Mike Yawn <[log in to unmask]> wrote:

>Hi Alfredo,
>
>I'm not sure why MPE/iX wasn't explicitly mentioned in the OS list
>on this security bulletin,

Neither am I...


>but I can assure you that the Java folks
>on the HP-UX side did a very good job of keeping us in the loop as
>this security problem was uncovered and worked on.

This is excellent and I am very glad to hear the good news.


>The security team for the HP-UX Java implementation provided us with
>details of the problem, test cases to reproduce the problem, and
>code patches that fixed the problem.  We applied these patches
>to our Java implementation.

I am sure everyone will be as pleased as I am to see this kind of
fundamental TECHNICAL cooperation from our HP-UX colleagues.


>Since the timing of our release was
>different from the timing of the HP-UX release, we issued a
>separate security bulletin for the MPE/iX security patch.
>
>The team putting out the bulletin was aware that we were also
>working on the same problem; perhaps they felt it was our
>prerogative to release any information about the status of
>the fix on MPE/iX.

Fair enough.


>I agree that MPE/iX could have been added to the list of
>platforms that the patch 'does not cover', but that might
>have lead a reader to erroneously conclude that either the
>problem did not exist on MPE, or worse, that it wasn't being
>fixed for MPE.

I agree.  It just so happens that MPE/iX folks (myself included)
tend to get a bit sensitive whenever it "appears" that some HP
people go out of their way not to mention MPE/iX even though
there seems to be no such "silent treatment" for the other OSs.

(BTW, my trusty dictionary defines "silent treatment" as a noun
that refers to "the act or an instance of totally disregarding
the object of one's contempt or disapproval as a means of
expressing one's attitude: gave her boss the silent treatment.")

Fortunately, HP (at all levels) has an easy solution to avoid
such an incorrect perception:  Just mention MPE/iX every now and
then :-)


With a big sigh of relief,

  _______________
|               |
|               |
|            r  |  Alfredo                     [log in to unmask]
|          e    |                           http://www.adager.com
|        g      |  F. Alfredo Rego
|      a        |  Manager, R & D Labs
|    d          |  Adager Corporation
|  A            |  Sun Valley, Idaho 83353-3000            U.S.A.
|               |
|_______________|