<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div style="RIGHT: auto">Are vulnerabilities like these below fixed by illumos? I know the "security" page on OI is dead and has never had any markups since it was created, and I am reasonably certain there isn't an OI Security officer to handle matters. </div>
<div style="RIGHT: auto"> </div>
<div style="RIGHT: auto"><VAR id=yui-ie-cursor></VAR>If they are fixed in illumos, then what is the process of having them available via 'pkg image-update' without having to go to the next release e.g., 151a8?</div>
<div style="RIGHT: auto"> </div>
<div style="RIGHT: auto">
<TABLE style="RIGHT: auto" border=1 summary="Medium Vulnerabilities" align=center>
<TBODY style="RIGHT: auto">
<TR style="RIGHT: auto">
<TD style="TEXT-ALIGN: left; WORD-BREAK: break-all; RIGHT: auto" width="20%">sun -- sunos<BR></TD>
<TD style="TEXT-ALIGN: left">Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows remote attackers to affect confidentiality and integrity via vectors related to NFS client mounts and IPv6.</TD>
<TD style="TEXT-ALIGN: center">2013-04-17</TD>
<TD style="TEXT-ALIGN: center; WIDTH: 5%"><A href="http://nvd.nist.gov/cvss.cfm?version=2&name=CVE-2013-0405&vector=(AV:N/AC:L/Au:N/C:P/I:P/A:N)" target=_blank>6.4</A></TD>
<TD><A href="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0405" target=_blank>CVE-2013-0405</A><BR></TD></TR>
<TR>
<TD style="TEXT-ALIGN: left; WORD-BREAK: break-all" width="20%">sun -- sunos<BR></TD>
<TD style="TEXT-ALIGN: left">Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect integrity via unknown vectors via vectors related to Kernel/IPsec.</TD>
<TD style="TEXT-ALIGN: center">2013-04-17</TD>
<TD style="TEXT-ALIGN: center; WIDTH: 5%"><A href="http://nvd.nist.gov/cvss.cfm?version=2&name=CVE-2013-0406&vector=(AV:N/AC:M/Au:N/C:N/I:P/A:N)" target=_blank>4.3</A></TD>
<TD><A href="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0406" target=_blank>CVE-2013-0406</A><BR></TD></TR>
<TR>
<TD style="TEXT-ALIGN: left; WORD-BREAK: break-all" width="20%">sun -- sunos<BR></TD>
<TD style="TEXT-ALIGN: left">Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vectors related to CPU performance counters drivers.</TD>
<TD style="TEXT-ALIGN: center">2013-04-17</TD>
<TD style="TEXT-ALIGN: center; WIDTH: 5%"><A href="http://nvd.nist.gov/cvss.cfm?version=2&name=CVE-2013-0408&vector=(AV:N/AC:L/Au:N/C:N/I:N/A:P)" target=_blank>5.0</A></TD>
<TD><A href="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0408" target=_blank>CVE-2013-0408</A><BR></TD></TR>
<TR>
<TD style="TEXT-ALIGN: left; WORD-BREAK: break-all" width="20%">sun -- sunos<BR></TD>
<TD style="TEXT-ALIGN: left">Unspecified vulnerability in Oracle Sun Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via vectors related to RBAC Configuration.</TD>
<TD style="TEXT-ALIGN: center">2013-04-17</TD>
<TD style="TEXT-ALIGN: center; WIDTH: 5%"><A href="http://nvd.nist.gov/cvss.cfm?version=2&name=CVE-2013-0411&vector=(AV:L/AC:H/Au:M/C:C/I:C/A:C)" target=_blank>5.9</A></TD>
<TD><A href="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0411" target=_blank>CVE-2013-0411</A><BR></TD></TR>
<TR>
<TD style="TEXT-ALIGN: left; WORD-BREAK: break-all" width="20%">sun -- sunos<BR></TD>
