IBM Support

Notes / Domino guidance to mitigate Meltdown and Spectre security vulnerability

Technote (FAQ)


Question

What steps should you take to help protect against Meltdown and Spectre vulnerabilities for IBM Notes client or IBM Domino server?

Answer

Meltdown and Spectre, the CPU vulnerabilities announced in early January, could impact any software running on top of a machine or device that is exposed. This includes a Domino server and Notes client. To implement effective protections against these vulnerabilities, IBM guidance to customers:

  1. Follow the recommendation of your hardware vendors to install the latest chip or firmware changes
  2. Follow the recommendation of your operating system vendor to install latest updates
  3. Keep your anti-virus scanner up-to-date
  4. Because Meltdown and Spectre attacks are likely to come in the form of untrusted code, configure your Agent Security, Domino Server Programmability Restrictions and Notes Execution Control Lists to prevent the execution of untrusted or unsigned code in your Notes and Domino deployment. For more information, refer to

Related information

IBM PSIRT Blog: Potential CPU Security Issue

Document information

More support for: IBM Domino
Security

Software version: Version Independent

Operating system(s): Platform Independent

Software edition: All Editions

Reference #: 2013166

Modified date: 05 February 2018


Translate this page: