AIX OpenSSH Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Fri Feb 21 11:19:24 CDT 2014 | Updated: Wed Apr 16 17:55:12 CDT 2014 | Update: Clarified the affected OpenSSH version The most recent version of this document is available here:...

Vulnerability in AIX X-Server,Vulnerability in VIOS X-Server

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Tue Jan 21 14:01:02 CST 2014 | Updated: Tue Feb 4 12:58:33 CDT 2014 | Update: Fix installation updated | Update: Ifixes for 6.1.9 and 7.1.3 and VIOS http://aix.software.ibm.com/aix/efixes/security/xorgadvisory2.asc...

Multiple Java vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Wed Dec 11 10:53:34 CST 2013 | Updated: Mon Feb 3 10:36:58 CST 2014 | Updated: Sections II and III modifications | Updated: Includes VIOS The most recent version of this document is available here:...

Security vulnerabilities in Perl for AIX,Security vulnerabilities in Perl for VIOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Wed Nov 20 13:06:27 CST 2013 |Updated: Wed Dec 4 10:00:31 CST 2013 |Update: Corrected CVSS scoring information for CVEs |Update: Includes AIX 5.3 in appropriate places The most recent version of this document is...

AIX printer commands vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Wed Sept 25 15:55:39 CDT 2013 | Updated: Wed Feb 26 12:48:22 CDT 2014 | Update: Modified APAR availability dates and corrected | some APAR SP levels. | Update: 1. Replaced ifixes to resolve a prerequisite issue. | 2...

Security Vulnerabilities in AIX InfiniBand,Security Vulnerabilities in VIOS InfiniBand

IBM SECURITY ADVISORY First Issued: Tue Jul 16 10:46:04 CDT 2013 The most recent version of this document is available here: | Updated: Mon Oct 14 20:02:42 CDT 2013 | Update: Includes VIOS in Vulnerability Summary | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added KEYs for parsing purpose...

tftp Security Vulnerability

IBM SECURITY ADVISORY First Issued: Wed Jul 3 09:33:57 CDT 2013 | Updated: Mon Oct 14 20:17:56 CDT 2013 | Update: Fixed vulnerable fileset levels | Update: More workarounds and CVSS Vector | Update: Includes VIOS in the vulnerability summary | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1...

Vulnerability in AIX inet

IBM SECURITY ADVISORY First Issued: Tue Jun 4 14:01:37 CDT 2013 | Updated: Mon Oct 14 22:15:38 CDT 2013 | Update: Workaround section cleaned up | Update: Reboot required | Update: Includes VIOS in the vulnerability summary | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added KEYs for parsin...

AIX OpenSSH Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Mon Apr 8 15:19:58 CDT 2013 | Updated: Fri Aug 2 16:51:48 CDT 2013 | Update: Vulnerable fileset levels corrected | Update: VIOS correct versions The most recent version of this document is available here:...

Multiple OpenSSL vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Fri Mar 15 03:20:11 CDT 2013 The most recent version of this document is available here: | Updated: Wed Jun 5 10:22:29 CDT 2013 | Update: Fix available for FIPS version | Update: Corrected CVSS base score and vector...

Vulnerability in AIX bind

IBM SECURITY ADVISORY First Issued: Tue Oct 23 10:13:27 CDT 2012 | Updated: Mon Jan 28 12:29:56 CDT 2013 | Update: New ifixes for the latest SP's | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added KEYs for parsing purposes | 2. Moved to OpenSSL signature...

AIX ftp vulnerability

IBM SECURITY ADVISORY First Issued: Thu Oct 18 09:50:27 CDT 2012 The most recent version of this document is available here: | Updated: Fri Feb 8 11:58:57 CDT 2013 | Update: Updated Sections I and V: Description and Workaround | Update: New ifixes for latest SP's | Updated: Thu Dec 12 12:55:11 CS...

