IBM has released AIX and VIOS iFixes in response to Speculative Store Bypass (SSB) also known as Variant 4.,IBM has released AIX and VIOS iFixes in response to Speculative Store Bypass (SSB) also known as Variant 4.,IBM has released VIOS and VIOS iFixes in response to Speculative Store Bypass (SSB) also known as Variant 4.

IBM SECURITY ADVISORY First Issued: Tue May 22 15:30:11 CDT 2018 |Updated: Fri Aug 17 08:05:01 CDT 2018 |Update: Added a link to the bulletin for CVE-2017-5715, known as Spectre, | regarding updated iFixes that are only applicable to some POWER9 systems. | The bulletin is available here: |...

Multiple vulnerabilities in IBM Java SDK affect AIX

IBM SECURITY ADVISORY First Issued: Mon Apr 30 11:26:59 CDT 2018 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javajan2018advisory.asc https://aix.software.ibm.com/aix/efixes/security/javajan2018advisory.asc...

Vulnerability in OpenSSL affects AIX (CVE-2018-0739)

IBM SECURITY ADVISORY First Issued: Mon Apr 30 11:00:38 CDT 2018 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory26.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory26.asc...

Vulnerability in sendmail impacts AIX (CVE-2014-3956),Vulnerability in sendmail impacts VIOS (CVE-2014-3956)

IBM SECURITY ADVISORY First Issued: Fri Apr 6 11:18:40 CDT 2018 |Updated: Mon Sep 17 09:18:47 CDT 2018 |Update: Clarified that AIX 7.2 TL0 SP6 and bos.net.tcp.sendmail fileset level | 7.2.0.3 are impacted. An iFix for AIX 7.2 TL0 SP6 is now available. The most recent version of this document is...

Vulnerability impacts AIX and VIOS (CVE-2018-1383),Vulnerability impacts VIOS and VIOS (CVE-2018-1383)

IBM SECURITY ADVISORY First Issued: Thu Feb 8 13:49:23 CST 2018 |Updated: Tue Feb 13 11:05:56 CST 2018 |Update: CVE description was updated to provide additional detail. The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/aixbaseadvisory.asc...

(bellmail) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect AIX (CVE-2017-1692),(bellmail) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect VIOS (CVE-2017-1692),(caccelstat) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect AIX (CVE-2017-1692),(iostat) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect AIX (CVE-2017-1692),(lquerypv) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect AIX (CVE-2017-1692),(lquerypv) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect VIOS (CVE-2017-1692),(restbyinode) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect AIX (CVE-2017-1692),(restbyinode) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect VIOS (CVE-2017-1692),(vmstat) Vulnerabilities in bellmail / caccelstat / iostat / lquerypv / restbyinode / vmstat affect AIX (CVE-2017-1692)

IBM SECURITY ADVISORY First Issued: Mon Feb 5 13:19:26 CST 2018 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/suidadvisory.asc https://aix.software.ibm.com/aix/efixes/security/suidadvisory.asc...

Vulnerability in OpenSSL affects AIX (CVE-2017-3737)

IBM SECURITY ADVISORY First Issued: Mon Jan 29 10:36:55 CST 2018 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory25.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory25.asc...

IBM has released AIX and VIOS iFixes in response to the vulnerabilities known as Spectre and Meltdown.,IBM has released VIOS and VIOS iFixes in response to the vulnerabilities known as Spectre and Meltdown.

wnadvisory.asc: Version 4 IBM SECURITY ADVISORY First Issued: Thu Jan 25 08:15:51 CST 2018 |Updated: Fri Aug 17 08:05:01 CDT 2018 |Update: Added a link to the bulletin for CVE-2017-5715, known as Spectre, | regarding updated iFixes that are only applicable to some POWER9 systems. | The bulletin i...

Vulnerability in OpenSSL affects AIX

IBM SECURITY ADVISORY First Issued: Thu Dec 14 14:57:00 CST 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory24.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory24.asc...

There are multiple vulnerabilities in IBM SDK Java Technology Edition

IBM SECURITY ADVISORY First Issued: Thu Dec 7 12:20:05 CST 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javaoct2017advisory.asc https://aix.software.ibm.com/aix/efixes/security/javaoct2017advisory.asc...

Vulnerabilities in OpenSSH affect AIX.

IBM SECURITY ADVISORY First Issued: Tue Nov 14 09:46:19 CST 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory11.asc https://aix.software.ibm.com/aix/efixes/security/opensshadvisory11.asc...

There are multiple vulnerabilities in tcpdump that impact AIX.

IBM SECURITY ADVISORY First Issued: Wed Nov 8 09:27:01 CST 2017 |Updated: Wed Feb 28 09:33:13 CST 2018 |Update: Corrected the APARs listed under the APAR section. The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/tcpdumpadvisory3.asc...

