Does security_patch_check guarantee security?
No. Though Security Patch Check (SPC) is a very useful tool for improving system security, it is not a full security solution. The tool examines systems to make sure all of the patches that are mentioned in security bulletins are on a system. Some vulnerabilities announced in advisories and/or bulletins are not completely addressed by patches, they may contain actions that must be manually performed by the user. Security Patch Check does not detect the manual actions, it only notifies the user about the patches listed in the bulletins. A full security solution has many other facets, the biggest of which is the system users’ decision of risk vs. functionality. Every operating system on every hardware has a risk of being broken into.
