Re: POODLE: SSLv3 vulnerability (CVE-2014-3566)

[Scott Klement <midrange-l@xxxxxxxxxxxxxxxx>]

IBM i doesn't typically use the openssl library for SSL.  It uses IBM's 
own SSL library, which is completely separate.

It's possible that you might be running some Unix software in PASE 
that's using OpenSSL for SSL and therefore might be susceptible to this 
flaw.

But I can't think of any IBM i shop that I've seen that's doing that. 
All are using stuff like the HTTP, Telnet, FTP, etc that are included 
with the OS, and they don't use OpenSSL so can't be affected by it's bugs.


On 10/22/2014 12:55 PM, Steinmetz, Paul wrote:
> I just received this notification, not sure if iSeries is vulnerable?
>
> https://access.redhat.com/security/cve/CVE-2014-3566
>
> How do we confirm?
>
> If  positive, is there and what is the fix?
>
>
> Thank You
> _____
> Paul Steinmetz
> IBM i Systems Administrator
>
> Pencor Services, Inc.
> 462 Delaware Ave
> Palmerton Pa 18071
>
> 610-826-9117 work
> 610-826-9188 fax
> 610-349-0913 cell
> 610-377-6012 home
>
> psteinmetz@xxxxxxxxxx
> http://www.pencor.com/