There is a vulnerability in the AIX IBM Java 6 SDK installp and updatep packages

IBM SECURITY ADVISORY First Issued: Mon Sep 18 09:05:13 CDT 2017 |Updated: Mon Oct 2 09:00:12 CDT 2017 |Update 1: Impacted fileset information and iFixes added for AIX Java 6 | VRMFs from 6.0.0.215 to 6.0.0.465. | Complete impacted filesets now listed as: | Java6.sdk: 6.0.0.215-6.0.0.645 |...

There are multiple vulnerabilities in IBM SDK Java Technology Edition

IBM SECURITY ADVISORY First Issued: Fri Sep 1 08:58:20 CDT 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javajuly2017advisory.asc https://aix.software.ibm.com/aix/efixes/security/javajuly2017advisory.asc...

There are vulnerabilities in BIND that impact AIX.

IBM SECURITY ADVISORY First Issued: Wed Aug 23 09:01:23 CDT 2017 |Updated: Mon Nov 13 14:29:35 CST 2017 |Update 2: Updated the APAR section to reflect that the relevant APARs are | shipping in 6100-09-11, 7100-04-06, 7200-00-06, and 7200-01-04. | Corrected the impacted upper level filesets for...

There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX,There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.,There are multiple vulnerabilities in NTPv3 and NTPv4 that impact VIOS

IBM SECURITY ADVISORY First Issued: Thu Jul 6 14:53:51 CDT 2017 |Updated: Mon Nov 13 14:32:25 CST 2017 |Update 3: Clarified that AIX 7100-04-05, 7200-00-05, and 7200-01-03 are | impacted. An additional iFix is provided for AIX 7100-04-05. The | iFixes already provided for 7200-00 and 7200-01 cove...

There are multiple vulnerabilities in IBM SDK Java Technology Edition

IBM SECURITY ADVISORY First Issued:Wed Jun 21 15:44:57 CDT 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javaapr2017advisory.asc https://aix.software.ibm.com/aix/efixes/security/javaapr2017advisory.asc...

There are multiple vulnerabilities in tcpdump that impact AIX.

IBM SECURITY ADVISORY First Issued: Thu May 25 11:23:13 CDT 2017 |Updated: Thu Jul 27 11:57:05 CDT 2017 |Update 1: Corrected the checksum value for iFix IV94729s9b.170425.epkg.Z The most recent version of this document is available here:...

There are multiple vulnerabilities in IBM SDK Java Technology Edition

IBM SECURITY ADVISORY First Issued:Wed Apr 5 23:21:06 CDT 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javajan2017advisory.asc https://aix.software.ibm.com/aix/efixes/security/javajan2017advisory.asc...

There is a vulnerability in BIND that impacts AIX.

IBM SECURITY ADVISORY First Issued: Tue Mar 7 15:49:49 CST 2017 |Updated: Mon Oct 2 11:03:19 CDT 2017 |Update 1: Changed impacted fileset for AIX 7200-01. | Changed from: bos.net.tcp.clientcore | to: bos.net.tcp.bindutils 7.2.1.0-7.2.1.1. The most recent version of this document is available here...

There is a vulnerability in OpenSSL used by AIX

IBM SECURITY ADVISORY First Issued: Fri Feb 17 16:58:26 CST 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory23.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory23.asc...

There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX.

IBM SECURITY ADVISORY First Issued: Mon Feb 13 15:32:47 CST 2017 |Updated: Mon Oct 2 10:47:12 CDT 2017 |Update 2: Removed bos.net.tcp.ntp from the impacted fileset list for | AIX 7200-01-02. Fileset bos.net.tcp.ntpd is still listed as impacted | for AIX 7200-01-02. The most recent version of this...

Vulnerabilities in OpenSSH affect AIX.

IBM SECURITY ADVISORY First Issued:Sun Feb 5 23:36:10 CST 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory10.asc https://aix.software.ibm.com/aix/efixes/security/opensshadvisory10.asc...

There is a vulnerability in sysproc that impacts AIX.

IBM SECURITY ADVISORY First Issued: Mon Jan 30 13:51:08 CST 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/sysprocadvisory.asc https://aix.software.ibm.com/aix/efixes/security/sysprocadvisory.asc...

There is a vulnerability in bellmail that impacts AIX.,Vulnerability in bellmail affects AIX (CVE-2017-1093)

IBM SECURITY ADVISORY First Issued: Sun Jan 29 01:19:56 CST 2017 |Updated: Wed Jul 26 12:40:04 CDT 2017 |Update 1: Changed impacted upper level fileset level for AIX 7.2.1 to | bos.net.tcp.clientcore 7.2.1.0. The most recent version of this document is available here:...

