Sun does provide patches for vulernabiliteies in the versions of Apache that are included in a Solaris product. I believe a support contract is now required to get the patches before they are released in the next Solaris 10 update. Because our release schedule and other constraints, Sun always lags behind what is available on apache.org. Customers can escalate important problems that need to be fixed quickly. Sun does pay close attention to security issues.
The email about the availability of sfw builds sent to sfwnv-discuss at opensolaris.org refers to builds for Solaris 11, aka nevada. This is not what you want for your commercial platform that is moving to solaris 10. hope this helps marilyn Edward Quick wrote: > Hi, > > At the company I work in, we use apache, openssh and openssl on > (commercial) Solaris. Up until now I've always downloaded the code, > compiled and packaged it myself. However we're moving to Solaris 10 now > which provides this software as part of the OS, so I'm not sure whether > it's best just to use that instead of my own builds? > > The main concern I have is whether Solaris will provide the patches as > soon as any vulnerabilities come out, especially for Apache? Also I > noticed the openssl was quite old, although I'm not sure if this is a > vendor version or not? > > $ /usr/sfw/bin/openssl version > OpenSSL 0.9.7d 17 Mar 2004 > $ uname -a > SunOS fuj306 5.10 Generic_118833-17 sun4us sparc FJSV,GPUZC-M > > I looked through some of the previous emails, and saw announcements for > SFW build 43 and 41. Can I use these on the commercial Solaris platform? > If so, where are they downloaded them from? > > Thanks for any help. > > Ed. > > Be one of the first to try Windows Live Mail. > <http://ideas.live.com/programpage.aspx?versionId=5d21c51a-b161-4314-9b0e-4911fb2b2e6d> > > > ------------------------------------------------------------------------ > > _______________________________________________ > sfwnv-discuss mailing list > sfwnv-discuss at opensolaris.org > http://mail.opensolaris.org/mailman/listinfo/sfwnv-discuss
