Product Security Incident Response PSIRT information

Content

IBM has a Product Security Incident Response team where security vulnerabilities are monitored for various technologies/products and if affected IBM will issue a formal response via a security bulletin and post on the PSIRT Blog and document any relevant mitigation required.

It is recommended that customers sign up for My Notifications to receive notifications when new bulletins become available as well as monitor the IBM PSIRT Blog and other web pages that list fixes for prior vulnerabilities.

For information on My Notifications please review the following documents:

https://www.ibm.com/support/pages/my-notifications-subscription-service

The main IBM PSIRT blog is where all IBM affected vulnerabilities may be found, because of the vast number of vulnerabilities reported by the community IBM will not respond to a specific vulnerability if not affected by that vulnerability for the specific product or technology. The PSIRT blog can be found at the following address:

https://www.ibm.com/blogs/psirt/

The below links provide specifics on IBM i vulnerabilities you may also find useful:

• All Security Bulletins for IBM i 
• Apache for IBM i 
• Java on IBM i Security Updates 
• News and Vulnerabilities for Open SSL/Open SSH on IBM i 

For information regarding configuring or specifying specific SSL versions/cipher specs please see the following documents:

• Configuring Your IBM i System Secure Sockets Layer (SSL)/Transport Layer Security (TLS) Protocols and Cipher Suites
• Digital Certificate Manager (DCM) - Frequently Asked Questions and Common Tasks