{"flrtReport": [
{"System": {
"fw": {
"name": "System firmware",
"nickname": "System firmware",
"key": "fw",
"code": "fw",
"input": {
"name": "System Firmware SC860_160_056",
"version": "SC860_160",
"releaseDate": "2018.05.03",
"eosps": "2022.02.01",
"url": "http://www.ibm.com/support/fixcentral/quickorder?fixids=01SC860_160_056&function=fixId&includeRequisites=1&productCode=quoff7d&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?fixids=01SC860_160_056&function=fixId&includeRequisites=1&productCode=quoff7d&source=flrt",
"latest": {
"name": "System Firmware SC860_246_165",
"version": "SC860_246",
"releaseDate": "2024.10.25",
"eosps": "2022.02.01",
"url": "http://www.ibm.com/support/fixcentral/quickorder?fixids=01SC860_246_165&function=fixId&includeRequisites=1&productCode=quoff7d&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?fixids=01SC860_246_165&function=fixId&includeRequisites=1&productCode=quoff7d&source=flrt"
}
},
"update": {
"name": "System Firmware SC860_246_165",
"version": "SC860_246",
"releaseDate": "2024.10.25",
"eosps": "2022.02.01",
"url": "http://www.ibm.com/support/fixcentral/quickorder?fixids=01SC860_246_165&function=fixId&includeRequisites=1&productCode=quoff7d&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?fixids=01SC860_246_165&function=fixId&includeRequisites=1&productCode=quoff7d&source=flrt",
"notes": [
{"note": "This is a disruptive update requiring a system restart."},
{"note": "support has ended for this update"}
],
"latest": {
"name": "System Firmware SC860_246_165",
"version": "SC860_246",
"releaseDate": "2024.10.25",
"eosps": "2022.02.01",
"url": "http://www.ibm.com/support/fixcentral/quickorder?fixids=01SC860_246_165&function=fixId&includeRequisites=1&productCode=quoff7d&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?fixids=01SC860_246_165&function=fixId&includeRequisites=1&productCode=quoff7d&source=flrt",
"notes": [
{"note": "This is a disruptive update requiring a system restart."},
{"note": "support has ended for this update"}
]
}
}
},
"hmc": {
"name": "HMC and HMC Virtual Appliance",
"nickname": "HMC and vHMC",
"key": "hmc",
"code": "sgj5k6",
"input": {
"name": "HMC V9 R1 M921",
"version": "V9 R1 M921",
"releaseDate": "2018.11.16",
"eosps": "2019.05.17",
"url": "http://www.ibm.com/support/fixcentral/quickorder?fixids=MH01789&function=fixId&includeRequisites=1&product=ibm/hmc/9100HMC&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?fixids=MH01789&function=fixId&includeRequisites=1&product=ibm/hmc/9100HMC&source=flrt",
"notes": [
{"fix": {
"version": "MH01808",
"description": "",
"url": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01808&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01808&source=flrt",
"releaseDate": "2019.03.05"
}},
{"fix": {
"version": "MH01813",
"description": "",
"url": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01813&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01813&source=flrt",
"releaseDate": "2019.05.08"
}},
{"fix": {
"version": "MH01820",
"description": "",
"url": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01820&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01820&source=flrt",
"releaseDate": "2019.05.29"
}},
{"fix": {
"version": "MH01857",
"description": "",
"url": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01857&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01857&source=flrt",
"releaseDate": "2021.03.26"
}},
{"note": "Additional details for HMC Code updates and upgrades are here.<\/a>"},
{"note": "Starting with HMC R870 additional options are available to run HMC on Power machines either directly or as a virtual appliance. To download HMC to run on Power 7063 machine types, visit IBM Fix Central here.<\/a>"}
],
"latest": {
"name": "HMC V9 R2 M953",
"version": "V9 R2 M953",
"releaseDate": "2022.08.18",
"eosps": "2023.04.30",
"url": "http://www.ibm.com/support/fixcentral/quickorder?fixids=MH01933&function=fixId&includeRequisites=1&product=ibm/hmc/9100HMC&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?fixids=MH01933&function=fixId&includeRequisites=1&product=ibm/hmc/9100HMC&source=flrt",
"notes": [
{"fix": {
"version": "MH01808",
"description": "",
"url": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01808&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01808&source=flrt",
"releaseDate": "2019.03.05"
}},
{"fix": {
"version": "MH01813",
"description": "",
"url": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01813&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01813&source=flrt",
"releaseDate": "2019.05.08"
}},
{"fix": {
"version": "MH01820",
"description": "",
"url": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01820&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01820&source=flrt",
"releaseDate": "2019.05.29"
}},
{"fix": {
"version": "MH01857",
"description": "",
"url": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01857&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01857&source=flrt",
"releaseDate": "2021.03.26"
}},
{"note": "Additional details for HMC Code updates and upgrades are here.<\/a>"},
{"note": "Starting with HMC R870 additional options are available to run HMC on Power machines either directly or as a virtual appliance. To download HMC to run on Power 7063 machine types, visit IBM Fix Central here.<\/a>"}
]
}
},
"update": {
"name": "HMC V9 R1 M942",
"version": "V9 R1 M942",
"releaseDate": "2020.12.11",
"eosps": "2021.09.30",
"url": "http://www.ibm.com/support/fixcentral/quickorder?fixids=MH01876&function=fixId&includeRequisites=1&product=ibm/hmc/9100HMC&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?fixids=MH01876&function=fixId&includeRequisites=1&product=ibm/hmc/9100HMC&source=flrt",
"notes": [
{"fix": {
"version": "MH01857",
"description": "",
"url": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01857&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01857&source=flrt",
"releaseDate": "2021.03.26"
}},
{"fix": {
"version": "MH01898",
"description": "",
"url": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01898&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01898&source=flrt",
"releaseDate": "2021.09.24"
}},
{"note": "Additional details for HMC Code updates and upgrades are here.<\/a>"},
{"note": "Starting with HMC R870 additional options are available to run HMC on Power machines either directly or as a virtual appliance. To download HMC to run on Power 7063 machine types, visit IBM Fix Central here.<\/a>"},
{"note": "support has ended for this update"}
],
"latest": {
"name": "HMC V9 R1 M942",
"version": "V9 R1 M942",
"releaseDate": "2020.12.11",
"eosps": "2021.09.30",
"url": "http://www.ibm.com/support/fixcentral/quickorder?fixids=MH01876&function=fixId&includeRequisites=1&product=ibm/hmc/9100HMC&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?fixids=MH01876&function=fixId&includeRequisites=1&product=ibm/hmc/9100HMC&source=flrt",
"notes": [
{"fix": {
"version": "MH01857",
"description": "",
"url": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01857&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01857&source=flrt",
"releaseDate": "2021.03.26"
}},
{"fix": {
"version": "MH01898",
"description": "",
"url": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01898&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01898&source=flrt",
"releaseDate": "2021.09.24"
}},
{"note": "Additional details for HMC Code updates and upgrades are here.<\/a>"},
{"note": "Starting with HMC R870 additional options are available to run HMC on Power machines either directly or as a virtual appliance. To download HMC to run on Power 7063 machine types, visit IBM Fix Central here.<\/a>"},
{"note": "support has ended for this update"}
]
}
},
"upgrade": {
"name": "HMC V9 R2 M950",
"version": "V9 R2 M950",
"releaseDate": "2020.11.20",
"eosps": "2021.04.23",
"url": "http://www.ibm.com/support/fixcentral/quickorder?fixids=MH01885&function=fixId&includeRequisites=1&product=ibm/hmc/9100HMCppc&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?fixids=MH01885&function=fixId&includeRequisites=1&product=ibm/hmc/9100HMCppc&source=flrt",
"notes": [
{"fix": {
"version": "MH01883",
"description": "",
"url": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01883&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01883&source=flrt",
"releaseDate": "2021.03.26"
}},
{"fix": {
"version": "MH01900",
"description": "",
"url": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01900&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01900&source=flrt",
"releaseDate": "2021.11.19"
}},
{"note": "Additional details for HMC Code updates and upgrades are here.<\/a>"},
{"note": "POWER7 servers are supported with the following minimum firmware levels. Update or upgrade the firmware on the server prior to upgrading the HMC. FW730_146 (730.A0), FW740_156 (740.90), FW760_087 (760.50), FW770_098 (770.50), FW780_068 (780.21)"},
{"note": "Starting with HMC R870 additional options are available to run HMC on Power machines either directly or as a virtual appliance. To download HMC to run on Power 7063 machine types, visit IBM Fix Central here.<\/a>"},
{"note": "For 7042-CR9, The minimum HMC level required to upgrade to HMC V9 R2 M950 is HMC V9 R1 M940 SP2 along with a Mandatory fix MH01857. or HMC V9R1M942 + mandatory fix MH01857. This HMC V9 R2 M950 is for 7042-CR9 only and does not support other 7042 models. This is the last release to support the 7042-CR9."},
{"note": "support has ended for this upgrade"}
],
"latest": {
"name": "HMC V9 R2 M953",
"version": "V9 R2 M953",
"releaseDate": "2022.08.18",
"eosps": "2023.04.30",
"url": "http://www.ibm.com/support/fixcentral/quickorder?fixids=MH01933&function=fixId&includeRequisites=1&product=ibm/hmc/9100HMC&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?fixids=MH01933&function=fixId&includeRequisites=1&product=ibm/hmc/9100HMC&source=flrt",
"notes": [
{"fix": {
"version": "MH01883",
"description": "",
"url": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01883&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01883&source=flrt",
"releaseDate": "2021.03.26"
}},
{"fix": {
"version": "MH01900",
"description": "",
"url": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01900&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/quickorder?product=ibm/hmc/9100HMC&fixids=MH01900&source=flrt",
"releaseDate": "2021.11.19"
}},
{"note": "Additional details for HMC Code updates and upgrades are here.<\/a>"},
{"note": "POWER7 servers are supported with the following minimum firmware levels. Update or upgrade the firmware on the server prior to upgrading the HMC. FW730_146 (730.A0), FW740_156 (740.90), FW760_087 (760.50), FW770_098 (770.50), FW780_068 (780.21)"},
{"note": "Starting with HMC R870 additional options are available to run HMC on Power machines either directly or as a virtual appliance. To download HMC to run on Power 7063 machine types, visit IBM Fix Central here.<\/a>"},
{"note": "For 7042-CR9, The minimum HMC level required to upgrade to HMC V9 R2 M950 is HMC V9 R1 M940 SP2 along with a Mandatory fix MH01857. or HMC V9R1M942 + mandatory fix MH01857. This HMC V9 R2 M950 is for 7042-CR9 only and does not support other 7042 models. This is the last release to support the 7042-CR9."},
{"note": "support has ended for this upgrade"}
]
}
}
},
"hmchost": {
"name": "HMC Host Servers",
"nickname": "HMC Host",
"key": "hmchost",
"code": "hmchost",
"input": {
"name": "7042-CR9",
"version": "7042-CR9"
}
},
"mtm": {
"name": "Server Machine-Type-Model",
"nickname": "Server MTM",
"key": "mtm",
"code": "mtm",
"input": {
"name": "IBM Power System E880",
"version": "9119-MHE",
"ocv": "quoff7d",
"announce": "https://www.ibm.com/docs/en/announcements/archive/ENUS114-158"
}
}
}},
{"Partition 1": {"ibmi": {
"name": "IBM i",
"nickname": "IBM i",
"key": "ibmi",
"code": "ssavdk",
"error": [{
"text": "Unknown version: V7R3M4",
"type": "error"
}]
}}},
{"Partition 2": {"aix": {
"name": "AIX",
"nickname": "AIX",
"key": "aix",
"code": "sseq6u",
"input": {
"name": "AIX 7.2 Technology Level 7200-03-01",
"version": "7200-03-01-1838",
"releaseDate": "2018.09.21",
"eosps": "2021.09.30",
"url": "http://www.ibm.com/support/fixcentral/aix/quickorder?fixids=U882326&function=fixId&includeRequisites=1&includeSupersedes=0&release=7.2&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/aix/quickorder?fixids=U882326&function=fixId&includeRequisites=1&includeSupersedes=0&release=7.2&source=flrt",
