Re: Possible issue with PTF SI55522

[Ryan Watkins <ryanwatkinsaz@xxxxxxxxx>]

SI55522 upgrades OpenSSL to version 1.0.1j and OpenSSH to version 6.6p1. 
 SI55602 updates the program behind STRTCPSVR/ENDTCPSVR *SSHD related 
to a problem for certain CCSIDs. SI55602 wasn't created to fix anything 
that was introduced in SI55522.  They are completely separate pieces of 
code. The PTFs just happen to be in the same PTF chain as a result of 
some shared objects between the PTFs.

The PTFs were tested internally within IBM before being released as all 
PTFs are for product 5733SC1.

Again if we can get more details from the vendor that would be great!


On 01/05/2015 10:03 AM, Steinmetz, Paul wrote:
> Rob,
>
> This issue is multi-fold.
> 1) PCI issues.
> 2) The reliability of these PTFS. SI55522 was created 12/03/04, already superseded by SI55602, created 12/12/14.
> 3) Both OpenSSH and OpenSSL are not only being fixed, but being updated to  complete new versions.
>
> Current
> ssh -v
> OpenSSH_5.8p1, OpenSSL 0.9.8y 5 Feb 2013
>
> After PTF
> OpenSSH  6.6p1,  OpenSSL  1.0.1j
>
> 4) How much SSH and/or SSL testing has been confirmed with these latest PTFs?
>
> Paul
>
> -----Original Message-----
> From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of rob@xxxxxxxxx
> Sent: Monday, January 05, 2015 9:03 AM
> To: Midrange Systems Technical Discussion
> Subject: RE: Possible issue with PTF SI55522
>
> Someone recently posted about "How to obtain the new Open Source for IBM i Product - 5733OPS ".  The article specifically mentions these new PTFs.
>
>
> Rob Berendt