Multiple vulnerabilities in IBM Java SDK affect AIX

IBM SECURITY ADVISORY First Issued: Thu Feb 25 08:44:57 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javajan2016advisory.asc https://aix.software.ibm.com/aix/efixes/security/javajan2016advisory.asc...

Vulnerability in NTPv4 affects AIX

IBM SECURITY ADVISORY First Issued: Mon Feb 22 08:06:13 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/ntpadvisory5.asc https://aix.software.ibm.com/aix/efixes/security/ntpadvisory5.asc...

Vulnerabilities in LibXML2 affect AIX,Vulnerabilities in LibXML2 affect VIOS

IBM SECURITY ADVISORY First Issued: Mon Feb 22 08:06:13 CST 2016 |Updated: Thu Aug 11 12:11:35 CDT 2016 |Update: Changed the iFix name for the AIX 7.1.3 fix. No changes relevant | to AIX 7.1.3 were made to the fix. The most recent version of this document is available here:...

AIX OpenSSH Vulnerability

IBM SECURITY ADVISORY First Issued: Fri Jan 29 16:13:16 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory7.asc https://aix.software.ibm.com/aix/efixes/security/opensshadvisory7.asc...

Vulnerability in MD5 Signature and Hash Algorithm affects OpenSSL on AIX

IBM SECURITY ADVISORY First Issued: Fri Jan 29 15:43:20 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory16.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory16.asc...

Vulnerabilities in NTP affect AIX,Vulnerabilities in NTP affect VIOS

IBM SECURITY ADVISORY First Issued: Thu Jan 21 09:13:20 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/ntpadvisory4.asc https://aix.software.ibm.com/aix/efixes/security/ntpadvisory4.asc...

Vulnerabilities in OpenSSL impact AIX

IBM SECURITY ADVISORY First Issued: Mon Jan 18 10:47:32 CST 2016 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory15.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory15.asc...

Multiple vulnerabilities in IBM Java SDK affect AIX

IBM SECURITY ADVISORY First Issued: Thu Dec 10 08:51:54 CST 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javaoct2015advisory.asc https://aix.software.ibm.com/aix/efixes/security/javaoct2015advisory.asc...

Vulnerability in BIND affects AIX,Vulnerability in BIND affects VIOS

IBM SECURITY ADVISORY First Issued: Tues Nov 3 09:00:00 CDT 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bindadvisory9.asc https://aix.software.ibm.com/aix/efixes/security/bindadvisory9.asc...

AIX OpenSSH Vulnerability

IBM SECURITY ADVISORY First Issued: Wed Oct 21 09:17:40 CDT 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory6.asc https://aix.software.ibm.com/aix/efixes/security/opensshadvisory6.asc...

Vulnerability in netstat affects AIX,Vulnerability in netstat affects VIOS

IBM SECURITY ADVISORY First Issued: Mon Oct 12 14:17:27 CDT 2015 |Updated: Fri Oct 16 16:41:29 CDT 2015 |Update: New iFixes provided The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/netstatadvisory.asc...

AIX OpenSSH Vulnerability

IBM SECURITY ADVISORY First Issued: Fri Sep 4 05:15:17 CDT 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory5.asc https://aix.software.ibm.com/aix/efixes/security/opensshadvisory5.asc...

Vulnerability in NTPv3 affects AIX,Vulnerability in NTPv3 affects VIOS

IBM SECURITY ADVISORY First Issued: Fri Aug 21 09:06:03 CDT 2015 |Updated: Mon Feb 15 13:19:18 CST 2016 |Update: Changed AIX 6.1.8 and 7.1.2 impacted levels. The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/ntpadvisory3.asc...

Vulnerability in BIND affects AIX,Vulnerability in BIND affects VIOS

IBM SECURITY ADVISORY First Issued: Thu Aug 13 10:35:36 CDT 2015 |Updated: Mon Aug 17 09:11:49 CDT 2015 |Update: Added AIX 5.3 vulnerability information The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bind9advisory8.asc...

Vulnerability in Diffie-Hellman ciphers affects sendmail on AIX,Vulnerability in Diffie-Hellman ciphers affects sendmail on VIOS

IBM SECURITY ADVISORY First Issued: Fri Aug 7 15:15:59 CDT 2015 |Updated: Tue Aug 18 09:19:51 CDT 2015 |Update: Added AIX 5.3 vulnerability information The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/sendmailadvisory2.asc...

Multiple vulnerabilities in IBM Java SDK affect AIX

IBM SECURITY ADVISORY First Issued: Fri Jul 31 13:04:25 CDT 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javajuly2015advisory.asc https://aix.software.ibm.com/aix/efixes/security/javajuly2015advisory.asc...

Multiple Security vulnerabilities in AIX OpenSSL

IBM SECURITY ADVISORY First Issued: Wed Jul 15 00:20:05 CDT 2015 | Updated: Wed Aug 12 05:13:23 CDT 2015 | Update: A new ifix for Power8 machines having OpenSSL v1.0.1.514 has been added | Update: "A. FIXES" section. The most recent version of this document is available here:...

