RE: TCP timestamp vulnerability -- any insights on how this relates to Midrange boxes?

You know, that's a great question. I install most IBM i PTF's related to CVE's if appropriate
for the system IBM i system I support.

An example: We get those daily IBM i Notifications - some speaking to PTF CVE's. An example would be IBM i
PTF SI80355 (V7R2), SI80354 (V7R3), SI80353 (V7R4),
It lists CVE 2022-31813, 2022-28614, 2022-28615. It's a Apache Vulnerability.

I have info on most CVE's on my blog at https://ibmireference.blogspot.com/p/virus-common-vulnerabilty-exposure-cve.html

You can also try this link, also on my blog on the right side of the page (PSIRT - Product Security Incident Response link for IBM i):
https://www.ibm.com/support/pages/node/732299

From there, page down and notice:

The below links provide specifics on IBM i vulnerabilities you may also find useful:
All Security Bulletins for IBM i
Apache for IBM i
Java on IBM i Security Updates
Vulnerabilities for Open SSL on IBM i
Vulnerabilities for Open SSH on IBM i

Hopefully that'll help a bit.



Very Respectfully,
Michael Mayer
IBM i on Power System Admin.
IT Operations.
The Florida Bar
651 E. Jefferson St
Tallahassee, Florida 32399-2300
mmayer@xxxxxxxxxxxxxx
https://www.floridabar.org
Office: 850.561.5761
Cell: 518.641.8906
IBM i Reference blog page: http://ibmireference.blogspot.com/

------------------------------

message: 4
date: Mon, 8 Aug 2022 12:46:54 +0000
from: Rob Berendt <rob@xxxxxxxxx>
subject: RE: TCP timestamp vulnerability -- any insights on how this
relates to Midrange boxes?

Is there a site which lists CVE's and how they were addressed on IBM i? I'm not finding such a site at ibm.com but maybe I'm googling it wrong.

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 7310 Innovation Blvd, Suite 104
Ft. Wayne, IN 46818
Ship to: 7310 Innovation Blvd, Dock 9C
Ft. Wayne, IN 46818
http://www.dekko.com


________________________________
Please note: Florida has very broad public records laws. Many written communications to or from The Florida Bar regarding Bar business may be considered public records, which must be made available to anyone upon request. Your e-mail communications may therefore be subject to public disclosure.