Multiple vulnerabilities in IBM Java SDK affect AIX

IBM SECURITY ADVISORY First Issued: Wed Dec 21 14:38:46 CST 2016 |Updated: Fri Dec 23 10:05:04 CST 2016 |Updates: Links to the most recent version of the document are updated. |Updated: Thu Feb 2 11:53:01 CST 2017 |Updates: CVE-2016-5582 which does NOT impact AIX has been removed from |the...

There are two vulnerabilities in BIND that impact AIX.,Vulnerabilities in BIND impact AIX

IBM SECURITY ADVISORY First Issued: Thu Dec 15 22:06:41 CST 2016 |Updated: Thu Dec 29 12:28:16 CST 2016 |Update: New iFixes provided for AIX 5.3.12.9, 6.1.9.6, 6.1.9.8, |7.1.4.1, 7.1.4.3, 7.2.0.0, 7.2.0.1, 7.2.0.2, 7.2.1.0, 7.2.1.1 |Updated: Wed Feb 8 16:52:50 CST 2017 |Update: New iFix provided...

Vulnerability in bellmail affects AIX,Vulnerability in bellmail affects VIOS

IBM SECURITY ADVISORY First Issued: Thu Dec 15 15:12:23 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bellmailadvisory.asc https://aix.software.ibm.com/aix/efixes/security/bellmailadvisory.asc...

Vulnerability in pConsole impacts AIX,pConsole on AIX does not support TLS 1.2.

IBM SECURITY ADVISORY First Issued: Fri Dec 2 15:01:37 CST 2016 |Updated: Mon May 1 16:30:43 CDT 2017 |Update: Bulletin updated to include ifix for AIX level 7.1.3 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/pconsoleadvisory2.asc...

Vulnerabilities in BIND impact AIX,Vulnerabilities in BIND impact VIOS

IBM SECURITY ADVISORY First Issued: Fri Nov 18 08:19:36 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bindadvisory13.asc https://aix.software.ibm.com/aix/efixes/security/bindadvisory13.asc...

Vulnerabilities in OpenSSL affect AIX

IBM SECURITY ADVISORY First Issued: Mon Nov 14 13:29:26 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory21.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory21.asc...

Vulnerability in lquerylv in LVM impacts AIX,Vulnerability in lquerylv in LVM impacts VIOS

IBM SECURITY ADVISORY First Issued: Mon Nov 7 10:35:13 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/lquerylvadvisory.asc https://aix.software.ibm.com/aix/efixes/security/lquerylvadvisory.asc...

Vulnerability in lsmcode affects AIX,Vulnerability in lsmcode affects VIOS

lsmcodeadvisory2.asc: Version 5 Version 5 Issued: Fri Nov 11 08:21:26 CST 2016 Version 5 Changes: iFixes for AIX 7100-04-02 and 7200-00-02 no longer require a reboot. IBM SECURITY ADVISORY First Issued: Mon Oct 17 08:54:26 CDT 2016 |Updated: Fri Nov 11 08:21:26 CST 2016 |Update: iFixes for AIX...

Vulnerability in Tivoli LWI impacts pConsole and WebSM for AIX

pconsoleadvisory.asc: Version 2 Version 2 Issued: Fri Sep 30 14:51:49 CDT 2016 Version 2 Changes: iFixes added for the latest, impacted, supported AIX TLs. IBM SECURITY ADVISORY First Issued: Thu Sep 22 16:13:43 CDT 2016 |Updated: Fri Sep 30 14:51:49 CDT 2016 |Update: iFixes added for the latest,...

Vulnerability in Tivoli LWI impacts pConsole and WebSM for AIX

pconsoleadvisory.asc: Version 3 Version 3 Issued: Tue Oct 25 14:55:49 CDT 2016 Version 3 Changes: Changed the impacted upper level filesets to match those in the iFixes. Clarified that at least one of sysmgt.pconsole.rte or sysmgt.websm.rte must be present in order to be impacted by this...

AIX OpenSSH Vulnerability

IBM SECURITY ADVISORY First Issued: Thu Sep 8 14:36:37 CDT 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory9.asc https://aix.software.ibm.com/aix/efixes/security/opensshadvisory9.asc...

Vulnerabilities in NTP affect AIX,Vulnerabilities in NTP affect VIOS

ntpadvisory7.asc: Version 2 Version 2 Issued: Tue Sep 13 08:23:22 CDT 2016 Version 2 Changes: Changed the impacted upper level filesets listed for NTPv4. The new levels should match the prereqs as listed in the iFixes. IBM SECURITY ADVISORY First Issued: Tue Sep 6 09:07:16 CDT 2016 |Updated: Tue...

Multiple vulnerabilities in IBM Java SDK affect AIX

IBM SECURITY ADVISORY First Issued: Thu Aug 18 15:35:03 CDT 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javajuly2016advisory.asc https://aix.software.ibm.com/aix/efixes/security/javajuly2016advisory.asc...