Vulnerabilities in NTPv4 affect AIX,Vulnerabilities in NTPv4 affect VIOS

IBM SECURITY ADVISORY First Issued: Mon Jun 29 10:00:16 CDT 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/ntp4advisory.asc https://aix.software.ibm.com/aix/efixes/security/ntp4advisory.asc...

Vulnerability in SSLv3 affects AIX,Vulnerability in SSLv3 affects VIOS

IBM SECURITY ADVISORY First Issued: Wed Jun 17 09:52:06 CDT 2015 |Updated: Tue Mar 1 10:07:14 CST 2016 |Update: Modified the impacted upper level fileset for 7.1.3 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/nettcpadvisory.asc...

Multiple vulnerabilities in IBM Java SDK affect AIX

IBM SECURITY ADVISORY First Issued: Wed Jun 3 12:58:42 CDT 2015 |Updated: Wed Jun 3 16:10:11 CDT 2015 |Update: Corrected affected fileset levels The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javaapril2015advisory.asc...

Multiple Security vulnerabilities in IBM NAS(kerberos)

IBM SECURITY ADVISORY First Issued : Thu May 21 05:06:05 CDT 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/nasadvisory3.asc https://aix.software.ibm.com/aix/efixes/security/nasadvisory3.asc...

Vulnerability in RC4 stream cipher affects AIX,Vulnerability in RC4 stream cipher affects ftpd/sendmail_ssl/imapd/popd on AIX,Vulnerability in RC4 stream cipher affects ftpd/sendmail_ssl/imapd/popd on VIOS

IBM SECURITY ADVISORY First Issued: Mon Apr 27 15:27:04 CDT 2015 | Updated: Tue Dec 15 11:54:19 CST 2015 | Update: Added all information for ftpd, sendmailssl, imapd, and popd The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/rc4advisory.a...

AIX IBM SDK Java JSSE vulnerability

IBM SECURITY ADVISORY First Issued: Mon Apr 13 12:11:24 CDT 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javajsseadvisory.asc https://aix.software.ibm.com/aix/efixes/security/javajsseadvisory.asc...

Multiple Security vulnerabilities in AIX OpenSSL

IBM SECURITY ADVISORY First Issued: The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory13.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory13.asc...

Vulnerability in AIX tcpdump

IBM SECURITY ADVISORY First Issued: Wed Mar 18 10:29:53 CDT 2015 |Updated: Tue Mar 24 13:39:27 CDT 2015 |Update: Corrected 6.1.9.4 iFix checksum The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/tcpdumpadvisory.asc...

Vulnerability in AIX bind,Vulnerability in VIOS bind

IBM SECURITY ADVISORY First Issued: Tue Feb 24 11:33:18 CST 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bind9advisory7.asc https://aix.software.ibm.com/aix/efixes/security/bind9advisory7.asc...

Multiple vulnerabilities in current releases of IBM SDK Java Technology Edition; issues disclosed in the Oracle Feb 2015 Critical Patch Update vulnerability and two additional Vuln

IBM SECURITY ADVISORY First Issued: Thu Feb 19 10:53:54 CST 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javafeb2015advisory.asc https://aix.software.ibm.com/aix/efixes/security/javafeb2015advisory.asc...

Network Time Protocol (NTP) vulnerability in AIX,Network Time Protocol (NTP) vulnerability in VIOS

IBM SECURITY ADVISORY First Issued: Tue Feb 10 12:06:45 CST 2015 |Updated: Thu Feb 12 10:54:48 CST 2015 |Corrected wrong CVE number |Corrected SP for 7100-02-07 |Updated Fri Feb 13 08:22:03 CST 2015 |Corrected typo in II. CVSS section |Updated Thu Feb 19 12:35:51 CST 2015 |Corrected upper fileset...

Multiple Security vulnerabilities in AIX OpenSSL

IBM SECURITY ADVISORY First Issued: Wed Feb 4 06:24:41 CST 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory12.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory12.asc...

AIX NAS vulnerability

IBM SECURITY ADVISORY First Issued:Tue Jan 20 04:42:45 CST 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/nasadvisory2.asc https://aix.software.ibm.com/aix/efixes/security/nasadvisory2.asc...

AIX cmdlvm vulnerability,VIOS cmdlvm vulnerability

IBM SECURITY ADVISORY First Issued: Tue Jan 13 12:44:56 AM CST 2015 Updated: Tue Jan 20 08:37:23 CST 2015 Update: Added Acknowledgment Updated: Fri Jan 30 09:02:40 CST 2015 Update: Updated iFixes |Updated: Tue Feb 17 14:15:48 CST 2015 |Update: Updated 6.1.8 and 7.1.2 SPs The most recent version o...

