SCO releases patches ten months late

The irony here is just too rich. Netcraft is reporting that SCO is only just now, ten months late, releasing patches to an OpenSSL vulnerability on UnixWare. (In comparison most major Linux distributions and the *BSD's had patches out within a day—or less—of disclosure of the vulnerability.)

My favorite line in the article is this: "Our January Secure Server Survey found only 70 SSL-enabled sites running on SCO Unix."

Considering SCO's propensity to sue their own customers I am surprised there are even 70 SSL-enabled UnixWare sites left on the Internet.

—Michael A. Cleverly
Monday, January 24, 2005 at 18:36