

-----Original Message-----
From: ngw-bounces+mcurrie=laserfast.com.au@ngwlist.com \
                [mailto:ngw-bounces+mcurrie=laserfast.com.au@ngwlist.com] On Behalf \
                Of Joseph Marton
Sent: Tuesday, 30 September 2014 3:16 PM
To: NGWList
Subject: Re: [ngw] bash'd

I haven't heard of any plans to develop a patch for OES 11. In theory you could \
probably apply the SLES11 SP1 patch since that's what OES11 is based off of, but I \
doubt there's been any testing of that patch with OES. Overall I'd say your best bet \
is to update to either SP1 or even SP2.

Joe

On Mon, Sep 29, 2014 at 11:08 AM, David Holmes <DHOLMES@schoharie.k12.ny.us>
wrote:

> Hi Joe,
> 
> What about those of us on vanilla OES11 without any service packs?
> 
> Dave
> 
> > > > Joseph Marton <jmmarton@gmail.com> 9/29/2014 11:49 AM >>>
> OES11 SP1 servers should hopefully see the patch in the OES update 
> channel later today, while OES2 SP3 servers should hopefully see the 
> same thing tomorrow or Wednesday.
> 
> Joe
> 
> On Mon, Sep 29, 2014 at 10:31 AM, Elbert LaGrew 
> <Elbert.LaGrew@katun.com>
> wrote:
> 
> > I don't know Joe.  We are current on all our maintenance.  When I 
> > tried
> to
> > get them from the Novell site last week, it said that I was not
> authorized
> > to download.  I was very shocked.
> > 
> > So now you are saying I should be able to download the patches?  We 
> > have mainly SLES 10 Sp4/OES2 sp3 servers along with SLES 11 SP2 and OES11 Sp1.
> > 
> > --El
> > 
> > > > > On 9/29/2014 at 10:21 AM, in message <
> > CAMYRAPMdzXB+yhyCGh0HAG-tR96DeAV9MKgnO_YpeJF4dapSKw@mail.gmail.com>,
> > Joseph Marton <jmmarton@gmail.com> wrote:
> > 
> > This was a SUSE policy, not Novell. SUSE's policy is that when a new 
> > service pack ships, the previous one is supported for 6 months. 
> > After
> that,
> > long term support must be purchased if you are unable to upgrade to 
> > the latest service pack.
> > 
> > On the Novell side, OES customers aren't affected as patches have 
> > been in the works for a few days now for OES2 SP3 and OES11 SP1 (SP2 
> > received
> it's
> > patch last week).
> > 
> > With all that being said, given the severity of this vulnerability 
> > SUSE
> has
> > decided to release this patch to all customers regardless of whether 
> > or
> not
> > the customer has LTSS for those older SLES support pack levels.
> > 
> > So if you are an OES customer, you should see the patches in the OES 
> > channels shortly if they aren't already there. If you are using 
> > plain
> SLES,
> > the patches will be made available via RPMs you can manually 
> > download and install (except for SLES11 SP3 which has it in the channel).
> > 
> > Joe
> > 
> > Sent from my Nexus 5
> > On Sep 29, 2014 9:27 AM, "Michael Roberts" <mroberts@hrmc.org> wrote:
> > 
> > > I am being told by Novell Support that this patch can only be 
> > > obtained
> > and
> > > applied to servers running SLES11SP3.  Apparently, Novell has the 
> > > patch available for older patch levels, but are only allowing 
> > > customers who
> > paid
> > > ADDITIONAL support fees to download.
> > > 
> > > Is this really how Novell is going to treat their customers on 
> > > this issue?  An issue as critical as this, and instead of 
> > > releasing a patch, they use it as a way to get more money from 
> > > their customers?  If that
> is
> > > the case, that is a sad way to do business.  Someone please tell 
> > > me
> this
> > > isn't the case.
> > > 
> > > 
> > > 
> > > 
> > > Michael Roberts
> > > Chief Information Officer
> > > Highlands Health System /
> > > Highlands Regional Medical Center
> > > 
> > > mroberts@hrmc.org
> > > > > > "Joe Acquisto-j4" <joea@j4computers.com> 6:28 PM 9/28/2014 >>>
> > > So, while OT I was take by the lack of patches for bash on the 
> > > various Novell related sites.  Not a whisper . . .
> > > 
> > > Are we abashed?
> > > 
> > > joe a.
> > > 
> > > _______________________________________________
> > > ngw mailing list
> > > ngw@ngwlist.com
> > > http://ngwlist.com/mailman/listinfo/ngw
> > > 
> > > _______________________________________________
> > > ngw mailing list
> > > ngw@ngwlist.com
> > > http://ngwlist.com/mailman/listinfo/ngw
> > > 
> > > 
> > _______________________________________________
> > ngw mailing list
> > ngw@ngwlist.com
> > http://ngwlist.com/mailman/listinfo/ngw
> > 
> > _______________________________________________
> > ngw mailing list
> > ngw@ngwlist.com
> > http://ngwlist.com/mailman/listinfo/ngw
> > 
> > 
> _______________________________________________
> ngw mailing list
> ngw@ngwlist.com
> http://ngwlist.com/mailman/listinfo/ngw
> 
> _______________________________________________
> ngw mailing list
> ngw@ngwlist.com
> http://ngwlist.com/mailman/listinfo/ngw
> 
> 
_______________________________________________
ngw mailing list
ngw@ngwlist.com
http://ngwlist.com/mailman/listinfo/ngw
_______________________________________________
ngw mailing list
ngw@ngwlist.com
http://ngwlist.com/mailman/listinfo/ngw

[prev in list] [next in list] [prev in thread] [next in thread] 