[Fed-Talk] problem searching Apple's web site
[Fed-Talk] problem searching Apple's web site
- Subject: [Fed-Talk] problem searching Apple's web site
- From: Michael <email@hidden>
- Date: Mon, 7 Apr 2008 11:13:32 -0400
Rather annoyed that I can't search Apple's site for CVE numbers.
For example, CVE-2008-1013 is listed in an email from Apple for QT
7.4.5, but I can't find it using that phrase on Apple's web site.
This is especially a pain because I need to check up on CVE-2008-1185
among others but because of Apple's policy I can't determine if OS X is:
1) not affected
2) under study
3) vulnerable
I know Apple's official response on this. Reality is that that
response means anything Apple has not released a patch for has to be
considered to be a vulnerability in OS X if any related products are
affected, in this case Sun's Java. This is how we treated SGI for
good reason and experience.
As far as I know CVE-2008-1185 only applies to OS X 10.3 which is an
unsupported product. And yes I can go to each desktop and laptop and
get their JRE numbers, but half of them are unavailable and off-site.
And this only applies to this particular case. Next time it will be
something else.
Michael
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden