<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>
<div>To add to what Wes said:</div>
<div><br>
</div>
<div>If you have other UCC products that run on VOS (Finesse, SocialMiner, MediaSense, CUIC) you'll see further differences between underlying VOS versions between them, UCCX and CUCM. This causes not only a lot of confusion in tracking bug fixes in the platform
between products but delay in integrating fixes like these as Wes has described below. </div>
<div><br>
</div>
<div>We are working to address this. The first part is in better tracking of bug fixes and security issues in the platform and between products. The second part is moving to a common underlying platform version and build process for most UCC products. This
will greatly speed up our fix inclusion and standardize the underlying VOS version in many of our applications leading to greater consistency and stability. Without exposing too much more, we should see this common VOS in UCC system release 11.0. </div>
<div><br>
</div>
<div>HTH. </div>
<div><br>
</div>
<div>
<div id="MAC_OUTLOOK_SIGNATURE">
<div>
<div><span style="font-family: Helvetica; font-size: 12px;">Thank you, </span><br style="font-family: Helvetica; font-size: 12px;">
<br style="font-family: Helvetica; font-size: 12px;">
<span style="font-family: Helvetica; font-size: 12px;">Ryan LaFountain</span><br style="font-family: Helvetica; font-size: 12px;">
<span style="font-family: Helvetica; font-size: 12px;">Unified Contact Center</span><br style="font-family: Helvetica; font-size: 12px;">
<span style="font-family: Helvetica; font-size: 12px;">Cisco Services</span><br style="font-family: Helvetica; font-size: 12px;">
<span style="font-family: Helvetica; font-size: 12px;">Direct: +1 919 392 9898</span><br style="font-family: Helvetica; font-size: 12px;">
<span style="font-family: Helvetica; font-size: 12px;">Hours: M - F 9:00am - 5:00pm Eastern Time</span></div>
</div>
</div>
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:12pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>cisco-voip on behalf of Charles Goldsmith<br>
<span style="font-weight:bold">Date: </span>Friday, July 10, 2015 at 5:21 PM<br>
<span style="font-weight:bold">To: </span>"Wes Sisk (wsisk)"<br>
<span style="font-weight:bold">Cc: </span>voip puck<br>
<span style="font-weight:bold">Subject: </span>Re: [cisco-voip] glibc/ghost vulnerability<br>
</div>
<div><br>
</div>
<div>
<div>
<div dir="ltr">Gotcha, thanks for the explanation Wes, that's what I was looking for and can explain it to the customer. I'll let the customer know of the risks and let them make the decision to upgrade or wait for a minor patch.
<div><br>
</div>
<div>Thanks!</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Fri, Jul 10, 2015 at 1:58 PM, Wes Sisk (wsisk) <span dir="ltr">
<<a href="mailto:wsisk@cisco.com" target="_blank">wsisk@cisco.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word">
<div>I’ll lead off with: UCCX does a fair amount of work to customize the VOS platform to their needs. As such they don’t pull in updates and fixes as fast as UCM, UC, and CUP.</div>
<div><br>
</div>
<div>I bet if you check the kernel or RHEL version you will find significant difference and that contributes to the complexity of the fix.</div>
<div>admin:show packages active kernel<br>
Active Side Package(s): for kernel package(s)<br>
kernel-firmware-2.6.32-431.20.3.el6.noarch<br>
kernel-2.6.32-431.20.3.el6.x86_64<br>
platform-kernel-tunable-1.0.0.0-1.i386<br>
dracut-kernel-004-336.el6_5.1.noarch</div>
<div><br>
</div>
RyanL may weigh in with better details. <span class="HOEnZb"><font color="#888888">
<div><br>
</div>
</font></span>
<div><span class="HOEnZb"><font color="#888888">-w</font></span><span class=""><br>
<div><br>
<div>
<div>On Jul 10, 2015, at 11:41 AM, Charles Goldsmith <<a href="mailto:wokka@justfamily.org" target="_blank">wokka@justfamily.org</a>> wrote:</div>
<br>
<div>
<div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
I understand that CUCM and UCCX are both VOS, and that it's probably not the same version, but I don't understand why the platform team for CUCM can give us a minor patch but we can't get the same out of UCCX.</div>
<div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
<br>
</div>
<div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
I'm sure most of you are like me, and steer clear of .0 releases. There is an old saying, dot Oh, oh no.</div>
<div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
<br>
</div>
<div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
I'm not comfortable advising a customer to upgrade to the 11.0 release.</div>
<div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
<br>
</div>
<div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
Would like thoughts on this, and some explanation of the differences of the VOS between CUCM/CUC and UCCX.</div>
</div>
</div>
<br>
</div>
</span></div>
</div>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</span>
</body>
</html>