<TD style="TEXT-ALIGN: left">Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Remote Execution Service.</TD>
<TD style="TEXT-ALIGN: center">2013-04-17</TD>
<TD style="TEXT-ALIGN: center; WIDTH: 5%"><A href="http://nvd.nist.gov/cvss.cfm?version=2&name=CVE-2013-0413&vector=(AV:L/AC:M/Au:N/C:P/I:P/A:P)" target=_blank>4.4</A></TD>
<TD><A href="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0413" target=_blank>CVE-2013-0413</A><BR></TD></TR>
<TR>
<TD style="TEXT-ALIGN: left; WORD-BREAK: break-all" width="20%">sun -- sunos<BR></TD>
<TD style="TEXT-ALIGN: left">Unspecified vulnerability in Oracle Sun Solaris 10, when running on SPARC T4 servers, allows local users to affect availability via unknown vectors related to Kernel.</TD>
<TD style="TEXT-ALIGN: center">2013-04-17</TD>
<TD style="TEXT-ALIGN: center; WIDTH: 5%"><A href="http://nvd.nist.gov/cvss.cfm?version=2&name=CVE-2013-1494&vector=(AV:L/AC:M/Au:N/C:N/I:N/A:C)" target=_blank>4.7</A></TD>
<TD><A href="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1494" target=_blank>CVE-2013-1494</A><BR></TD></TR>
<TR style="RIGHT: auto">
<TD style="TEXT-ALIGN: left; WORD-BREAK: break-all" width="20%">sun -- sunos<BR></TD>
<TD style="TEXT-ALIGN: left; RIGHT: auto">Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/IO, a different vulnerability than CVE-2013-1498.</TD>
<TD style="TEXT-ALIGN: center">2013-04-17</TD>
<TD style="TEXT-ALIGN: center; WIDTH: 5%"><A href="http://nvd.nist.gov/cvss.cfm?version=2&name=CVE-2013-1496&vector=(AV:L/AC:L/Au:N/C:N/I:N/A:C)" target=_blank>4.9</A></TD>
<TD><A href="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1496" target=_blank>CVE-2013-1496</A><BR></TD></TR>
<TR>
<TD style="TEXT-ALIGN: left; WORD-BREAK: break-all" width="20%">sun -- sunos<BR></TD>
<TD style="TEXT-ALIGN: left">Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/IO, a different vulnerability than CVE-2013-1496.</TD>
<TD style="TEXT-ALIGN: center">2013-04-17</TD>
<TD style="TEXT-ALIGN: center; WIDTH: 5%"><A href="http://nvd.nist.gov/cvss.cfm?version=2&name=CVE-2013-1498&vector=(AV:L/AC:L/Au:N/C:N/I:N/A:C)" target=_blank>4.9</A></TD>
<TD><A href="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1498" target=_blank>CVE-2013-1498</A><BR></TD></TR></TBODY></TABLE></div>
<TABLE style="RIGHT: auto" border=1 summary="Low Vulnerabilities" align=center>
<TBODY style="RIGHT: auto">
<TR>
<TD style="TEXT-ALIGN: left; WORD-BREAK: break-all" width="20%">sun -- sunos<BR></TD>
<TD style="TEXT-ALIGN: left">Unspecified vulnerability in Oracle Sun Solaris 8, 9, and 10 allows local users to affect confidentiality via unknown vectors related to Utility/fdformat.</TD>
<TD style="TEXT-ALIGN: center">2013-04-17</TD>
<TD style="TEXT-ALIGN: center; WIDTH: 5%"><A href="http://nvd.nist.gov/cvss.cfm?version=2&name=CVE-2012-0568&vector=(AV:L/AC:L/Au:N/C:P/I:N/A:N)" target=_blank>2.1</A></TD>
<TD><A href="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0568" target=_blank>CVE-2012-0568</A><BR></TD></TR>
<TR>
<TD style="TEXT-ALIGN: left; WORD-BREAK: break-all" width="20%">sun -- sunos<BR></TD>
<TD style="TEXT-ALIGN: left">Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect availability via unknown vectors related to Libraries/Libc.</TD>
