MF33249 - osp-cert Fix ASN.1 vulnerabilities

PTF ( Program Temporary Fixes ) Cover letter


Order this fix

Abstract

osp-cert Fix ASN.1 vulnerabilities


Pre/Co-Requisite PTF / Fix List

REQ  LICENSED      PTF/FIX  LEVEL

TYPE PROGRAM  REL  NUMBER   MIN/MAX  OPTION
---- -------- ---  -------  -------  ------
NONE



NOTICE:
-------
   Application of this PTF may disable or render ineffective programs that
   use system memory addresses not generated by the IBM translator,
   including programs that circumvent control technology designed to limit
   interactive capacity to purchased levels.  This PTF may be a prerequisite
   for future PTFs.  By applying this PTF you authorize and agree to the
   foregoing.



SOFTWARE AGREEMENT:
-------------------
   To view or print the software agreement applicable to this PTF, enter
   iSeries command Work With Software Agreements (WRKSFWAGR). Select option 5
   to display (or 6 to print) the agreement for Licensed Program 5722999.




APAR Error Description / Circumvention

DESCRIPTION OF PROBLEM FIXED FOR APAR MA29469 :
-----------------------------------------------
   Fixes for ASN.1 parsing.

CORRECTION FOR APAR MA29469 :
-----------------------------
   Fixes have been made to the ASN.1 parser.

CIRCUMVENTION FOR APAR MA29469 :
--------------------------------
   None.


Activation Instructions


   None.


Special Instructions


   After loading and applying this PTF, you should end and restart your
   tcp/ip servers.

   ********************************************************************
   THE FOLLOWING ARE SUPERSEDED SPECIAL INSTRUCTIONS. IF THE SUPERSEDED
   PTF HAS ALREADY BEEN APPLIED AND ITS SPECIAL INSTRUCTION FOLLOWED,
   IT IS NOT NECESSARY TO FOLLOW THAT SPECIAL INSTRUCTION AGAIN.
   ********************************************************************

   SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF MF32660 :
   =================================================

   After loading and applying this PTF, the customer should end and
   restart any affected TCP/IP servers.


Default Instructions

   THIS PTF CAN BE APPLIED IMMEDIATE OR DELAYED.



Supersedes

PTF/FIX NO(S).  APAR TITLE LINE
--------------  ------------------------------------------------------------
   MF32660      osp-cert allow invalid versions of certificates
   MF32300      osp-cert Allow presence of version 1 in X.509 Certificates

Summary Information

System..............................................   iSeries
Models..............................................  
Release.............................................   V5R3M0  
Recompile...........................................   N    
Library.............................................   QSYS  
MRI Feature ........................................   NONE  
Cum Level...........................................   C4209530

System i Support

IBM disclaims all warranties, whether express or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. By furnishing this document, IBM grants no licenses to any related patents or copyrights. Copyright © 1996,1997,1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011 IBM Corporation. Any trademarks and product or brand names referenced in this document are the property of their respective owners. Consult the Terms of use link for trademark information.

Rate this page:

(0 users)Average rating

Add comments

Document information


More support for:

i family

Software version:

V5R3M0

Operating system(s):

OS/400

Reference #:

MF33249

Modified date:

2011-07-06

Translate my page

Machine Translation

Content navigation