Re: CERT Advisory: #144389 Return of Bleichenbacher's Oracle Threat (ROBOT)

Our IBMi is running 7.3 and is relatively current (last patches were
applied third week in December).
I ran a check this morning and we have a couple of patches missing
(released in late December)
that I will order and apply.

There are multiple CVE's listed on the vulnerability note.

CVE-2017-6168 CVE-2017-1000385 CVE-2017-17427 CVE-2017-13098
CVE-2017-13099 CVE-2017-17428 CVE-2017-17382 CVE-2012-5081 CVE-2016-6883

Jim

Jim W Grant
Senior VP, Chief Information Officer
Web: www.pdpgroupinc.com




From: "Rob Berendt" <rob@xxxxxxxxx>
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Date: 01/02/2018 01:15 PM
Subject: Re: CERT Advisory: #144389 Return of Bleichenbacher's
Oracle Threat (ROBOT)
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxx>



Perhaps this applies?

...
Apply an update

Some products may have software updates available to address this issue.
If an update is available, affected users are encouraged to update product

software or firmware. Please see the Affected Vendors list below for more
information.
...

Can you display the actual CVE number?


Rob Berendt