We had white hat hackers patching as a public service before anti-hacking laws got so draconian. Had a Solaris 2.5 box patched by a do-gooder who didn't check his work because he also filled /tmp and his script failed to clean up after itself. It was a good reason to get a clue and switch to bsd.