"fixDetails": "https://www-945.ibm.com/support/fixcentral/aix/fixpackdetails?fixid=U882326&fixname=7200-03-01-1838&fixtype=group_SP&xmlUri=https://download4.boulder.ibm.com/sar/CMA/AXA/07ulz/0/7200-03-01.xml",
"reboot": true,
"notes": [{"note": "IBM recommends that most users not upgrade AIX until the new version has been in the field for 90 days. You may wish to wait until October 15 to upgrade to 7300-04-01-2620"}],
"apars": {
"OTHER": {
"10536ma": {
"url": "https://aix.software.ibm.com/aix/efixes/security/curl_advisory11.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/curl_advisory11.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/curl_fix11.tar",
"filesets": "oss.lib.libcurl:7.79.1.0-7.79.1.0 oss.lib.libcurl:8.1.2.0-8.1.2.0 oss.lib.libcurl:8.5.0.0-8.5.0.2",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Multiple vulnerabilities impacts AIX due to cURL libcurl (CVE-2026-10536 CVE-2026-11856 CVE-2026-8286 CVE-2026-8458 CVE-2026-8924 CVE-2026-8927 CVE-2026-8932 CVE-2026-9547)",
"ifixes": "10536ma.260730.epkg.Z",
"issued": "20260728",
"updated": "20260730",
"reboot": "no",
"cvss": "CVE-2026-10536:9.8 / CVE-2026-11856:9.8 / CVE-2026-8286:8.1 / CVE-2026-8458:6.5 / CVE-2026-8924:9.1 / CVE-2026-8927:9.1 / CVE-2026-8932:7.5 / CVE-2026-9547:7.4"
},
"1122401sa": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory44.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory44.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix44.tar",
"filesets": "openssl.base:1.1.2.0-1.1.2.2401 openssl.base:3.0.0.0-3.0.15.1000",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to information disclosure (CVE-2024-13176) or arbitrary code execution or a denial of service (CVE-2024-9143) due to OpenSSL",
"ifixes": "1122401sa.250204.epkg.Z 301510sa.250212.epkg.Z",
"issued": "20250224",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-13176:4.1 / CVE-2024-9143:3.7"
},
"3013ma": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory43.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory43.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix43.tar",
"filesets": "openssl.base:3.0.5.101-3.0.13.1000",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to a denial of service (CVE-2024-6119) due to OpenSSL",
"ifixes": "3013ma.240923.epkg.Z",
"issued": "20240930",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-6119:5.3"
},
"301610mc": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory47.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory47.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix47.tar",
"filesets": "openssl.base:3.0.0.0-3.0.16.1000",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Multiple vulnerabilities impact AIX due to OpenSSL",
"ifixes": "301610mc.260424.epkg.Z",
"issued": "20260504",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2026-28387:8.1 / CVE-2026-28388:7.5 / CVE-2026-28389:7.5 / CVE-2026-28390:7.5 / CVE-2026-31789:9.8 / CVE-2026-31790:7.5"
},
"301610sa": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory45.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory45.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix45.tar",
"filesets": "openssl.base:3.0.0.0-3.0.16.1000",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to an out-of-bounds read (CVE-2025-9230 CVE-2025-9232) due to OpenSSL",
"ifixes": "301610sa.251106.epkg.Z",
"issued": "20251210",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2025-9230:7.5 / CVE-2025-9232:5.9"
},
"35414ma": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory21.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory21.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssh_fix21.tar",
"filesets": "openssh.base.client:9.2.112.0-9.7.3013.1000 openssh.base.server:9.2.112.0-9.7.3013.1000 openssh.base.client:9.9.3015.1000-9.9.3015.2000 openssh.base.server:9.9.3015.1000-9.9.3015.2000",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Multiple vulnerabilities in OpenSSH affect AIX",
"ifixes": "35414ma.260507.epkg.Z",
"issued": "20260528",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2026-35385:8.1 / CVE-2026-35386:8.1 / CVE-2026-35387:6.5 / CVE-2026-35388:2.5 / CVE-2026-35414:8.1"
},
"38408m9a": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory15.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory15.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssh_fix15.tar",
"filesets": "openssh.base.client:8.1.102.0-8.1.102.2106 openssh.base.server:8.1.102.0-8.1.102.2106 openssh.base.client:8.1.112.0-8.1.112.2000 openssh.base.server:8.1.112.0-8.1.112.2000 openssh.base.client:9.2.112.0-9.2.112.2000 openssh.base.server:9.2.112.0-9.2.112.2000",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to unauthorized file access and arbitrary code execution due to OpenSSH",
"ifixes": "38408m9a.230811.epkg.Z 38408m9b.230811.epkg.Z 38408m9c.230811.epkg.Z",
"issued": "20230823",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-38408:8.1 / CVE-2023-40371:6.2"
},
"81112ma": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory16.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory16.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssh_fix16.tar",
"filesets": "openssh.base.client:8.1.112.0-8.1.112.2200 openssh.base.server:8.1.112.0-8.1.112.2200 openssh.base.client:9.2.112.0-9.2.112.2200 openssh.base.server:9.2.112.0-9.2.112.2200",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to a machine-in-the-middle attack (CVE-2023-48795) arbitrary command execution (CVE-2023-51385) and information disclosure (CVE-2023-51384) due to OpenSSH",
"ifixes": "81112ma.240224.epkg.Z 92112ma.240223.epkg.Z",
"issued": "20240228",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-48795:5.9 / CVE-2023-51384:4.4 / CVE-2023-51385:9.8"
},
"9211224a": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory17.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory17.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssh_fix17.tar",
"filesets": "openssh.base.client:9.2.112.0-9.2.112.2400 openssh.base.server:9.2.112.0-9.2.112.2400",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to arbitrary code execution (CVE-2024-6387) due to OpenSSH",
"ifixes": "9211224a.240708.epkg.Z",
"issued": "20240709",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-6387:8.1"
},
"CVE-2010-5107": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory2.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory2.asc",
"download": "https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp",
"filesets": "openssh.base.server:6.0.0.0-6.0.0.6101",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "AIX OpenSSH Vulnerability",
"ifixes": "OpenSSH_6.0.0.6102.tar.Z DEPRECATED::6201_mfix",
"issued": "20130408",
"updated": "20130802",
"reboot": "no",
"cvss": "CVE-2010-5107:5.0"
},
"CVE-2010-5298": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory8.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory8.asc",
"download": "https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp",
"filesets": "openssl.base:1.0.1.500-1.0.1.502",
"fixedIn": "Openssl-1.0.1.503",
"fixedInLink": "Openssl-1.0.1.503",
"abstract": "AIX OpenSSL Vulnerability",
"ifixes": "openssl-1.0.1.503.tar.Z",
"issued": "20140606",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2010-5298:4"
},
"CVE-2011-4108": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc",
"download": "https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp",
"filesets": "openssl.base:0.9.8.0-0.9.8.1800 openssl.base:12.9.8.0-12.9.8.1800",
"fixedIn": "7100-02-00",
"fixedInLink": "7100-02-00<\/a>",
"abstract": "Multiple OpenSSL vulnerabilities",
"ifixes": "openssl.0.9.8.1801.tar.Z",
"issued": "20120321",
"updated": "20120605",
"reboot": "no",
"cvss": "CVE-2011-4108:4.3 / CVE-2011-4109:9.3 / CVE-2011-4576:5.0 / CVE-2011-4619:5.0"
},
"CVE-2012-0884": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory4.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory4.asc",
"download": "https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp",
"filesets": "openssl.base:0.9.8.0-0.9.8.1801 openssl.base:12.9.8.0-12.9.8.1801",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple OpenSSL vulnerabilities",
"ifixes": "openssl-0.9.8.1802.tar.Z",
"issued": "20120801",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2012-0884:5.0 / CVE-2012-1165:5.0 / CVE-2012-2110:7.5 / CVE-2012-2131:7.5 / CVE-2012-2333:6.8"
},
"CVE-2013-0169": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory5.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory5.asc",
"download": "https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp",
"filesets": "openssl.base:0.9.8.0-0.9.8.2400 openssl.base:12.9.8.0-12.9.8.2400",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple OpenSSL vulnerabilities",
"ifixes": "openssl-0.9.8.2500.tar.Z",
"issued": "20130315",
"updated": "20130605",
"reboot": "no",
"cvss": "CVE-2013-0169:4.3 / CVE-2013-0166:5.0"
},
"CVE-2013-4353": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory6.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory6.asc",
"download": "https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp",
"filesets": "openssl.base:1.0.1.500",
"fixedIn": "7100-04-00",
"fixedInLink": "7100-04-00<\/a>",
"abstract": "Multiple OpenSSL vulnerabilities",
"ifixes": "openssl-1.0.1.501.tar.Z",
"issued": "20140225",
"updated": "20140303",
"reboot": "no",
"cvss": "CVE-2013-4353:5 / CVE-2013-6450:4.3 / CVE-2013-6449:4.3"
},
"CVE-2013-4548": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory3.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory3.asc",
"download": "https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp",
"filesets": "openssh.base.server:6.0.0.6103",
"fixedIn": "7100-04-00",
"fixedInLink": "7100-04-00<\/a>",
"abstract": "AIX OpenSSH Vulnerability",
"ifixes": "OpenSSH_6.0.0.6104.tar.Z DEPRECATED::6201_mfix",
"issued": "20140221",
"updated": "20140416",
"reboot": "no",
"cvss": "CVE-2013-4548:6.0"
},
"CVE-2013-5456": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_advisory.asc",
"download": "see advisory",
"filesets": "Java5:5.0.0.0-5.0.0.560 Java6:6.0.0.0-6.0.0.435 Java7:7.0.0.0-7.0.0.110",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple Java vulnerabilities",
"ifixes": "see advisory",
"issued": "20131211",
"updated": "20140203",
"reboot": "no",
"cvss": "CVE-2013-5456:9.3 / CVE-2013-5457:9.3 / CVE-2013-5458:9.3 / CVE-2013-4041:6.8 / CVE-2013-5375:4.3 / CVE-2013-5372:4.3 / CVE-2013-5843:10 / CVE-2013-5789:10 / CVE-2013-5830:10 / CVE-2013-5829:10 / CVE-2013-5787:10 / CVE-2013-5788:10 / CVE-2013-5824:10 / CVE-2013-5842:10 / CVE-2013-5782:10 / CVE-2013-5817:10 / CVE-2013-5809:10 / CVE-2013-5814:10 / CVE-2013-5832:9.3 / CVE-2013-5850:9.3 / CVE-2013-5838:9.3 / CVE-2013-5802:7.5 / CVE-2013-5812:6.4 / CVE-2013-5804:6.4 / CVE-2013-5783:6.4 / CVE-2013-3829:6.4 / CVE-2013-5823:5 / CVE-2013-5831:5 / CVE-2013-5820:5 / CVE-2013-5819:5 / CVE-2013-5818:5 / CVE-2013-5848:5 / CVE-2013-5776:5 / CVE-2013-5774:5 / CVE-2013-5825:5 / CVE-2013-5840:5 / CVE-2013-5801:5 / CVE-2013-5778:5 / CVE-2013-5851:5 / CVE-2013-5800:4.3 / CVE-2013-5784:4.3 / CVE-2013-5849:4.3 "
},
"CVE-2014-0160": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory7.doc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory7.doc",
"download": "https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=aixbp&lang=en_US&S_PKG=openssl&cp=UTF-8",
"filesets": "openssl.base:1.0.1.500-1.0.1.501",
"fixedIn": "Openssl-1.0.1.502",
"fixedInLink": "Openssl-1.0.1.502",
"abstract": "Openssl Heartbleed vulnerability",
"ifixes": "Openssl-1.0.1.502",
"issued": "20140410",
"updated": "20140415",
"reboot": "no",
"cvss": "CVE-2014-0160:5.0 / CVE-2014-0076:2.1"
},
"CVE-2014-0224": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc",
"download": "https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp",
"filesets": "openssl.base:1.0.1.500-1.0.1.510 openssl.base:0.9.8.401-0.9.8.2501 openssl.base:12.9.8.1100-12.9.8.2501",
"fixedIn": "Openssl-1.0.1.511 openssl-0.9.8.2502 openssl-12.9.8.2502",
"fixedInLink": "Openssl-1.0.1.511 openssl-0.9.8.2502 openssl-12.9.8.2502",
"abstract": "AIX OpenSSL Vulnerabilities (Multiple CVEs)",
"ifixes": "openssl-1.0.1.511.tar.Z / openssl-0.9.8.2502.tar.Z / openssl-12.9.8.2502.tar.Z",
"issued": "20140611",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2014-0224:5.8 / CVE-2014-0221:4.3 / CVE-2014-0195:7.5 / CVE-2014-0198:4.3 / CVE-2014-3470:4.3"
},