Vulnerability in mustendd device driver impacts AIX,Vulnerability in mustendd device driver impacts VIOS

IBM SECURITY ADVISORY First Issued: Thu Jul 28 13:55:43 CDT 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/mustenddadvisory.asc https://aix.software.ibm.com/aix/efixes/security/mustenddadvisory.asc...

Vulnerabilities in MD5 Signature and Hash Algorithm and TLS 1.2 affects sendmail imap and pop3d on AIX,Vulnerabilities in MD5 Signature and Hash Algorithm and TLS 1.2 affects sendmail imap and pop3d on AIX,Vulnerabilities in MD5 Signature and Hash Algorithm and TLS 1.2 affects sendmail imap and pop3d on VIOS,Vulnerabilities in MD5 Signature and Hash Algorithm and TLS 1.2 affects sendmail imap pop3d ftp/ftpd and ndpd-host/ndpd-router on AIX

nettcpadvisory2.asc: Version 4 Version 4 Issued: Thu Oct 20 10:56:28 CDT 2016 Version 4 Changes: New iFixes provided for AIX 5.3.12.9, 6.1.9.5, 6.1.9.6, 7.1.3.5, and 7.1.3.6. For security reasons, it is highly recommended to install these new iFixes. Bulletin scope increased to include ftp/ftpd a...

Vulnerabilities in OpenSSL affect AIX

IBM SECURITY ADVISORY First Issued: Tue Jul 12 14:14:43 CDT 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory20.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory20.asc...

Vulnerabilities in BIND affects AIX,Vulnerabilities in BIND affects VIOS,Vulnerability in BIND affects AIX

bindadvisory12.asc: Version 5 Version 5 Issued: Mon Dec 4 14:20:31 CST 2017 Version 5 Changes: APAR table updated to reflect both APARs where relevant. IBM SECURITY ADVISORY First Issued: Fri Jun 17 08:19:25 CDT 2016 |Updated: Mon Dec 4 14:20:31 CST 2017 |Update: APAR table updated to reflect bot...

Vulnerabilities in NTP affect AIX,Vulnerabilities in NTP affect VIOS

ntpadvisory6.asc: Version 6 Version 6 Issued: Tue Aug 16 11:41:45 CDT 2016 Version 6 Changes: Fix added for AIX 7.2.0.2 and is now included in the tar file, ntpfix6.tar. AIX 7.2.0.2 iFix for NTPv3: IV83995s2b.160713.epkg.Z IBM SECURITY ADVISORY First Issued: Wed Jun 8 13:17:48 CDT 2016 |Updated:...

Multiple vulnerabilities in IBM Java SDK affect AIX

IBM SECURITY ADVISORY First Issued: Fri May 6 09:00:55 CDT 2016 |Updated: Wed May 18 16:18:05 CDT 2016 |Update: New Java 6 packages provided with version number 6.0.16.26. | Fileset levels less than 6.0.0.561 are vulnerable. The most recent version of this document is available here:...

Vulnerabilities in OpenSSH affect AIX

IBM SECURITY ADVISORY First Issued: Tue May 3 10:03:39 CDT 2016 |Updated: Fri May 13 09:51:05 CDT 2016 |Update: New iFixes now available. The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory8.asc...

Vulnerability in BIND affects AIX,Vulnerability in BIND affects VIOS

IBM SECURITY ADVISORY First Issued: Mon Apr 25 10:06:21 CDT 2016 |Updated: Wed Dec 6 10:17:27 CST 2017 |Update: Changed impacted fileset for AIX 7.2 from bos.net.tcp.client | to bos.net.tcp.bindutils. The most recent version of this document is available here:...

Vulnerability in OpenSSL affects AIX

IBM SECURITY ADVISORY First Issued: Mon Apr 18 10:40:50 CDT 2016 |Updated: Tue Apr 19 09:58:35 CDT 2016 |Update: Clarified that the fixes for openssladvisory18 cover the issue | described in this bulletin. The most recent version of this document is available here:...

Multiple vulnerabilities in OpenSSL affect AIX

IBM SECURITY ADVISORY First Issued: Mon Apr 4 11:04:25 CDT 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory18.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory18.asc...

Vulnerabilities in OpenSSL affect AIX

IBM SECURITY ADVISORY First Issued: Wed Mar 2 08:43:07 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory17.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory17.asc...

Vulnerability in BIND affects AIX,Vulnerability in BIND affects VIOS

IBM SECURITY ADVISORY First Issued: Thu Feb 25 09:58:38 CST 2016 |Updated: Wed Dec 6 10:17:27 CST 2017 |Update: Changed the impacted fileset for AIX 7.2 from bos.net.tcp.client | to bos.net.tcp.bindutils. The most recent version of this document is available here:...