Re: Another reason to upgrade to 1.1.9.5 of iACS -- MIDRANGE-L

Subject: Re: Another reason to upgrade to 1.1.9.5 of iACS
From: Rob Berendt <robertowenberendt@xxxxxxxxx>
Date: Fri, 19 Apr 2024 12:08:12 -0400
List-archive: <https://archive.midrange.com/midrange-l/>
List-post: <mailto:midrange-l@lists.midrange.com>
List-subscribe: <https://lists.midrange.com/mailman/listinfo/midrange-l>, <mailto:midrange-l-request@lists.midrange.com?subject=subscribe>
List-unsubscribe: <https://lists.midrange.com/mailman/options/midrange-l>, <mailto:midrange-l-request@lists.midrange.com?subject=unsubscribe>

And yet another CVE reason

- TITLE: Security Bulletin: IBM i Access Client Solutions is vulnerable to
a remote attacker bypassing integrity checks in Apache Mina SSHD Common
(CVE-2023-48795)
- URL:
https://www.ibm.com/support/pages/node/7148782?myns=swgother&mynp=OCSSRQKY&mync=E&cm_sp=swgother-_-OCSSRQKY-_-E

On Fri, Apr 19, 2024 at 10:03 AM Rob Berendt <robertowenberendt@xxxxxxxxx>
wrote:

Security Bulletin: IBM i Access Client Solutions is vulnerable to an
infinite loop or out of memory error due to vulnerabilities in Apache
Commons Compress.
The issue can be fixed by upgrading to version 1.1.9.5 or later.

https://www.ibm.com/support/pages/node/7148781?myns=swgother&mynp=OCSSRQKY&mync=E&cm_sp=swgother-_-OCSSRQKY-_-E

As an Amazon Associate we earn from qualifying purchases.

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.