× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.

You know, that's a great question. I install most IBM i PTF's related to CVE's if appropriate
for the system IBM i system I support.

An example: We get those daily IBM i Notifications - some speaking to PTF CVE's. An example would be IBM i
PTF SI80355 (V7R2), SI80354 (V7R3), SI80353 (V7R4),
It lists CVE 2022-31813, 2022-28614, 2022-28615. It's a Apache Vulnerability.

I have info on most CVE's on my blog at https://ibmireference.blogspot.com/p/virus-common-vulnerabilty-exposure-cve.html

You can also try this link, also on my blog on the right side of the page (PSIRT - Product Security Incident Response link for IBM i):

From there, page down and notice:
The below links provide specifics on IBM i vulnerabilities you may also find useful:
All Security Bulletins for IBM i
Apache for IBM i
Java on IBM i Security Updates
Vulnerabilities for Open SSL on IBM i
Vulnerabilities for Open SSH on IBM i

Hopefully that'll help a bit.

Very Respectfully,
Michael Mayer
IBM i on Power System Admin.
IT Operations.
The Florida Bar
651 E. Jefferson St
Tallahassee, Florida 32399-2300
Office: 850.561.5761
Cell: 518.641.8906
IBM i Reference blog page: http://ibmireference.blogspot.com/


message: 4
date: Mon, 8 Aug 2022 12:46:54 +0000
from: Rob Berendt <rob@xxxxxxxxx>
subject: RE: TCP timestamp vulnerability -- any insights on how this
relates to Midrange boxes?

Is there a site which lists CVE's and how they were addressed on IBM i? I'm not finding such a site at ibm.com but maybe I'm googling it wrong.

Rob Berendt
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 7310 Innovation Blvd, Suite 104
Ft. Wayne, IN 46818
Ship to: 7310 Innovation Blvd, Dock 9C
Ft. Wayne, IN 46818

Please note: Florida has very broad public records laws. Many written communications to or from The Florida Bar regarding Bar business may be considered public records, which must be made available to anyone upon request. Your e-mail communications may therefore be subject to public disclosure.

As an Amazon Associate we earn from qualifying purchases.

This thread ...

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2023 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.