mailing list archives
Re: Getting Off the Patch
From: Pete Smith <seclists () decapitate us>
Date: Thu, 20 Jan 2011 18:10:00 +1100
On 20 January 2011 17:37, Tracy Reed <treed () ultraviolet org> wrote:
I use HP Procurve switches and it's very easy to update firmware using scp.
quick google produces this blog entry describing the process:
I don't actually think it's how easy it is to upgrade it's more so that most
vendors have a monolithic software image so frequently the upgrade fixes a
multitude of things and you can't pick and choose which you want and which
you do not. This is where I can see a lot of money and time being consumed
in the "patching" process, some vendors even provide (potentially expensive)
services to do this testing for you. I know that JUNOS is based on FreeBSD
and leverage's the FreeBSD packaging system for upgrades but not many other
vendors have adopted a package management or modular software strategy.
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/