"CVE-2014-0428": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_jan2014_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_jan2014_advisory.asc",
"download": "https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=dka&S_PKG=aix64j7b&S_TACT=105AGX05&S_CMP=JDK",
"filesets": "Java5:5.0.0.0-5.0.0.559 Java6:6.0.0.0-6.0.0.434 Java7:7.0.0.0-7.0.0.109",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "AIX Java Multiple Vulnerabilities (Oracle Java 2014 CPU)",
"ifixes": "see advisory",
"issued": "20140306",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2014-0428:10 / CVE-2014-0422:10 / CVE-2013-5907:10 / CVE-2014-0415:10 / CVE-2014-0410:10 / CVE-2013-5889:9.3 / CVE-2014-0417:9.3 / CVE-2014-0387:7.6 / CVE-2014-0424:7.5 / CVE-2013-5878:7.5 / CVE-2014-0373:7.5 / CVE-2014-0375:5.8 / CVE-2014-0403:5.8 / CVE-2014-0423:5.5 / CVE-2014-0376:5 / CVE-2013-5910:5 / CVE-2013-5884:5 / CVE-2013-5896:5 / CVE-2013-5899:5 / CVE-2014-0416:5 / CVE-2013-5887:5 / CVE-2014-0368:5 / CVE-2013-5888:4.6 / CVE-2013-5898:4 / CVE-2014-0411:4"
},
"CVE-2014-0457": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_apr2014_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_apr2014_advisory.asc",
"download": "https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=dka",
"filesets": "Java5:5.0.0.0-5.0.0.575 Java6:6.0.0.0-6.0.0.455 Java7:7.0.0.0-7.0.0.130 Java7:7.1.0.0-7.1.0.10",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in current releases of the IBM SDK Java Technology Edition",
"ifixes": "see advisory",
"issued": "20140619",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2014-0457:10 / CVE-2014-2421:10 / CVE-2014-0429:10 / CVE-2014-0461:9.3 / CVE-2014-0455:9.3 / CVE-2014-2428:7.6 / CVE-2014-0448:7.6 / CVE-2014-0454:7.5 / CVE-2014-0446:7.5 / CVE-2014-0452:7.5 / CVE-2014-0451:7.5 / CVE-2014-2402:7.5 / CVE-2014-2423:7.5 / CVE-2014-2427:7.5 / CVE-2014-0458:7.5 / CVE-2014-2414:7.5 / CVE-2014-2412:7.5 / CVE-2014-2409:6.4 / CVE-2014-0460:5.8 / CVE-2013-6954:5 / CVE-2013-6629:5 / CVE-2014-2401:5 / CVE-2014-0449:5 / CVE-2014-0459:4.3 / CVE-2014-0453:4 / CVE-2014-2398:3.5 / CVE-2014-1876:2.6 / CVE-2014-2420:2.6 / CVE-2014-0878:5.8"
},
"CVE-2014-2532": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc",
"download": "https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp",
"filesets": "openssh.base:4.0.0.5200-6.0.0.6106",
"fixedIn": "Openssh-6.0.0.6107",
"fixedInLink": "Openssh-6.0.0.6107",
"abstract": "AIX OpenSSH Vulnerability",
"ifixes": "OpenSSH_6.0.0.6107.tar.Z DEPRECATED::6201_mfix",
"issued": "20140617",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2014-2532:5 / CVE-2014-2653:4.3"
},
"CVE-2014-3505": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix10.tar",
"filesets": "openssl.base:1.0.1.500-1.0.1.511 openssl.base:0.9.8.401-0.9.8.2502 openssl.base:12.9.8.1100-12.9.8.2502",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "AIX OpenSSL Denial of Service due to double free and others",
"ifixes": "101_fix.140902.epkg.Z 098_fix.140902.epkg.Z 1298_fix.140902.epkg.Z",
"issued": "20140909",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2014-3505:5 / CVE-2014-3506:5 / CVE-2014-3507:5 / CVE-2014-3508:4.3 / CVE-2014-3509:4.3 / CVE-2014-3510:4.3 / CVE-2014-3511:4.3 / CVE-2014-3512:5 / CVE-2014-5139:5"
},
"CVE-2014-3513": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix11.tar",
"filesets": "openssl.base:1.0.1.500-1.0.1.512 openssl.base:0.9.8.401-0.9.8.2503 openssl.base:12.9.8.1100-12.9.8.2503",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "AIX OpenSSL Denial of Service due to memory leak in DTLS / AIX OpenSSL Patch to mitigate CVE-2014-3566 / AIX OpenSSL Denial of Service due to memory consumption",
"ifixes": "IV66250s9a.141027.epkg.Z IV66250s9b.141027.epkg.Z IV66250s9c.141027.epkg.Z",
"issued": "20141029",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2014-3513:5 / CVE-2014-3566:4.3 / CVE-2014-3567:5"
},
"CVE-2014-3566": {
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21687611",
"bulletin": "http://www-01.ibm.com/support/docview.wss?uid=swg21687611",
"download": "n/a",
"filesets": "Idsldap.*:6.0:6.1:6.2:6.3:6.3.1",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "A security vulnerability has been identified in IBM Tivoli Directory Server shipped with AIX/VIOS",
"ifixes": "See advisory",
"issued": "20141021",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2014-3566:4.3"
},
"CVE-2014-3570": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory12.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory12.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix12.tar",
"filesets": "openssl.base:0.9.8.401-0.9.8.2504 openssl.base:1.0.1.500-1.0.1.513 openssl.base:12.9.8.1100-12.9.8.2504",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple Security vulnerabilities in AIX OpenSSL",
"ifixes": "IV69033s9a.150129.epkg.Z / IV69033s9b.150129.epkg.Z / IV69033s9c.150129.epkg.Z",
"issued": "20150204",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2014-3570:2.6 / CVE-2014-3571:5 / CVE-2014-3572:1.2 / CVE-2014-8275:1.2 / CVE-2015-0204:1.2 / CVE-2015-0205:2.1 / CVE-2015-0206:5"
},
"CVE-2014-3634": {
"url": "https://aix.software.ibm.com/aix/efixes/security/rsyslog_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/rsyslog_advisory.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/rsyslog_fix.tar",
"filesets": "rsyslog.base:5.8.6.1-5.8.6.3",
"fixedIn": "next level",
"fixedInLink": "next level",
"abstract": "Open Source RSyslog vulnerability",
"ifixes": "IV66633s0a.141107.epkg.Z",
"issued": "20141114",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2014-3634:5.0 / CVE-2014-3683:5.0"
},
"CVE-2014-4227": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_jul2014_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_jul2014_advisory.asc",
"download": "https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=dka",
"filesets": "Java5:5.0.0.0-5.0.0.579 Java6:6.0.0.0-6.0.0.459 Java7:7.0.0.0-7.0.0.134 Java7:7.1.0.0-7.1.0.14",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in current releases of the IBM SDK Java Technology Edition",
"ifixes": "see advisory",
"issued": "20140818",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2014-4227:10 / CVE-2014-4262:9.3 / CVE-2014-4219:9.3 / CVE-2014-4209:6.4 / CVE-2014-4220:5 / CVE-2014-4268:5 / CVE-2014-4218:5 / CVE-2014-4252:5 / CVE-2014-4266:5 / CVE-2014-4265:5 / CVE-2014-4221:4.3 / CVE-2014-4263:4 / CVE-2014-4244:4 / CVE-2014-4208:2.6 / CVE-2014-3086:9.3"
},
"CVE-2014-4341": {
"url": "https://aix.software.ibm.com/aix/efixes/security/nas_advisory1.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/nas_advisory1.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/nas1_fix.tar",
"filesets": "krb5.server.rte:1.5.0.0-1.6.0.1 krb5.client.rte:1.5.0.0-1.6.0.1",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple Security vulnerabilities in IBM NAS",
"ifixes": "1506_fix.140813.epkg.Z 1601_fix.140813.epkg.Z",
"issued": "20140828",
"updated": "20140905",
"reboot": "no",
"cvss": "CVE-2014-4341:5.0 / CVE-2014-4343:5.0 / CVE-2014-4344:5.0"
},
"CVE-2014-5351": {
"url": "https://aix.software.ibm.com/aix/efixes/security/nas_advisory2.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/nas_advisory2.asc",
"download": "https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp",
"filesets": "krb5.client.rte:1.5.0.7-1.6.0.2 krb5.server.rte:1.5.0.7-1.6.0.2",
"fixedIn": "next TL",
"fixedInLink": "next TL",
"abstract": "AIX NAS vulnerability",
"ifixes": "NAS_1.X.0.X_aix_image.tar.Z",
"issued": "20150120",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2014-5351:4"
},
"CVE-2014-5352": {
"url": "https://aix.software.ibm.com/aix/efixes/security/nas_advisory3.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/nas_advisory3.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/nas3_fix.tar",
"filesets": "krb5.client.rte:1.4.0.8-1.6.0.2 krb5.server.rte:1.4.0.8-1.6.0.2",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple Security vulnerabilities in IBM NAS(kerberos)",
"ifixes": "1507c_fix.150404.epkg.Z 1507s_fix.150407.epkg.Z 1602c_fix.150404.epkg.Z 1602s_fix.150404.epkg.Z",
"issued": "20150521",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2014-5352:9.0 / CVE-2014-5355:5.0 / CVE-2014-9421:9.0 / CVE-2014-9422:6.1 / CVE-2014-9423:5.0"
},
"CVE-2014-6513": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_oct2014_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_oct2014_advisory.asc",
"download": "https://www.ibm.com/developerworks/java/jdk/aix/service.html#levels",
"filesets": "Java5.sdk:<5.0.0.580 Java6.sdk:<6.0.0.460 Java7.sdk:<7.0.0.135 Java71.sdk:<7.1.0.15 Java5_64.sdk:<5.0.0.580 Java6_64.sdk:<6.0.0.460 Java7_64.sdk:<7.0.0.135 Java71_64.sdk:<7.1.0.15",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in current releases of the IBM SDK Java Technology Edition; issues in the Oracle October 2014 Critical Patch Update plus the POODLE SSLv3 vulnerability and",
"ifixes": "See advisory",
"issued": "20141026",
"updated": "20141114",
"reboot": "no",
"cvss": "CVE-2014-6513:10 / CVE-2014-6503:9.3 / CVE-2014-6532:9.3 / CVE-2014-4288:7.6 / CVE-2014-6493:7.6 / CVE-2014-6492:7.6 / CVE-2014-6458:6.9 / CVE-2014-6466:6.9 / CVE-2014-6506:6.8 / CVE-2014-6476:5 / CVE-2014-6515:5 / CVE-2014-6511:5 / CVE-2014-6531:4.3 / CVE-2014-6512:4.3 / CVE-2014-6457:4 / CVE-2014-6527:2.6 / CVE-2014-6502:2.6 / CVE-2014-6558:2.6 / CVE-2014-3065:6 / CVE-2014-3566:4.3"
},
"CVE-2014-6549": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_feb2015_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_feb2015_advisory.asc",
"download": "See advisory",
"filesets": "Java5.sdk:<5.0.0.590 Java6.sdk:<6.0.0.470 Java7.sdk:<7.0.0.195 Java71.sdk:<7.1.0.75 Java5_64.sdk:<5.0.0.590 Java6_64.sdk:<6.0.0.470 Java7_64.sdk:<7.0.0.195 Java71_64.sdk:<7.1.0.75",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in current releases of IBM SDK Java Technology Edition; issues disclosed in the Oracle Feb 2015 Critical Patch Update vulnerability and two additional Vuln",
"ifixes": "See advisory",
"issued": "20150219",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2014-6549:10 / CVE-2015-0408:10 / CVE-2015-0412:10 / CVE-2015-0403:6.9 / CVE-2015-0406:5.8 / CVE-2015-0407:5 / CVE-2015-0400:5 / CVE-2014-3566:4.3 / CVE-2014-6587:4.3 / CVE-2014-6593:4 / CVE-2014-6591:2.6 / CVE-2014-6585:2.6 / CVE-2014-8891:6.8"
},
"CVE-2014-8730": {
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21692906",
"bulletin": "http://www-01.ibm.com/support/docview.wss?uid=swg21692906",
"download": "http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=Security%2BSystems&product=ibm/Tivoli/Tivoli+Directory+Server&release=6.0.0.73&platform=All&function=all",
"filesets": "ITDS",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Security TLS padding vulnerability affects IBM Tivoli/Security Directory Server",
"ifixes": "See advisory",
"issued": "20150123",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2014-8730:4.3"
},
"CVE-2015-0138": {
"url": "https://aix.software.ibm.com/aix/efixes/security/javajsse_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/javajsse_advisory.asc",
"download": "See advisory",
"filesets": "Java5.sdk:<5.0.0.590 Java6.sdk:<6.0.0.470 Java7.sdk:<7.0.0.195 Java71.sdk:<7.1.0.75 Java5_64.sdk:<5.0.0.590 Java6_64.sdk:<6.0.0.470 Java7_64.sdk:<7.0.0.195 Java71_64.sdk:<7.1.0.75",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "AIX IBM SDK Java JSSE vulnerability",
"ifixes": "See advisory",
"issued": "20150413",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2015-0138:4.3"
},
"CVE-2015-0209": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory13.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory13.asc",
"download": "See advisory",
"filesets": "openssl.base:1.0.1.500-1.0.1.513 openssl.base:0.9.8.401-0.9.8.2504 openssl.base:12.9.8.1100-12.9.8.2504",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple Security vulnerabilities in AIX OpenSSL",
"ifixes": "IV71446m9a.150410.epkg.Z IV71446m9b.150410.epkg.Z IV71446m9c.150410.epkg.Z",
"issued": "20150413",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2015-0209:7.5 / CVE-2015-0286:5 / CVE-2015-0287:7.5 / CVE-2015-0288:5 / CVE-2015-0289:5 / CVE-2015-0292:7.5 / CVE-2015-0293:5"
},
"CVE-2015-0491": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_april2015_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_april2015_advisory.asc",
"download": "See advisory",
"filesets": "Java5.sdk:<5.0.0.600 Java6.sdk:<6.0.0.480 Java7.sdk:<7.0.0.205 Java71.sdk:<7.1.0.85 Java5_64.sdk:<5.0.0.600 Java6_64.sdk:<6.0.0.480 Java7_64.sdk:<7.0.0.205 Java71_64.sdk:<7.1.0.85",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See advisory",
"issued": "20150603",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2015-0491:10 / CVE-2015-0459:10 / CVE-2015-0469:10 / CVE-2015-0458:7.6 / CVE-2015-0480:5.8 / CVE-2015-0488:5 / CVE-2015-0478:4.3 / CVE-2015-0477:4.3 / CVE-2015-0204:4.3 / CVE-2015-0192:6.8 / CVE-2015-0486:5 / CVE-2015-2808:5 / CVE-2015-1916:5 / CVE-2015-1914:4.3 / CVE-2015-0138:4.3"
},
"CVE-2015-2638": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_july2015_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_july2015_advisory.asc",
"download": "See advisory",
"filesets": "Java5.sdk:<5.0.0.615 Java6.sdk:<6.0.0.495 Java7.sdk:<7.0.0.255 Java71.sdk:<7.1.0.135 Java5_64.sdk:<5.0.0.615 Java6_64.sdk:<6.0.0.495 Java7_64.sdk:<7.0.0.255 Java71_64.sdk:<7.1.0.135",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See advisory",
"issued": "20150731",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2015-4000:4.3 / CVE-2015-2638:10 / CVE-2015-4733:10 / CVE-2015-4732:10 / CVE-2015-2590:10 / CVE-2015-4731:10 / CVE-2015-4760:10 / CVE-2015-4736:9.3 / CVE-2015-4748:7.6 / CVE-2015-2664:6.9 / CVE-2015-2632:5 / CVE-2015-2637:5 / CVE-2015-2619:5 / CVE-2015-2621:5 / CVE-2015-2613:5 / CVE-2015-2601:5 / CVE-2015-4749:4.3 / CVE-2015-4729:4 / CVE-2015-2625:2.6 / CVE-2015-1931:2.1"
},
"CVE-2015-2808": {
"url": "https://aix.software.ibm.com/aix/efixes/security/rc4_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/rc4_advisory.asc",
"download": "See advisory",
"filesets": "Java71:<=7.1.0.75 Java7:<=7.0.0.195 Java6:<=6.0.0.470 Java5:<=5.0.0.590 Node.js:<1.1.0.13",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Vulnerability in RC4 stream cipher affects AIX",
"ifixes": "See advisory",
"issued": "20150427",
"updated": "20150429",
"reboot": "no",
"cvss": "CVE-2015-2808:5"
},
"CVE-2015-3194": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory15.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory15.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix15.tar",
"filesets": "openssl.base:1.0.1.500-1.0.1.515 openssl.base:0.9.8.401-0.9.8.2506 openssl.base:12.9.8.1100-12.9.8.2506",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Vulnerabilities in OpenSSL impact AIX",
"ifixes": "101_ifix.151218.epkg.Z 098_ifix.151218.epkg.Z 1298_ifix.151218.epkg.Z",
"issued": "20160115",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2015-3194:5.3 / CVE-2015-3195:5.3 / CVE-2015-3196:3.7"
},
"CVE-2015-3197": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory17.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory17.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix17.tar",
"filesets": "openssl.base:0.9.8.401-0.9.8.2506 openssl.base:1.0.1.500-1.0.1.515 openssl.base:12.9.8.1100-12.9.8.2506",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Vulnerabilities in OpenSSL affect AIX",
"ifixes": "IV81287m9b.160217.epkg.Z IV81287m9a.160217.epkg.Z IV81287m9c.160217.epkg.Z",
"issued": "20160226",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2015-3197:5.4 / CVE-2015-4000:4.3"
},
"CVE-2015-4000": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory14.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory14.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix14.tar",
"filesets": "openssl.base:1.0.1.500-1.0.1.514 openssl.base:0.9.8.401-0.9.8.2505 openssl.base:12.9.8.1100-12.9.8.2505",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple Security vulnerabilities in AIX OpenSSL",
"ifixes": "IV74809s9a.150710.epkg.Z IV75570m9a.150729.epkg.Z IV74809s9b.150710.epkg.Z IV74809s9c.150710.epkg.Z",
"issued": "20150715",
"updated": "20150812",
"reboot": "no",
"cvss": "CVE-2015-4000:4.3 / CVE-2015-1788:5 / CVE-2015-1789:5 / CVE-2015-1790:5 / CVE-2015-1791:5 / CVE-2015-1792:5 / CVE-2014-8176:6.5"
},
"CVE-2015-4844": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_oct2015_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_oct2015_advisory.asc",
"download": "See advisory",
"filesets": "Java5.sdk:<5.0.0.620 Java6.sdk:<6.0.0.510 Java7.sdk:<7.0.0.270 Java71.sdk:<7.1.0.150 Java8.sdk:<8.0.0.70 Java5_64.sdk:<5.0.0.620 Java6_64.sdk:<6.0.0.510 Java7_64.sdk:<7.0.0.270 Java71_64.sdk:<7.1.0.150 Java8_64.sdk:<8.0.0.70",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See advisory",
"issued": "20151210",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2015-4844:10 / CVE-2015-4843:10 / CVE-2015-4805:10 / CVE-2015-4860:10 / CVE-2015-4883:10 / CVE-2015-4835:10 / CVE-2015-4810:6.9 / CVE-2015-4806:6.4 / CVE-2015-4871:5.8 / CVE-2015-4902:5 / CVE-2015-4872:5 / CVE-2015-4911:5 / CVE-2015-4893:5 / CVE-2015-4840:5 / CVE-2015-4842:5 / CVE-2015-4882:5 / CVE-2015-4903:5 / CVE-2015-4803:5 / CVE-2015-4734:5 / CVE-2015-5006:4.6"
},
"CVE-2015-5300": {
"url": "https://aix.software.ibm.com/aix/efixes/security/ntp_advisory5.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/ntp_advisory5.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/ntp_fix5.tar",
"filesets": "ntp.rte:6.1.6.0-6.1.6.4 ntp.rte:7.1.0.0-7.1.0.4",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Vulnerability in NTPv4 affects AIX",
"ifixes": "IV81129m6a.160204.epkg.Z IV81130m5a.160204.epkg.Z",
"issued": "20160222",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2015-5300:4.3"
},
"CVE-2015-5352": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory5.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory5.asc",
"download": "https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp",
"filesets": "openssh.base.client:4.0.0.5200-6.0.0.6200 openssh.base.server:4.0.0.5200-6.0.0.6200",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "AIX OpenSSH Vulnerability",
"ifixes": "OpenSSH_6.0.0.6110.tar.Z OpenSSH_6.0.0.6201.tar.Z DEPRECATED::6201_mfix",
"issued": "20150904",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2015-5352:4.3"
},
"CVE-2015-6563": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory6.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory6.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssh_fix6.tar",
"filesets": "openssh.base.client:4.0.0.5200-6.0.0.6201 openssh.base.server:4.0.0.5200-6.0.0.6201",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "AIX OpenSSH Vulnerability",
"ifixes": "6110_ifix.151009.epkg.Z 6201_ifix.151009.epkg.Z DEPRECATED::6201_mfix",
"issued": "20151019",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2015-6563:4 / CVE-2015-6564:7.4"
},
"CVE-2015-7421": {
"url": "http://www.ibm.com/support/docview.wss?uid=isg3T1023277",
"bulletin": "http://www.ibm.com/support/docview.wss?uid=isg3T1023277",
"download": "See advisory",
"filesets": "ISDS:6.4 ISDS:6.3.1 ITDS:6.3 GSKit:<8.0.50.53",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Vulnerabilities in GSKit affect Tivoli Directory Server/IBM Security Directory Server on AIX",
"ifixes": "See advisory",
"issued": "20151221",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2015-7420:3.7 / CVE-2015-7421:3.7"
},
"CVE-2015-7575": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory16.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory16.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix16.tar",
"filesets": "openssl.base:1.0.1.500-1.0.1.515",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Vulnerability in MD5 Signature and Hash Algorithm affects OpenSSL on AIX",
"ifixes": "101a_fix.160129.epkg.Z",
"issued": "20160129",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2015-7575:7.1"
},
"CVE-2015-7973": {
"url": "https://aix.software.ibm.com/aix/efixes/security/ntp_advisory6.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/ntp_advisory6.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/ntp_fix6.tar",
"filesets": "ntp.rte:6.1.6.0-6.1.6.5 ntp.rte:7.1.0.0-7.1.0.5",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Vulnerabilities in NTP affect AIX",
"ifixes": "IV83992s5a.160602.epkg.Z IV83983s5a.160602.epkg.Z",
"issued": "20160608",
"updated": "20160609",
"reboot": "no",
"cvss": "CVE-2015-7973:5.4 / CVE-2015-7977:5.3 / CVE-2015-7979:6.5 / CVE-2015-8158:5.3 / CVE-2015-8139:5.3 / CVE-2015-8140:5.3"
},
"CVE-2015-7974": {
"url": "https://aix.software.ibm.com/aix/efixes/security/ntp_advisory7.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/ntp_advisory7.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/ntp_fix7.tar",
"filesets": "ntp.rte:6.1.6.0-6.1.6.7 ntp.rte:7.1.0.0-7.1.0.7",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Vulnerabilities in NTP affect AIX",
"ifixes": "IV87278s7a.160901.epkg.Z IV87279s7a.160901.epkg.Z",
"issued": "20160906",
"updated": "20160913",
"reboot": "no",
"cvss": "CVE-2015-7974:5.3 / CVE-2016-1550:4.0 / CVE-2016-1551:3.7 / CVE-2016-2517:4.2 / CVE-2016-2518:2.0 / CVE-2016-2519:4.2 / CVE-2016-1547:3.7 / CVE-2016-4957:7.5 / CVE-2016-4953:3.7 / CVE-2016-4954:3.7 / CVE-2016-4955:3.7"
},
"CVE-2015-8325": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory9.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory9.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssh_fix9.tar",
"filesets": "openssh.base.client:4.0.0.5200-6.0.0.6202 openssh.base.server:4.0.0.5200-6.0.0.6202",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "AIX OpenSSH Vulnerability",
"ifixes": "6202_ifix.160830.epkg.Z",
"issued": "20160906",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2015-8325:7.4 / CVE-2016-6210:4.3 / CVE-2016-6515:7.5"
},
"CVE-2015-8472": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_jan2016_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_jan2016_advisory.asc",
"download": "See advisory",
"filesets": "Java6.sdk:<6.0.0.535 Java7.sdk:<7.0.0.320 Java71.sdk:<7.1.0.200 Java8.sdk:<8.0.0.120 Java6_64.sdk:<6.0.0.535 Java7_64.sdk:<7.0.0.320 Java71_64.sdk:<7.1.0.200 Java8_64.sdk:<8.0.0.120",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See advisory",
"issued": "20160224",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2015-8472:6.3 / CVE-2016-0475:5.8 / CVE-2016-0466:5.0 / CVE-2016-0402:5.0 / CVE-2015-7575:7.1 / CVE-2016-0448:4.0 / CVE-2016-0494:10.0 / CVE-2016-0483:10.0 / CVE-2015-5041:4.8 / CVE-2015-7981:5.3 / CVE-2015-8126:7.8 / CVE-2015-8540:9.8"
},
"CVE-2016-0201": {
"url": "http://www.ibm.com/support/docview.wss?uid=isg3T1023296",
"bulletin": "http://www.ibm.com/support/docview.wss?uid=isg3T1023296",
"download": "See advisory",
"filesets": "ISDS:6.4 ISDS:6.3.1 ITDS:6.3 GSKit:<8.0.50.57",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Vulnerability in GSKit affects Tivoli Directory Server/IBM Security Directory Server on AIX",
"ifixes": "See advisory",
"issued": "20160127",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2016-0201:5.9"
},
"CVE-2016-0777": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory7.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory7.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssh_fix7.tar",
"filesets": "openssh.base.client:4.0.0.5200-6.0.0.6201 openssh.base.server:4.0.0.5200-6.0.0.6201",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "AIX OpenSSH Vulnerability",
"ifixes": "IV80743m9a.160127.epkg.Z IV80743m9b.160127.epkg.Z DEPRECATED::6201_mfix",
"issued": "20160129",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2016-0777:6.5 / CVE-2016-0778:5.0"
},
"CVE-2016-0800": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory18.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory18.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix18.tar",
"filesets": "openssl.base:0.9.8.401-0.9.8.2506 openssl.base:1.0.1.500-1.0.1.515 openssl.base:1.0.2.500-1.0.2.500 openssl.base:12.9.8.1100-12.9.8.2506",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in OpenSSL affect AIX",
"ifixes": "IV83169m9b.160401.epkg.Z IV83169m9a.160401.epkg.Z IV83169s9d.160401.epkg.Z IV83169m9c.160401.epkg.Z",
"issued": "20160404",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2016-0800:7.4 / CVE-2016-0799:3.7 / CVE-2016-0798:7.1 / CVE-2016-0797:3.7 / CVE-2016-0705:3.7 / CVE-2016-0702:2.9"
},
"CVE-2016-2176": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory20.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory20.asc",
"download": "See advisory",
"filesets": "openssl.base:0.9.8.401-0.9.8.2506 openssl.base:1.0.1.500-1.0.1.515 openssl.base:1.0.2.500 openssl.base:12.9.8.1100-12.9.8.2506 openssl.base:20.11.101.500",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Vulnerabilities in OpenSSL affect AIX",
"ifixes": "See advisory",
"issued": "20160712",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2016-2176:5.3 / CVE-2016-2109:5.3 / CVE-2016-2108:8.1 / CVE-2016-2106:5.6 / CVE-2016-2105:5.6"
},
"CVE-2016-2177": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory21.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory21.asc",
"download": "See advisory",
"filesets": "openssl.base:1.0.1.500-1.0.1.516 openssl.base:1.0.2.500-1.0.2.800 openssl.base:20.11.101.500-20.11.101.501",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Vulnerabilities in OpenSSL affect AIX",
"ifixes": "See advisory",
"issued": "20161114",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2016-2177:5.9 / CVE-2016-2178:5.3 / CVE-2016-2179:5.3 / CVE-2016-2180:7.5 / CVE-2016-2181:5.3 / CVE-2016-2182:4.3 / CVE-2016-2183:3.7 / CVE-2016-6302:5.3 / CVE-2016-6303:5.3 / CVE-2016-6304:7.5 / CVE-2016-2016-6306:4.3 / CVE-2016-7052:5.3"
},
"CVE-2016-2842": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory19.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory19.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix18.tar",
"filesets": "openssl.base:0.9.8.401-0.9.8.2506 openssl.base:1.0.1.500-1.0.1.515 openssl.base:1.0.2.500-1.0.2.500 openssl.base:12.9.8.1100-12.9.8.2506",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Vulnerability in OpenSSL affects AIX",
"ifixes": "IV83169m9b.160401.epkg.Z IV83169m9a.160401.epkg.Z IV83169s9d.160401.epkg.Z IV83169m9c.160401.epkg.Z",
"issued": "20160418",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2016-2842:7.5"
},
"CVE-2016-3115": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory8.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory8.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssh_fix8.tar",
"filesets": "openssh.base.client:4.0.0.5200-6.0.0.6201 openssh.base.server:4.0.0.5200-6.0.0.6201",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Vulnerabilities in OpenSSH affect AIX",
"ifixes": "IV84698m9b.160513.epkg.Z IV84698m9a.160513.epkg.Z DEPRECATED::6201_mfix",
"issued": "20160503",
"updated": "20160513",
"reboot": "no",
"cvss": "CVE-2016-3115:8.8 / CVE-2016-1908:4.3"
},
"CVE-2016-3443": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_april2016_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_april2016_advisory.asc",
"download": "See advisory",
"filesets": "Java6.sdk:<6.0.0.561 Java7.sdk:<7.0.0.370 Java71.sdk:<7.1.0.250 Java8.sdk:<8.0.0.130 Java6_64.sdk:<6.0.0.560 Java7_64.sdk:<7.0.0.370 Java71_64.sdk:<7.1.0.250 Java8_64.sdk:<8.0.0.130",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See advisory",
"issued": "20160506",
"updated": "20160518",
"reboot": "no",
"cvss": "CVE-2016-3443:10.0 / CVE-2016-0687:10.0 / CVE-2016-0686:10.0 / CVE-2016-3427:10.0 / CVE-2016-3449:7.6 / CVE-2016-3422:5.0 / CVE-2016-3426:4.3 / CVE-2016-0264:5.6 / CVE-2016-0363:8.1 / CVE-2016-0376:8.1"
},
"CVE-2016-3598": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_july2016_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_july2016_advisory.asc",
"download": "See advisory",
"filesets": "Java6.sdk:<6.0.0.585 Java7.sdk:<7.0.0.450 Java71.sdk:<7.1.0.350 Java8.sdk:<8.0.0.310 Java6_64.sdk:<6.0.0.585 Java7_64.sdk:<7.0.0.450 Java71_64.sdk:<7.1.0.350 Java8_64.sdk:<8.0.0.310",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See advisory",
"issued": "20160819",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2016-3598:9.6 / CVE-2016-3511:7.7 / CVE-2016-3485:2.9"
},
"CVE-2016-5582": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_oct2016_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_oct2016_advisory.asc",
"download": "See advisory",
"filesets": "Java6.sdk:<6.0.0.635 Java7.sdk:<7.0.0.560 Java71.sdk:<7.1.0.360 Java8.sdk:<8.0.0.321 Java6_64.sdk:<6.0.0.635 Java7_64.sdk:<7.0.0.560 Java71_64.sdk:<7.1.0.360 Java8_64.sdk:<8.0.0.321",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See advisory",
"issued": "20161221",
"updated": "20161223",
"reboot": "no",
"cvss": "CVE-2016-5582:9.6 / CVE-2016-5568:9.6 / CVE-2016-5556:9.6 / CVE-2016-5573:8.3 / CVE-2016-5597:5.9 / CVE-2016-5554:4.3 / CVE-2016-5542:3.1"
},
"CVE-2016-8858": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory10.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory10.asc",
"download": " ",
"filesets": "openssh.base.client:4.0.0.5200-6.0.0.6203 openssh.base.server:4.0.0.5200-6.0.0.6203",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Vulnerabilities in OpenSSH affect AIX.",
"ifixes": "6203_ifix.170124.epkg.Z",
"issued": "20170205",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2016-8858:5.3 / CVE-2016-10009:6.3 / CVE-2016-10011:5.5 / CVE-2016-10012:5.9"
},
"CVE-2017-10345": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_oct2017_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_oct2017_advisory.asc",
"download": "See advisory",
"filesets": "Java6:<6.0.0.655 Java6.jre:<6.0.0.655 Java6_64.jre:<6.0.0.655 Java6_64.sdk:<6.0.0.655 Java6.sdk:<6.0.0.655 Java7:<7.0.0.615 Java7_64.jre:<7.0.0.615 Java7.jre:<7.0.0.615 Java7_64.sdk:<7.0.0.615 Java7.sdk:<7.0.0.615 Java7.1.jre:<7.1.0.415 Java7.1_64.jre:<7.1.0.415 Java7.1:<7.1.0.415 Java7.1.sdk:<7.1.0.415 Java7.1_64.sdk:<7.1.0.415 Java8:<8.0.0.505 Java8.jre:<8.0.0.505 Java8_64.jr",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "There are multiple vulnerabilities in IBM SDK Java Technology Edition",
"ifixes": "See advisory",
"issued": "20171207",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2017-10345:3.1 / CVE-2017-10295:4 / CVE-2017-10281:5.3 / CVE-2017-10350:5.3 / CVE-2017-10347:5.3 / CVE-2017-10349:5.3 / CVE-2017-10348:5.3 / CVE-2017-10357:5.3 / CVE-2017-10355:5.3 / CVE-2017-10356:6.2 / CVE-2017-10309:7.1 / CVE-2017-10388:7.5 / CVE-2017-10285:9.6 / CVE-2017-10346:9.6 / CVE-2017-10165:6.5"
},
"CVE-2017-1376": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_july2017_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_july2017_advisory.asc",
"download": "See advisory",
"filesets": "Java6:<6.0.0.650 Java6.jre:<6.0.0.650 Java6_64.jre:<6.0.0.650 Java6_64.sdk:<6.0.0.650 Java6.sdk:<6.0.0.650 Java7:<7.0.0.610 Java7_64.jre:<7.0.0.610 Java7.jre:<7.0.0.610 Java7_64.sdk:<7.0.0.610 Java7.sdk:<7.0.0.610 Java7.1.jre:<7.1.0.410 Java7.1_64.jre:<7.1.0.410 Java7.1:<7.1.0.410 Java7.1.sdk:<7.1.0.410 Java7.1_64.sdk:<7.1.0.410 Java8:<8.0.0.410 Java8.jre:<8.0.0.410 Java8_64.jr",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "There are multiple vulnerabilities in IBM SDK Java Technology Edition",
"ifixes": "See advisory",
"issued": "20170901",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2017-1376:9.8 / CVE-2017-1541:7.3 / CVE-2017-10053:5.3 / CVE-2017-10067:7.5 / CVE-2017-10078:8.1 / CVE-2017-10087:9.6 / CVE-2017-10089:9.6 / CVE-2017-10090:9.6 / CVE-2017-10096:9.6 / CVE-2017-10101:9.6 / CVE-2017-10102:9 / CVE-2017-10105:4.3 / CVE-2017-10107:9.6 / CVE-2017-10108:5.3 / CVE-2017-10109:5.3 / CVE-2017-10110:9.6 / CVE-2017-10115:7.5 / CVE-2017-10116:8.3 / CVE-2017-10125:7.1 / CVE-2017-10243:6.5"
},
"CVE-2017-1541": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java6_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java6_advisory.asc",
"download": "See advisory",
"filesets": "Java6:6.0.0.215-6.0.0.645 Java6.jre:6.0.0.215-6.0.0.645 Java6_64.jre:6.0.0.215-6.0.0.645 Java6_64.sdk:6.0.0.215-6.0.0.645 Java6.sdk:6.0.0.215-6.0.0.645 ",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "There is a vulnerability in the AIX IBM Java 6 SDK installp and updatep packages",
"ifixes": "See advisory",
"issued": "20171002",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2017-1541:7.3"
},
"CVE-2017-15906": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory11.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory11.asc",
"download": "https://www-01.ibm.com/marketing/iwm/iwm/web/reg/download.do?source=aixbp&lang=en_US&S_PKG=openssh&cp=UTF-8",
"filesets": "openssh.base.client:4.0.0.5200-7.1.102.1100 openssh.base.server:4.0.0.5200-7.1.102.1100",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Vulnerabilities in OpenSSH affect AIX.",
"ifixes": "openssh-7.5.102.1100.tar.Z",
"issued": "20171114",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2017-15906:6.5"
},
"CVE-2017-3289": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_jan2017_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_jan2017_advisory.asc",
"download": "See advisory",
"filesets": "Java6:<6.0.0.641 Java7:<7.0.0.601 Java7.1:<7.1.0.401 Java8.sdk:<8.0.0.401",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "There are multiple vulnerabilities in IBM SDK Java Technology Edition",
"ifixes": "See advisory",
"issued": "20170405",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2017-3289:9.6 / CVE-2017-3272:9.6 / CVE-2017-3241:9 / CVE-2017-3253:7.5 / CVE-2016-5546:7.5 / CVE-2016-5548:6.5 / CVE-2016-5549:6.5 / CVE-2017-3252:5.8 / CVE-2016-5547:5.3 / CVE-2016-5552:5.3 / CVE-2017-3261:4.3 / CVE-2017-3231:4.3 / CVE-2017-3259:3.7 / CVE-2016-2183:3.7"
},
"CVE-2017-3514": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_apr2017_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_apr2017_advisory.asc",
"download": "See advisory",
"filesets": "Java6:<6.0.0.645 Java6.jre:<6.0.0.645 Java6_64.jre:<6.0.0.645 Java6_64.sdk:<6.0.0.645 Java6.sdk:<6.0.0.645 Java7:<7.0.0.605 Java7_64.jre:<7.0.0.605 Java7.jre:<7.0.0.605 Java7_64.sdk:<7.0.0.605 Java7.sdk:<7.0.0.605 Java7.1.jre:<7.1.0.405 Java7.1_64.jre:<7.1.0.405 Java7.1:<7.1.0.405 Java7.1.sdk:<7.1.0.405 Java7.1_64.sdk:<7.1.0.405 Java8:<8.0.0.406 Java8.jre:<8.0.0.406 Java8_64.jr",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "There are multiple vulnerabilities in IBM SDK Java Technology Edition",
"ifixes": "See advisory",
"issued": "20170621",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2017-3514:8.3 / CVE-2017-3512:8.3 / CVE-2017-3511:7.7 / CVE-2017-3509:4.2 / CVE-2017-3544:3.7 / CVE-2017-3533:3.7 / CVE-2017-3539:3.1 / CVE-2017-1289:8.2 / CVE-2016-9840:3.3 / CVE-2016-9841:3.3 / CVE-2016-9842:3.3 / CVE-2016-9843:3.3"
},
"CVE-2017-3731": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory23.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory23.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix23.tar",
"filesets": "openssl.base:1.0.2.500-1.0.2.1000 openssl.base:20.13.102.1000-20.13.102.1000",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "There is a vulnerability in OpenSSL used by AIX",
"ifixes": "102j_ifix.170207.epkg.Z fips_102j.170207.epkg.Z",
"issued": "20170217",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2017-3731:5.3"
},
"CVE-2017-3735": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory24.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory24.asc",
"download": "https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=aixbp&lang=en_US&S_PKG=openssl&cp=UTF-8",
"filesets": "openssl.base:1.0.2.500-1.0.2.1100 openssl.base:20.13.102.1000-20.13.102.1100",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Vulnerability in OpenSSL affects AIX",
"ifixes": "openssl-1.0.2.1300.tar.Z openssl-20.13.102.1300.tar.Z",
"issued": "20171214",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2017-3735:5.3"
},
"CVE-2017-3737": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory25.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory25.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix25.tar",
"filesets": "openssl.base:1.0.2.500-1.0.2.1300 openssl.base:20.13.102.1000-20.13.102.1300",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Vulnerability in OpenSSL affects AIX (CVE-2017-3737)",
"ifixes": "102m_ifix.180105.epkg.Z fips_102m.180105.epkg.Z",
"issued": "20180129",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2017-3737:5.9"
},
"CVE-2018-0732": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory28.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory28.asc",
"download": "http://www14.software.ibm.com/webapp/set2/sas/f/aix.efixmgmt/home.html",
"filesets": "openssl.base:1.0.2.500-1.0.2.1500 openssl.base:20.13.102.1000-20.13.102.1500",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Vulnerability in OpenSSL affects AIX (CVE-2018-0732)",
"ifixes": "102oa_ifix.180906.epkg.Z fips_102oa.180910.epkg.Z",
"issued": "20180919",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2018-0732:5.3"
},
"CVE-2018-0734": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory29.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory29.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix29.tar",
"filesets": "openssl.base:1.0.2.500-1.0.2.1600 openssl.base:20.13.102.1000-20.16.102.1600",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "There are vulnerabilities in OpenSSL used by AIX.",
"ifixes": "102p_fix.181127.epkg.Z fips_102p.181127.epkg.Z",
"issued": "20181211",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2018-0734:3.7 / CVE-2018-5407:5.1"
},
"CVE-2018-0737": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory27.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory27.asc",
"download": "https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=aixbp",
"filesets": "openssl.base:1.0.2.500-1.0.2.1300 openssl.base:20.13.102.1000-20.13.102.1300",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Vulnerability in OpenSSL affects AIX (CVE-2018-0737)",
"ifixes": "openssl-1.0.2.1500.tar.Z openssl-20.13.102.1500.tar.Z",
"issued": "20180702",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2018-0737:3.3"
},
"CVE-2018-0739": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory26.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory26.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix26.tar",
"filesets": "openssl.base:1.0.2.500-1.0.2.1300 openssl.base:20.13.102.1000-20.13.102.1300",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Vulnerability in OpenSSL affects AIX (CVE-2018-0739)",
"ifixes": "102ma_ifix.180410.epkg.Z fips_102ma.180410.epkg.Z",
"issued": "20180501",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2018-0739:5.3"
},
"CVE-2018-1388": {
"url": "https://aix.software.ibm.com/aix/efixes/security/itds_advisory2.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/itds_advisory2.asc",
"download": "See Bulletin",
"filesets": "ITDS:6.2.0.0-6.2.0.56 ITDS:6.3.0.0-6.3.0.49 ITDS:6.3.1.0-6.3.1.24 ITDS:6.4.0.0-6.4.0.16",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Vulnerabilities in GSKit affect IBM Tivoli Directory Server and IBM Security Directory Server for AIX",
"ifixes": "ITDS",
"issued": "20181214",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2018-1388:9.1 / CVE-2018-1427:6.2 / CVE-2018-1426:7.4 / CVE-2016-0702:2.9 / CVE-2018-1447:5.1"
},
"CVE-2018-1517": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_july2018_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_july2018_advisory.asc",
"download": "See advisory",
"filesets": "Java7:<7.0.0.630 Java7_64.jre:<7.0.0.630 Java7.jre:<7.0.0.630 Java7_64.sdk:<7.0.0.630 Java7.sdk:<7.0.0.630 Java7.1.jre:<7.1.0.430 Java7.1_64.jre:<7.1.0.430 Java7.1:<7.1.0.430 Java7.1.sdk:<7.1.0.430 Java7.1_64.sdk:<7.1.0.430 Java8:<8.0.0.521 Java8.jre:<8.0.0.521 Java8_64.jre:<8.0.0.521 Java8.sdk:<8.0.0.521 Java8_64.sdk:<8.0.0.521",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See advisory",
"issued": "20180919",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2018-1517:5.9 / CVE-2018-1656:7.4 / CVE-2018-2973:5.9 / CVE-2018-2952:3.7 / CVE-2018-2940:4.3 / CVE-2018-2964:8.3 / CVE-2018-12539:8.4"
},
"CVE-2018-15473": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory12.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory12.asc",
"download": "https://www14.software.ibm.com/webapp/iwm/web/reg/download.do?source=aixbp&lang=en_US&S_PKG=openssh&cp=UTF-8",
"filesets": "openssh.base.client:4.0.0.5200-7.5.102.1500 openssh.base.server:4.0.0.5200-7.5.102.1500",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Vulnerabilities in OpenSSH affect AIX.",
"ifixes": "15473_fix.180919.epkg.Z",
"issued": "20181024",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2018-15473:5.3"
},
"CVE-2018-1890": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_jan2019_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_jan2019_advisory.asc",
"download": "See advisory",
"filesets": "Java7:<7.0.0.640 Java7_64.jre:<7.0.0.640 Java7.jre:<7.0.0.640 Java7_64.sdk:<7.0.0.640 Java7.sdk:<7.0.0.640 Java7.1.jre:<7.1.0.440 Java7.1_64.jre:<7.1.0.440 Java7.1:<7.1.0.440 Java7.1.sdk:<7.1.0.440 Java7.1_64.sdk:<7.1.0.440 Java8:<8.0.0.530 Java8.jre:<8.0.0.530 Java8_64.jre:<8.0.0.530 Java8.sdk:<8.0.0.530 Java8_64.sdk:<8.0.0.530",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See advisory",
"issued": "20180416",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2018-1890:5.6 / CVE-2018-12549:9.8 / CVE-2018-12547:9.8 / CVE-2019-2422:3.1 / CVE-2019-2449:3.1 / CVE-2019-2426:3.7 / CVE-2018-11212:3.3"
},
"CVE-2018-25032": {
"url": "https://aix.software.ibm.com/aix/efixes/security/zlib_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/zlib_advisory.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/zlib_fix.tar ",
"filesets": "rpm.rte:4.15.1.2000-4.15.1.2005 rpm.rte:4.9.1.3-4.15.1.1005 zlibNX.rte:7.2.4.0-7.2.4.7 zlibNX.rte:7.3.0.0-7.3.0.1",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to denial of service due to zlib and zlibNX",
"ifixes": "IJ41754s4a.220829.epkg.Z IJ42198s2a.220829.epkg.Z rpm.rte.4.15.1.1006 rpm.rte.4.15.1.2006",
"issued": "20220928",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2018-25032:7.5"
},
"CVE-2018-2579": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_jan2018_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_jan2018_advisory.asc",
"download": "See advisory",
"filesets": "Java7:<7.0.0.620 Java7_64.jre:<7.0.0.620 Java7.jre:<7.0.0.620 Java7_64.sdk:<7.0.0.620 Java7.sdk:<7.0.0.620 Java7.1.jre:<7.1.0.420 Java7.1_64.jre:<7.1.0.420 Java7.1:<7.1.0.420 Java7.1.sdk:<7.1.0.420 Java7.1_64.sdk:<7.1.0.420 Java8:<8.0.0.510 Java8.jre:<8.0.0.510 Java8_64.jre:<8.0.0.510 Java8.sdk:<8.0.0.510 Java8_64.sdk:<8.0.0.510",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See advisory",
"issued": "20180501",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2018-2579:3.7 / CVE-2018-2588:4.3 / CVE-2018-2663:4.3 / CVE-2018-2677:4.3 / CVE-2018-2678:4.3 / CVE-2018-2602:4.5 / CVE-2018-2599:4.8 / CVE-2018-2603:5.3 / CVE-2018-2657:5.3 / CVE-2018-2618:5.9 / CVE-2018-2641:6.1 / CVE-2018-2582:6.5 / CVE-2018-2634:6.8 / CVE-2018-2637:7.4 / CVE-2018-2633:8.3 / CVE-2018-2638:8.3 / CVE-2018-2639:8.3 / CVE-2018-1417:8.1"
},
"CVE-2018-2800": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_apr2018_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_apr2018_advisory.asc",
"download": "See advisory",
"filesets": "Java7:<7.0.0.625 Java7_64.jre:<7.0.0.625 Java7.jre:<7.0.0.625 Java7_64.sdk:<7.0.0.625 Java7.sdk:<7.0.0.625 Java7.1.jre:<7.1.0.425 Java7.1_64.jre:<7.1.0.425 Java7.1:<7.1.0.425 Java7.1.sdk:<7.1.0.425 Java7.1_64.sdk:<7.1.0.425 Java8:<8.0.0.515 Java8.jre:<8.0.0.515 Java8_64.jre:<8.0.0.515 Java8.sdk:<8.0.0.515 Java8_64.sdk:<8.0.0.515",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See advisory",
"issued": "20180612",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2018-2800:4.2 / CVE-2018-2795:5.3 / CVE-2018-2796:5.3 / CVE-2018-2797:5.3 / CVE-2018-2798:5.3 / CVE-2018-2799:5.3 / CVE-2018-2783:7.4 / CVE-2018-2794:7.7 / CVE-2018-2790:3.1"
},
"CVE-2018-3139": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_oct2018_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_oct2018_advisory.asc",
"download": "See advisory",
"filesets": "Java7:<7.0.0.635 Java7_64.jre:<7.0.0.635 Java7.jre:<7.0.0.635 Java7_64.sdk:<7.0.0.635 Java7.sdk:<7.0.0.635 Java7.1.jre:<7.1.0.435 Java7.1_64.jre:<7.1.0.435 Java7.1:<7.1.0.435 Java7.1.sdk:<7.1.0.435 Java7.1_64.sdk:<7.1.0.435 Java8:<8.0.0.525 Java8.jre:<8.0.0.525 Java8_64.jre:<8.0.0.525 Java8.sdk:<8.0.0.525 Java8_64.sdk:<8.0.0.525",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See advisory",
"issued": "20181214",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2018-3139:3.1 / CVE-2018-3136:3.4 / CVE-2018-13785:5.5 / CVE-2018-3214:5.3 / CVE-2018-3180:5.6 / CVE-2018-3149:8.3 / CVE-2018-3169:8.3 / CVE-2018-3183:9.0"
},
"CVE-2019-10245": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_apr2019_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_apr2019_advisory.asc",
"download": "See advisory",
"filesets": "Java7:<7.0.0.645 Java7_64.jre:<7.0.0.645 Java7.jre:<7.0.0.645 Java7_64.sdk:<7.0.0.645 Java7.sdk:<7.0.0.645 Java7.1.jre:<7.1.0.445 Java7.1_64.jre:<7.1.0.445 Java7.1:<7.1.0.445 Java7.1.sdk:<7.1.0.445 Java7.1_64.sdk:<7.1.0.445 Java8:<8.0.0.535 Java8.jre:<8.0.0.535 Java8_64.jre:<8.0.0.535 Java8.sdk:<8.0.0.535 Java8_64.sdk:<8.0.0.535",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See advisory",
"issued": "20190628",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2019-10245:7.5 / CVE-2019-2684:5.9 / CVE-2019-2602:7.5 / CVE-2019-2697:8.1 / CVE-2019-2698:8.1"
},
"CVE-2019-11775": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_july2019_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_july2019_advisory.asc",
"download": "See advisory",
"filesets": "Java7:<7.0.0.650 Java7_64.jre:<7.0.0.650 Java7.jre:<7.0.0.650 Java7_64.sdk:<7.0.0.650 Java7.sdk:<7.0.0.650 Java7.1.jre:<7.1.0.450 Java7.1_64.jre:<7.1.0.450 Java7.1:<7.1.0.450 Java7.1.sdk:<7.1.0.450 Java7.1_64.sdk:<7.1.0.450 Java8:<8.0.0.540 Java8.jre:<8.0.0.540 Java8_64.jre:<8.0.0.540 Java8.sdk:<8.0.0.540 Java8_64.sdk:<8.0.0.540",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See advisory",
"issued": "20191009",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2019-11775:8.4 / CVE-2019-11772:8.4 / CVE-2019-2766:3.1 / CVE-2019-2786:3.4 / CVE-2019-2816:4.8 / CVE-2019-2762:5.3 / CVE-2019-2769:5.3 / CVE-2019-7317:6.5 / CVE-2019-4473:8.4 / CVE-2019-11771:8.4"
},
"CVE-2019-1547": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory31.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory31.asc",
"download": "https://www-01.ibm.com/marketing/iwm/iwm/web/pickUrxNew.do?source=aixbp&S_PKG=openssl",
"filesets": "openssl.base:1.0.2.500-1.0.2.1801 openssl.base:20.13.102.1000-20.16.102.1801",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "There is a vulnerability in OpenSSL used by AIX.",
"ifixes": "openssl-1.0.2.2000.tar.Z openssl-20.16.102.2000.tar.Z",
"issued": "20191126",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2019-1547:5.5 / CVE-2019-1563:3.7"
},
"CVE-2019-1559": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory30.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory30.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix30.tar",
"filesets": "openssl.base:1.0.2.500-1.0.2.1601 openssl.base:20.13.102.1000-20.16.102.1600",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "There is a vulnerability in OpenSSL used by AIX.",
"ifixes": "102pa_mfix.190318.epkg.Z fips_102pa.190318.epkg.Z",
"issued": "20190416",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2019-1559:5.8"
},
"CVE-2019-2989": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_jan2020_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_jan2020_advisory.asc",
"download": "See advisory",
"filesets": "Java7:<7.0.0.660 Java7_64.jre:<7.0.0.660 Java7.jre:<7.0.0.660 Java7_64.sdk:<7.0.0.660 Java7.sdk:<7.0.0.660 Java7.1.jre:<7.1.0.460 Java7.1_64.jre:<7.1.0.460 Java7.1:<7.1.0.460 Java7.1.sdk:<7.1.0.460 Java7.1_64.sdk:<7.1.0.460 Java8:<8.0.0.605 Java8.jre:<8.0.0.605 Java8_64.jre:<8.0.0.605 Java8.sdk:<8.0.0.605 Java8_64.sdk:<8.0.0.605",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See advisory",
"issued": "20200217",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2019-2989:6.8 / CVE-2019-2958:5.9 / CVE-2019-2975:4.8 / CVE-2019-2999:4.7 / CVE-2019-2996:4.2 / CVE-2019-2992:3.7 / CVE-2019-2988:3.7 / CVE-2019-2983:3.7 / CVE-2019-2981:3.7 / CVE-2019-2978:3.7 / CVE-2019-2973:3.7 / CVE-2019-2962:3.7 / CVE-2019-2964:3.7 / CVE-2019-2945:3.1 / CVE-2019-2933:3.1 / CVE-2019-17631:8.4 / CVE-2020-2604:8.1 / CVE-2020-2593:4.8 / CVE-2020-2659:3.7 / CVE-2020-2583:3.7"
},
"CVE-2019-6109": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory13.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory13.asc",
"download": "https://www-01.ibm.com/marketing/iwm/iwm/web/pickUrxNew.do?source=aixbp&S_PKG=openssh",
"filesets": "openssh.base.client:4.0.0.5200-7.5.102.1600 openssh.base.server:4.0.0.5200-7.5.102.1600",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Vulnerabilities in OpenSSH affect AIX.",
"ifixes": "OpenSSH_7.5.102.1800.tar.Z",
"issued": "20190716",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2019-6109:3.1 / CVE-2019-6110:3.1 / CVE-2019-6111:5.3 / CVE-2018-20685:7.5"
},
"CVE-2020-14621": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_july2020_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_july2020_advisory.asc",
"download": "See advisory",