AIX fuser vulnerability

IBM SECURITY ADVISORY First Issued: Fri Sept 28 13:02:02 CDT 2012 | Updated: Wed Dec 12 14:46:21 CDT 2012 | Update: New ifixes for the latest SP's | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added KEYs for parsing purposes | 2. Moved to OpenSSL signature The most recent version of this...

AIX NFSv4 vulnerability

IBM SECURITY ADVISORY First Issued: Thu Sept 13 13:43:29 CDT 2012 | Updated: Wed Sept 26 13:25:50 CDT 2012 | Updated: Removed the cve.mitre.org reference | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added KEYs for parsing purposes | 2. Moved to OpenSSL signature The most recent version of...

Multiple OpenSSL vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Wed Aug 1 09:25:58 CDT 2012 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/openssladvisory4.asc or...

Vulnerability in AIX system call

IBM SECURITY ADVISORY First Issued: Thu Jul 26 12:59:02 CDT 2012 | Update: Wed Oct 24 8:49:40 CDT 2012 | Update: Updated interim fix file names | Update: New ifixes for the latest SP's | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added KEYs for parsing purposes | 2. Moved to OpenSSL...

Vulnerability in AIX sendmail

IBM SECURITY ADVISORY First Issued: Mon Jul 16 13:28:25 CDT 2012 | Updated: Tue Sept 27 9:50:28 CDT 2012 | Update: New ifixes to include sendmailssl and sendmailnossl | Update: Corrected file names | Update: New ifixes for the latest SP's | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added...

Vulnerability in AIX bind

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Fri Jul 13 13:28:29 CDT 2012 The most recent version of this document is available here: | Updated: Thu Oct 25 05:15:16 CDT 2012 | Update: New ifixes for the latest SP's | Update: Corrected file name...

Arbitary file overwrite symlink in libodm

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Thu Jun 20 13:00:02 CDT 2012 Updated: Mon Oct 29 11:43:29 CDT 2012 Update: IFIX and CSUM for 6100-07-04 Update: New ifixes for the latest SP's Updated: Thu May 23 11:04:10 CDT 2014 Update: New APAR/Interim Fixes...

Vulnerability in use of socketpair

IBM SECURITY ADVISORY First Issued: Tue Jun 5 13:38:09 CDT 2012 | Updated: Wed Oct 3 10:13:19 CDT 2012 | Update: SP availability date and the lslpp assessment | Update: New ifixes for the latest SP's | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added KEYs for parsing purposes | 2. Moved t...

Multiple OpenSSL vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Wed Mar 21 13:02:49 CDT 2012 |Updated: Thu Mar 22 09:06:21 CDT 2012 |Added VIOS release reference |Updated: Tue Jun 5 11:06:56 CDT 2012 |Corrected FIPS version The most recent version of this document is available...

Vulnerability in AIX TCP stack,Vulnerability in VIOS TCP stack

IBM SECURITY ADVISORY First Issued: Fri Feb 3 10:20:44 CST 2012 | Updated: Mon Feb 6 08:56:46 CST 2012 | Updated AIX 53 TL 12 ifix | Updated: Wed Feb 8 16:18:36 CST 2012 | Added VIOS ifixes | Updated: Wed Feb 29 16:32:13 CST 2012 | Added 6.1 TL7 SP3 and 7.1 TL1 SP3 ifixes | Updated: Wed Mar 21...

Perl Digest Module Digest->new() Code Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Mon Nov 22 15:00:14 CST 2011 | Updated: Thu Feb 7 13:01:41 CST 2013 | Fixed vulnerable fileset levels | Added VIOS Levels under section V for Interim Fixes | Fixed availability dates The most recent version of this...

Vulnerability in Diffie-Hellman ciphers affects sendmail on VIOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IBM SECURITY ADVISORY First Issued: Mon Mar 29 15:54:57 CDT 2010 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/sendmailadvisory.asc VULNERABILITY SUMMARY VULNERABILITY: AIX sendmail SSL...