Documentation for security patches Was: RCLSTG formula

<snip>
As for IBM revealing stuff, I had to deal with an auditor who demanded
documentation for security patches. I told her the neither Mr. Ernst nor
Mr.
Young couldn't get IBM to reveal those secrets.
</snip>

The times they are a changing...
http://www-912.ibm.com/a_dir/as4ptf.nsf/as4ptfhome
Search that site for CVE
Look at this one for example
http://www-912.ibm.com/a_dir/as4ptf.nsf/2cd2b90688ce805586257cc8006a22a5/e7a97df092e2aa3686257e2f00632a9d?OpenDocument&Highlight=2,cve

APAR Error Description / Circumvention

-----------------------------------------------
OpenSSL for i needs to be updated to comply with
security vulnerabilities:

CVE-2015-0291
CVE-2015-0290
CVE-2015-0207
CVE-2015-0286
CVE-2015-0208
CVE-2015-0287
CVE-2015-0289
CVE-2015-0292
CVE-2015-0293
CVE-2015-1787
CVE-2015-0285
CVE-2015-0209
CVE-2015-0288
...

You can search the internet for these individual CVE's.


Rob Berendt