Re: [EXTERNAL] CVE-2023-40378

[Rob Berendt <robertowenberendt@xxxxxxxxx>]

Domino servers would not start.
Applied the PTF's.
Ended the Domino servers.
Tried to start the Domino servers.
They'd end with an obscure message.
RMVPTF
Then they'd start.

Job name . . . . . . . . . . :   QNNINSTS
LNT0928 Error 2 occurred while running the Domino server.
No further information.


On Mon, Oct 9, 2023 at 8:54 AM Greg Wilburn <
gwilburn@xxxxxxxxxxxxxxxxxxxxxxx> wrote:

> I think I can as well.
>
> DB2 Web Query wouldn't start and my disk utilization spiked 10% in a day.
>
> Can you share what happened to you?
>
> -----Original Message-----
> From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Rob
> Berendt
> Sent: Monday, October 9, 2023 8:39 AM
> To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
> Subject: [EXTERNAL] CVE-2023-40378
>
> IBM issued an alert last week with the subject CVE and suggested that you
> get these PTF's post haste.
> Since then they have changed the CVE's announcement link to say:
> ATTENTION:  Valid use cases are negatively impacted by the vulnerability
> fix.  DO NOT APPLY THE FIXES.
>
> I can attest to this issue.
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.
>
> [CAUTION! This email originated outside of the organization. Please do not
> open attachments or click links from an unknown or suspicious origin.]
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.