<TD style="TEXT-ALIGN: center">2013-04-17</TD>
<TD style="TEXT-ALIGN: center; WIDTH: 5%"><A href="http://nvd.nist.gov/cvss.cfm?version=2&name=CVE-2012-0570&vector=(AV:L/AC:L/Au:N/C:N/I:N/A:P)" target=_blank>2.1</A></TD>
<TD><A href="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-0570" target=_blank>CVE-2012-0570</A><BR></TD></TR>
<TR>
<TD style="TEXT-ALIGN: left; WORD-BREAK: break-all" width="20%">sun -- sunos<BR></TD>
<TD style="TEXT-ALIGN: left">Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect availability via unknown vectors related to Utility.</TD>
<TD style="TEXT-ALIGN: center">2013-04-17</TD>
<TD style="TEXT-ALIGN: center; WIDTH: 5%"><A href="http://nvd.nist.gov/cvss.cfm?version=2&name=CVE-2013-0403&vector=(AV:L/AC:M/Au:N/C:N/I:N/A:P)" target=_blank>1.9</A></TD>
<TD><A href="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0403" target=_blank>CVE-2013-0403</A><BR></TD></TR>
<TR style="RIGHT: auto">
<TD style="TEXT-ALIGN: left; WORD-BREAK: break-all" width="20%">sun -- sunos<BR></TD>
<TD style="TEXT-ALIGN: left; RIGHT: auto">Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kernel/Boot.</TD>
<TD style="TEXT-ALIGN: center">2013-04-17</TD>
<TD style="TEXT-ALIGN: center; WIDTH: 5%"><A href="http://nvd.nist.gov/cvss.cfm?version=2&name=CVE-2013-0404&vector=(AV:L/AC:H/Au:N/C:P/I:P/A:P)" target=_blank>3.7</A></TD>
<TD><A href="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0404" target=_blank>CVE-2013-0404</A><BR></TD></TR>
<TR>
<TD style="TEXT-ALIGN: left; WORD-BREAK: break-all" width="20%">sun -- sunos<BR></TD>
<TD style="TEXT-ALIGN: left">Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect integrity and availability via unknown vectors related to Utility/pax.</TD>
<TD style="TEXT-ALIGN: center">2013-04-17</TD>
<TD style="TEXT-ALIGN: center; WIDTH: 5%"><A href="http://nvd.nist.gov/cvss.cfm?version=2&name=CVE-2013-0412&vector=(AV:L/AC:L/Au:N/C:N/I:P/A:P)" target=_blank>3.6</A></TD>
<TD><A href="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0412" target=_blank>CVE-2013-0412</A><BR></TD></TR>
<TR>
<TD style="TEXT-ALIGN: left; WORD-BREAK: break-all" width="20%">sun -- sunos<BR></TD>
<TD style="TEXT-ALIGN: left">Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Network Configuration.</TD>
<TD style="TEXT-ALIGN: center">2013-04-17</TD>
<TD style="TEXT-ALIGN: center; WIDTH: 5%"><A href="http://nvd.nist.gov/cvss.cfm?version=2&name=CVE-2013-1499&vector=(AV:L/AC:L/Au:S/C:N/I:N/A:P)" target=_blank>1.7</A></TD>
<TD><A href="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1499" target=_blank>CVE-2013-1499</A><BR></TD></TR>
<TR>
<TD style="TEXT-ALIGN: left; WORD-BREAK: break-all" width="20%">sun -- sunos<BR></TD>
<TD style="TEXT-ALIGN: left">Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via unknown vectors related to Kernel.</TD>
<TD style="TEXT-ALIGN: center">2013-04-17</TD>
<TD style="TEXT-ALIGN: center; WIDTH: 5%"><A href="http://nvd.nist.gov/cvss.cfm?version=2&name=CVE-2013-1530&vector=(AV:L/AC:H/Au:S/C:N/I:N/A:C)" target=_blank>3.8</A></TD>
<TD><A href="http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1530" target=_blank>CVE-2013-1530</A><BR></TD></TR></TBODY></TABLE></div></body></html>