Multiple vulnerabilities in current releases of the IBM SDK Java Technology Edition; issues in the Oracle October 2014 Critical Patch Update plus the POODLE SSLv3 vulnerability and

IBM SECURITY ADVISORY First Issued: Fri Nov 14 15:40:48 CST 2014 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javaoct2014advisory.asc https://aix.software.ibm.com/aix/efixes/security/javaoct2014advisory.asc...

Open Source RSyslog vulnerability

IBM SECURITY ADVISORY First Issued: Fri Nov 14 03:31:13 PM CST 2014 | Updated: Mon Dec 01 10:21:50 AM CST 2014 | Update: Fileset name incorrect in lslpp command The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/rsyslogadvisory.asc...

AIX OpenSSL Denial of Service due to memory leak in DTLS / AIX OpenSSL Patch to mitigate CVE-2014-3566 / AIX OpenSSL Denial of Service due to memory consumption

IBM SECURITY ADVISORY First Issued: The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory11.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory11.asc...

AIX OpenSSL Denial of Service due to double free and others

IBM SECURITY ADVISORY First Issued: The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory10.asc https://aix.software.ibm.com/aix/efixes/security/openssladvisory10.asc...

Multiple Security vulnerabilities in IBM NAS

IBM SECURITY ADVISORY First Issued : Thu Aug 28 03:15:00 CDT 2014 | Updated: Fri Sep 5 01:11:34 CDT 2014 | Update: The same ifix with a packaging change has been added in | Update: "A. FIXES" section. The most recent version of this document is available here:...

Multiple vulnerabilities in current releases of the IBM SDK Java Technology Edition

IBM SECURITY ADVISORY First Issued: Mon Aug 18 14:04:26 CDT 2014 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javajul2014advisory.asc https://aix.software.ibm.com/aix/efixes/security/javajul2014advisory.asc...

Vulnerability in AIX bind,Vulnerability in VIOS bind

IBM SECURITY ADVISORY First Issued: Fri Aug 15 14:07:52 CDT 2014 |Updated: Fri Aug 22 10:29:06 CDT 2014 |Update: VIOS fileset names updated The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/bind9advisory6.asc...

AIX libxml2 vulnerability,VIOS libxml2 vulnerability

IBM SECURITY ADVISORY First Issued: Fri Aug 15 10:26:30 CDT 2014 Updated: Fri Aug 22 08:17:41 CDT 2014 Update: fixed APAR availability dates |Update: Mon Aug 25 15:18:37 CDT 2014 |Update Corrected a couple Service Pack levels The most recent version of this document is available here:...

AIX Malloc vulnerability,VIOS Malloc vulnerability

IBM SECURITY ADVISORY |Updated: Tue Mar 10 11:31:13 CDT 2015 |Update: Changed affected upper file set levels for 6.1.8 and | 7.1.2. The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/mallocadvisory.asc...

Multiple vulnerabilities in current releases of the IBM SDK Java Technology Edition

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Thu Jun 19 09:10:49 CDT 2014 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javaapr2014advisory.asc...

AIX OpenSSH Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Tue Jun 17 04:07:12 CDT 2014 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory4.asc...

Network Time Protocol (NTP) vulnerability in AIX,Network Time Protocol (NTP) vulnerability in VIOS

IBM SECURITY ADVISORY First Issued: Thu Jun 12 16:24:51 CDT 2014 Updated: Tue Jul 1 12:35:38 CDT 2014 Update: Corrected public key URL. Updated: Wed Jul 2 15:20:29 CDT 2014 Update: Added published advisory OpenSSL signature file. Updated: Thu Jul 3 07:42:49 CDT 2014 Update: Renamed tar file for T...

AIX OpenSSL Vulnerabilities (Multiple CVEs)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Wed Jun 11 06:39:27 CDT 2014 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory9.asc...

AIX OpenSSL Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Fri Jun 6 05:44:06 CDT 2014 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory8.asc...

AIX ptrace Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Fri May 2 09:58:11 CDT 2014 | Updated: Tue May 20 14:12:02 CDT 2014 | Update: VIOS level clarification | Update: Corrected APARs | Update: New tar file with missing Iterim Fix The most recent version of this documen...

Security Vulnerability in Perl _compile

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Wed Apr 23 17:08:11 CST 2014 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/perladvisory4.asc...

AIX Java Multiple Vulnerabilities (Oracle Java 2014 CPU)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Thu Mar 6 13:24:59 CST 2014 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javajan2014advisory.asc...

AIX WPAR vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Thu Mar 6 11:54:14 CST 2014 | Updated: Tue Apr 8 09:03:53 CDT 2014 | Update: File set level for affected vwpar.53.rte corrected The most recent version of this document is available here:...

Multiple OpenSSL vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Tues Feb 25 14:07:48 CDT 2014 | Updated: Mon Mar 3 11:46:39 CDT 2014 | Update: Clarified vulnerable filesets The most recent version of this document is available here:...