"filesets": "Java7:<7.0.0.670 Java7_64.jre:<7.0.0.670 Java7.jre:<7.0.0.670 Java7_64.sdk:<7.0.0.670 Java7.sdk:<7.0.0.670 Java7.1.jre:<7.1.0.470 Java7.1_64.jre:<7.1.0.470 Java7.1:<7.1.0.470 Java7.1.sdk:<7.1.0.470 Java7.1_64.sdk:<7.1.0.470 Java8:<8.0.0.616 Java8.jre:<8.0.0.616 Java8_64.jre:<8.0.0.616 Java8.sdk:<8.0.0.616 Java8_64.sdk:<8.0.0.616",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See advisory",
"issued": "20201103",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2020-14621:5.3 / CVE-2020-14593:7.4 / CVE-2020-14583:8.3 / CVE-2020-14579:3.7 / CVE-2020-14578:3.7 / CVE-2020-14577:3.7 / CVE-2020-14556:4.8 / CVE-2019-17639:5.3 / CVE-2020-2601:6.8 / CVE-2020-2590:3.7"
},
"CVE-2020-14779": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_mar2021_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_mar2021_advisory.asc",
"download": "See advisory",
"filesets": "Java7:<7.0.0.680 Java7_64.jre:<7.0.0.680 Java7.jre:<7.0.0.680 Java7_64.sdk:<7.0.0.680 Java7.sdk:<7.0.0.680 Java7.1.jre:<7.1.0.480 Java7.1_64.jre:<7.1.0.480 Java7.1:<7.1.0.480 Java7.1.sdk:<7.1.0.480 Java7.1_64.sdk:<7.1.0.480 Java8:<8.0.0.625 Java8.jre:<8.0.0.625 Java8_64.jre:<8.0.0.625 Java8.sdk:<8.0.0.625 Java8_64.sdk:<8.0.0.625",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See advisory",
"issued": "20210315",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2020-14779:3.7 / CVE-2020-14796:3.1 / CVE-2020-14797:3.7 / CVE-2020-14798:3.1 / CVE-2020-14782:3.7 / CVE-2020-2773:3.7 / CVE-2020-14803:5.3 / CVE-2020-27221:9.8 / CVE-2020-14781:3.7"
},
"CVE-2020-2830": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_apr2020_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_apr2020_advisory.asc",
"download": "See advisory",
"filesets": "Java7:<7.0.0.665 Java7_64.jre:<7.0.0.665 Java7.jre:<7.0.0.665 Java7_64.sdk:<7.0.0.665 Java7.sdk:<7.0.0.665 Java7.1.jre:<7.1.0.465 Java7.1_64.jre:<7.1.0.465 Java7.1:<7.1.0.465 Java7.1.sdk:<7.1.0.465 Java7.1_64.sdk:<7.1.0.465 Java8:<8.0.0.610 Java8.jre:<8.0.0.610 Java8_64.jre:<8.0.0.610 Java8.sdk:<8.0.0.610 Java8_64.sdk:<8.0.0.610",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See advisory",
"issued": "20200731",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2020-2830:5.3 / CVE-2020-2805:8.3 / CVE-2020-2803:8.3 / CVE-2020-2800:4.8 / CVE-2020-2781:5.3 / CVE-2020-2757:3.7 / CVE-2020-2756:3.7 / CVE-2020-2755:3.7 / CVE-2020-2754:3.7 / CVE-2019-2949:6.8 / CVE-2020-2654:3.7"
},
"CVE-2021-20271": {
"url": "https://aix.software.ibm.com/aix/efixes/security/rpm_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/rpm_advisory.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/rpm_fix.tar",
"filesets": "rpm.rte:4.9.1.3-4.15.1.1005 rpm.rte:4.15.1.2000-4.15.1.2005",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to arbitrary code execution and RPM database corruption and denial of service due to RPM.",
"ifixes": "rpm.rte.4.15.1.1006 rpm.rte.4.15.1.2006",
"issued": "20220923",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2021-20271:6.7 / CVE-2021-3421:6.1 / CVE-2021-20266:3.1"
},
"CVE-2021-2161": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_sep2021_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_sep2021_advisory.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/java_sep2021_fix.tar",
"filesets": "Java7:<7.0.0.690 Java7_64.jre:<7.0.0.690 Java7.jre:<7.0.0.690 Java7_64.sdk:<7.0.0.690 Java7.sdk:<7.0.0.690 Java7.1.jre:<7.1.0.490 Java7.1_64.jre:<7.1.0.490 Java7.1:<7.1.0.490 Java7.1.sdk:<7.1.0.490 Java7.1_64.sdk:<7.1.0.490 Java8:<8.0.0.635 Java8.jre:<8.0.0.635 Java8_64.jre:<8.0.0.635 Java8.sdk:<8.0.0.635 Java8_64.sdk:<8.0.0.635",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See advisory",
"issued": "20210915",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2021-2161:5.9 / CVE-2021-2432:3.7 / CVE-2021-2369:4.3"
},
"CVE-2021-2163": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_dec2022_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_dec2022_advisory.asc",
"download": "null",
"filesets": "See Bulletin",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "null",
"issued": "20221222",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2021-2163:5.3 / CVE-2021-28167:6.5 / CVE-2021-41041:5.3 / CVE-2022-21619:3.7 / CVE-2022-21624:3.7 / CVE-2022-21626:5.3 / CVE-2022-21628:5.3 / CVE-2022-3676:6.5"
},
"CVE-2021-23839": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory33.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory33.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix33.tar",
"filesets": "openssl.base:1.0.2.500-1.0.2.2100 openssl.base:20.13.102.1000-20.16.102.2100",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Vulnerabilities in OpenSSL affect AIX",
"ifixes": "1022100b.210323.epkg.Z fips2100b.210323.epkg.Z",
"issued": "20210415",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2021-23839:5.9 / CVE-2021-23840:7.5 / CVE-2021-23841:7.5"
},
"CVE-2021-35560": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_feb2022_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_feb2022_advisory.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/java_feb2022_fix.tar",
"filesets": "Java7:<7.0.0.700 Java7_64.jre:<7.0.0.700 Java7.jre:<7.0.0.700 Java7_64.sdk:<7.0.0.700 Java7.sdk:<7.0.0.700 Java7.1.jre:<7.1.0.500 Java7.1_64.jre:<7.1.0.500 Java7.1:<7.1.0.500 Java7.1.sdk:<7.1.0.500 Java7.1_64.sdk:<7.1.0.500 Java8:<8.0.0.700 Java8.jre:<8.0.0.700 Java8_64.jre:<8.0.0.700 Java8.sdk:<8.0.0.700 Java8_64.sdk:<8.0.0.700",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See advisory",
"issued": "20220223",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2021-35560:7.5 / CVE-2021-35586:5.3 / CVE-2021-35578:5.3 / CVE-2021-35564:5.3 / CVE-2021-35559:5.3 / CVE-2021-35556:5.3 / CVE-2021-35565:5.3 / CVE-2021-41035:7.7 / CVE-2021-2341:3.1"
},
"CVE-2021-3712": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory34.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory34.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix34.tar",
"filesets": "openssl.base:1.0.2.500-1.0.2.2102 openssl.base:20.13.102.1000-20.16.102.2103",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "There is a vulnerability in OpenSSL used by AIX.",
"ifixes": "1022102a.210927.epkg.Z fips2102a.210927.epkg.Z ",
"issued": "20220106",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2021-3712:6.5"
},
"CVE-2021-38993": {
"url": "https://aix.software.ibm.com/aix/efixes/security/smbcd_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/smbcd_advisory.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/smbcd_fix.tar",
"filesets": "smbc.rte:7.1.0.0-7.1.302.6 smbc.rte:7.2.0.0-7.2.302.6",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "There is a vulnerability in the AIX smbcd daemon.",
"ifixes": "smbcd_fix.tar smbc_302_fileset_71.tar.gz smbc_302_fileset_72.tar.gz",
"issued": "20220224",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2021-38993:6.2"
},
"CVE-2021-41617": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory14.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssh_advisory14.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssh_fix14.tar",
"filesets": "openssh.base.client:4.0.0.5200-8.1.102.2104 openssh.base.server:4.0.0.5200-8.1.102.2104",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Vulnerabilities in OpenSSH affect AIX.",
"ifixes": "41617s9a.211029.epkg.Z",
"issued": "20220106",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2021-41617:7.4"
},
"CVE-2022-0778": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory35.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory35.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix35.tar",
"filesets": "openssl.base:1.0.2.500-1.0.2.2103 openssl.base:20.13.102.1000-20.16.102.2104 openssl.base:1.1.1.0-1.1.1.1200 openssl.base:1.1.2.0-1.1.2.1200",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to a denial of service due to OpenSSL",
"ifixes": "1022103a.220422.epkg.Z 1111200a.220422.epkg.Z 1121200a.220422.epkg.Z fips2104a.220425.epkg.Z",
"issued": "20220513",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2022-0778:7.5"
},
"CVE-2022-1292": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory36.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory36.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix36.tar",
"filesets": "openssl.base:1.0.2.500-1.0.2.2104 openssl.base:20.13.102.1000-20.16.102.2105 openssl.base:1.1.1.0-1.1.1.1201 openssl.base:1.1.2.0-1.1.2.1201",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to arbitrary command execution due to OpenSSL",
"ifixes": "1022104a.220804.epkg.Z 1111201a.220804.epkg.Z 1121201a.220804.epkg.Z fips2105a.220804.epkg.Z",
"issued": "20220817",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2022-1292:6.3 / CVE-2022-2068:7.3 / CVE-2022-2097:6.3"
},
"CVE-2022-21365": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_jun2022_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_jun2022_advisory.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/java_jun2022_fix.tar",
"filesets": "Java7:<7.0.0.705 Java7_64.jre:<7.0.0.705 Java7.jre:<7.0.0.705 Java7_64.sdk:<7.0.0.705 Java7.sdk:<7.0.0.705 Java7.1.jre:<7.1.0.505 Java7.1_64.jre:<7.1.0.505 Java7.1:<7.1.0.505 Java7.1.sdk:<7.1.0.505 Java7.1_64.sdk:<7.1.0.505 Java8:<8.0.0.706 Java8.jre:<8.0.0.706 Java8_64.jre:<8.0.0.706 Java8.sdk:<8.0.0.706 Java8_64.sdk:<8.0.0.706",
"fixedIn": "See advisory",
"fixedInLink": "See advisory",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See advisory",
"issued": "20220614",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2022-21365:5.3 / CVE-2022-21360:5.3 / CVE-2022-21341:5.3 / CVE-2022-21340:5.3 / CVE-2022-21294:5.3 / CVE-2022-21293:5.3 / CVE-2022-21248:3.7 / CVE-2021-35550:5.9 / CVE-2021-35603:3.7 / CVE-2022-21299:5.3 / CVE-2022-21496:5.3 / CVE-2022-21434:5.3 / CVE-2022-21443:3.7 / CVE-2021-35561:5.3"
},
"CVE-2022-21426": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_may2023_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_may2023_advisory.asc",
"download": "https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere",
"filesets": "",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See Bulletin",
"issued": "20230519",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2022-21426:5.3 / CVE-2023-21830:5.3 / CVE-2023-21843:3.7 / CVE-2023-30441:7.5"
},
"CVE-2022-22827": {
"url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/python_advisory.asc",
"download": "https://www-01.ibm.com/marketing/iwm/iwm/web/pickUrxNew.do?source=aixbp",
"filesets": "python3.9.base:3.9.0.0-3.9.11.99",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is affected by multiple vulnerabilities in Python",
"ifixes": "See Bulletin",
"issued": "20220728",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2022-22827:7.8 / CVE-2022-25236:5.3 / CVE-2022-25235:3.3 / CVE-2022-25315:7.8 / CVE-2022-22824:7.8 / CVE-2022-22825:7.8 / CVE-2022-22823:7.8 / CVE-2021-46143:7.8 / CVE-2022-23990:9.8 / CVE-2022-22826:7.8 / CVE-2022-25314:7.3 / CVE-2022-25313:5.5 / CVE-2022-23852:9.8 / CVE-2021-45960:5.5 / CVE-2022-22822:7.8"
},
"CVE-2022-3094": {
"url": "https://aix.software.ibm.com/aix/efixes/security/bind_advisory23.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/bind_advisory23.asc",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp",
"filesets": "bind.rte:7.1.916.0-7.1.916.2601",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to denial of service due to ISC BIND",
"ifixes": "See Bulletin",
"issued": "20230718",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2022-3094:7.5 / CVE-2022-3736:7.5 / CVE-2022-3924:7.5"
},
"CVE-2022-31081": {
"url": "https://aix.software.ibm.com/aix/efixes/security/perl_advisory6.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/perl_advisory6.asc",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp",
"filesets": "perl.rte:5.28.0.0-5.28.1.4 perl.rte:5.34.0.0-5.34.1.1",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to HTTP request smuggling due to Perl",
"ifixes": "See Bulletin",
"issued": "20230503",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2022-31081:7.3"
},
"CVE-2022-3358": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory37.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory37.asc",
"download": "https://www-01.ibm.com/marketing/iwm/iwm/web/pickUrxNew.do?source=aixbp",
"filesets": "openssl.base:3.0.5.101-3.0.5.101",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Multiple vulnerabilities in OpenSSL affect AIX",
"ifixes": "",
"issued": "20230124",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2022-3358:5.3 / CVE-2022-3602:7.5 / CVE-2022-3786:7.5"
