Hi,

I come to be working on some stuff of patch on SUSE Linux. And I wonder if you or someone else out there could recommend some site or provide some patch artchitecture information on SUSE about how vulnerabilities are detected and patched.

--> I don't really understand your question. There is no standard way of detecting a vulnerability. In general, someone out there finds a vulnerability either by looking through the source code (code-auditing) or by stumbling upon it when something doesn't work as expected or desired. Most often, the vulnerability is first released to the distributors (like SuSE) so they can fix it before it goes public and can be exploited. Regarding patches: SuSE prepares updated RPM-packages which are published on the SuSE FTP-servers. If you want to get notification about them, subscribe to "suse-security-announce". Minor updates are not announced but simply turn up on the FTP server. To keep your system up-to-date, monitor the FTP-server regularly or run YOU/fou4s regularly (at least once a week). HTH to answer your questions, Armin -- Am Hasenberg 26 office: Institut für Atmosphärenphysik D-18209 Bad Doberan Schloss-Straße 6 Tel. ++49-(0)38203/42137 D-18225 Kühlungsborn / GERMANY Email: schoech@iap-kborn.de Tel. +49-(0)38293-68-102 WWW: http://armins.cjb.net/ Fax. +49-(0)38293-68-50