What good is a security alert that a specific feature has a potential
security hole if the problem is not explained in enough detail that you
can determine the realistic associated risk level? Applying a patch
set is a very expensive proposition. Before we can apply a patch set
to production we have to install it in a new directory structure in
test, test hundreds of online and batch progrrams, and then get the
necessary window for production. I can not justify the cost with the
limited information being given.
Received on Tue Jan 18 2005 - 19:47:22 CST