},
"CVE-2022-36768": {
"url": "https://aix.software.ibm.com/aix/efixes/security/invscout_advisory3.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/invscout_advisory3.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/invscout_fix3.tar",
"filesets": "invscout.rte:2.2.0.0-2.2.0.22",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to a privilege escalation vulnerability due to invscout",
"ifixes": "invscout_fix3",
"issued": "20220912",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2022-36768:8.4"
},
"CVE-2022-37434": {
"url": "https://aix.software.ibm.com/aix/efixes/security/zlib_advisory2.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/zlib_advisory2.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/zlib_fix2.tar",
"filesets": "rpm.rte:4.9.1.3-4.15.1.1006 rpm.rte:4.15.1.2000-4.15.1.2006 zlibNX.rte:7.2.4.0-7.2.4.8 zlibNX.rte:7.3.0.0-7.3.0.2 zlibNX.rte:7.3.1.0-7.3.1.0",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to denial of service due to zlib and zlibNX",
"ifixes": "rpm.rte.4.15.1.1007 rpm.rte.4.15.1.2007 IJ47324m5a.230623.epkg.Z IJ46030m3a.230623.epkg.Z IJ44986s1a.230623.epkg.Z",
"issued": "20230725",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2022-37434:7.3"
},
"CVE-2022-3996": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory38.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory38.asc",
"download": "https://www-01.ibm.com/marketing/iwm/iwm/web/pickUrxNew.do?source=aixbp&S_PKG=openssl",
"filesets": "openssl.base:1.0.2.500-1.0.2.2105 openssl.base:1.1.1.0-1.1.1.1202 openssl.base:1.1.2.0-1.1.2.1202 openssl.base:20.13.102.1000-20.16.102.2106 openssl.base:3.0.5.101-3.0.7.1000",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Multiple vulnerabilities in OpenSSL affect AIX",
"ifixes": "",
"issued": "20230321",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-3996:3.7 / CVE-2023-0401:7.5 / CVE-2022-4304:7.5 / CVE-2022-4203:7.5 / CVE-2023-0216:7.5 / CVE-2023-0215:7.5 / CVE-2023-0217:7.5 / CVE-2023-0286:8.2 / CVE-2022-4450:7.5"
},
"CVE-2022-40609": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_aug2023_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_aug2023_advisory.asc",
"download": "https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=8.0.0.0",
"filesets": "Java8:<8.0.0.810 Java8.jre:<8.0.0.810 Java8.sdk:<8.0.0.81 Java8_64.sdk:<8.0.0.810 Java8_64.jre:<8.0.0.810",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See Bulletin",
"issued": "20230831",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2022-40609:8.1 / CVE-2023-22049:3.7"
},
"CVE-2022-40674": {
"url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory2.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/python_advisory2.asc",
"download": "https://www-01.ibm.com/marketing/iwm/iwm/web/pickUrxNew.do?source=aixbp",
"filesets": "python3.9.base:3.9.0.0-3.9.13.99",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is affected by arbitrary code execution and denial of service due to Python",
"ifixes": "See Bulletin",
"issued": "20221101",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2022-40674:9.8 / CVE-2020-10735:7.5"
},
"CVE-2022-43381": {
"url": "https://aix.software.ibm.com/aix/efixes/security/smbcd_advisory2.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/smbcd_advisory2.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/smbcd_fix2.tar",
"filesets": "smbc.rte:7.1.0.0-7.1.302.8 smbc.rte:7.2.0.0-7.2.302.8",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to a denial of service due to the AIX SMB client",
"ifixes": "null",
"issued": "20221222",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2022-43381:6.2"
},
"CVE-2022-43680": {
"url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory3.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/python_advisory3.asc",
"download": "https://www-01.ibm.com/marketing/iwm/iwm/web/pickUrxNew.do?source=aixbp",
"filesets": "python3.9.base:3.9.0.0-3.9.14.0",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is affected by a denial of service due to Python",
"ifixes": "See Bulletin",
"issued": "20221222",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2022-43680:7.5"
},
"CVE-2022-45061": {
"url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory4.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/python_advisory4.asc",
"download": "https://www-01.ibm.com/marketing/iwm/iwm/web/pickUrxNew.do?source=aixbp",
"filesets": "python3.9.base:3.9.0.0-3.9.14.1",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is affected by a denial of service due to Python",
"ifixes": "",
"issued": "20230314",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2022-45061:7.5"
},
"CVE-2023-0464": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory39.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory39.asc",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp&S_PKG=openssl",
"filesets": "openssl.base:1.0.2.500-1.0.2.2106 openssl.base:1.1.1.0-1.1.1.2000 openssl.base:1.1.2.0-1.1.2.2000 openssl.base:20.13.102.1000-20.16.102.2107 openssl.base:3.0.5.101-3.0.8.1000",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Multiple vulnerabilities in OpenSSL affect AIX",
"ifixes": "See Bulletin",
"issued": "20230911",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-0464:5.3 / CVE-2023-0465:3.7 / CVE-2023-0466:3.7 / CVE-2023-2650:7.5 / CVE-2023-2975:5.3 / CVE-2023-3446:3.7 / CVE-2023-3817:3.7"
},
"CVE-2023-21930": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_jul2023_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_jul2023_advisory.asc",
"download": "https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere",
"filesets": "Java8:<8.0.0.805",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See Bulletin",
"issued": "20230711",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-21930:7.4 / CVE-2023-21937:3.7 / CVE-2023-21938:3.7 / CVE-2023-21939:5.3 / CVE-2023-21967:5.9 / CVE-2023-21968:3.7 / CVE-2023-2597:7.0"
},
"CVE-2023-22067": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_dec2023_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_dec2023_advisory.asc",
"download": "https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=8.0.0.0&function=all",
"filesets": "Java8:<8.0.0.815 Java8.jre:<8.0.0.815 Java8.sdk:<8.0.0.815 Java8_64.sdk:<8.0.0.815 Java8_64.jre:<8.0.0.815",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See Bulletin",
"issued": "20231218",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-22067:5.3 / CVE-2023-22081:5.3 / CVE-2023-5676:4.1"
},
"CVE-2023-24329": {
"url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory5.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/python_advisory5.asc",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp",
"filesets": "python3.9.base:3.9.0.0-3.9.16.0",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is affected by security restrictions bypass due to Python",
"ifixes": "See Bulletin",
"issued": "20230818",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-24329:7.5"
},
"CVE-2023-26551": {
"url": "https://aix.software.ibm.com/aix/efixes/security/ntp_advisory14.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/ntp_advisory14.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/ntp_fix14.tar",
"filesets": "ntp.rte:7.4.2.8100-7.4.2.8153 ntp.rte:73.4.2.8151-73.4.2.8154",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to a denial of service due to NTP",
"ifixes": "IJ47973s6a.230829.epkg.Z IJ47974s4a.230829.epkg.Z",
"issued": "20231005",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-26551:5.3 / CVE-2023-26552:5.3 / CVE-2023-26553:5.3 / CVE-2023-26554:5.3"
},
"CVE-2023-2828": {
"url": "https://aix.software.ibm.com/aix/efixes/security/bind_advisory24.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/bind_advisory24.asc",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp",
"filesets": "bind.rte:7.1.916.0-7.1.916.2602",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to denial of service due to ISC BIND",
"ifixes": "See Bulletin",
"issued": "20230907",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-2828:7.5"
},
"CVE-2023-28528": {
"url": "https://aix.software.ibm.com/aix/efixes/security/invscout_advisory4.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/invscout_advisory4.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/invscout_fix4.tar",
"filesets": "invscout.rte:2.2.0.0-2.2.0.23 invscout.rte:2.2.0.0-2.2.0.23",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to arbitrary command execution due to invscout",
"ifixes": "See Bulletin",
"issued": "20230412",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-28528:8.4"
},
"CVE-2023-31484": {
"url": "https://aix.software.ibm.com/aix/efixes/security/perl_advisory7.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/perl_advisory7.asc",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp",
"filesets": "perl.rte:5.28.0.0-5.28.1.6 perl.rte:5.34.0.0-5.34.1.3",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to sensitive information exposure due to Perl - CVE-2023-31484",
"ifixes": "31484s6a.231017.epkg.Z 31484m6a.231020.epkg.Z 31484s2a.231018.epkg.Z",
"issued": "20231005",
"updated": "20231102",
"reboot": "no",
"cvss": "CVE-2023-31484:6.8"
},
"CVE-2023-31486": {
"url": "https://aix.software.ibm.com/aix/efixes/security/perl_advisory7.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/perl_advisory7.asc",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp",
"filesets": "perl.rte:5.28.0.0-5.28.1.7",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to sensitive information exposure due to Perl - CVE-2023-2331486",
"ifixes": "31486s6a.231017.epkg.Z 31484m6a.231020.epkg.Z 31486s6b.231020.epkg.Z",
"issued": "20231005",
"updated": "20231102",
"reboot": "no",
"cvss": "CVE-2023-31486:6.8"
},
"CVE-2023-3341": {
"url": "https://aix.software.ibm.com/aix/efixes/security/bind_advisory25.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/bind_advisory25.asc",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp",
"filesets": "bind.rte:7.1.916.0-7.1.916.2603 bind.rte:7.3.916.0-7.3.916.2600",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to denial of service due to ISC BIND",
"ifixes": "IJ49093s7.231109.epkg.Z",
"issued": "20231218",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-3341:7.5"
},
"CVE-2023-33850": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_feb2024_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_feb2024_advisory.asc",
"download": "https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=8.0.0.0&function=all",
"filesets": "Java8:<8.0.0.820 Java8.jre:<8.0.0.820 Java8.sdk:<8.0.0.820 Java8_64.sdk:<8.0.0.820 Java8_64.jre:<8.0.0.820",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See Bulletin",
"issued": "20240307",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-33850:7.5 / CVE-2024-20918:7.4 / CVE-2024-20921:5.9 / CVE-2024-20926:5.9 / CVE-2024-20945:4.7 / CVE-2024-20952:7.4"
},
"CVE-2023-36328": {
"url": "https://aix.software.ibm.com/aix/efixes/security/tcl_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/tcl_advisory.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/tcl_fix.tar",
"filesets": "tcl.base:8.6.10.0-8.6.10.0",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to arbitrary code execution (CVE-2023-36328) due to tcl",
"ifixes": "See Bulletin",
"issued": "20241107",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-36328:9.8"
},
"CVE-2023-37920": {
"url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory7.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/python_advisory7.asc",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp",
"filesets": "python3.9.base:3.9.0.0-3.9.18.0",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is affected by multiple vulnerabilities due to Python",
"ifixes": "See Bulletin",
"issued": "20231221",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-37920:7.5 / CVE-2023-43804:5.9"
},
"CVE-2023-38264": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_jun2024_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_jun2024_advisory.asc",
"download": "https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=8.0.0.0&function=all",
"filesets": "Java8:<8.0.0.825 Java8.jre:<8.0.0.825 Java8.sdk:<8.0.0.825 Java8_64.sdk:<8.0.0.825 Java8_64.jre:<8.0.0.825",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See Bulletin",
"issued": "20240624",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-38264:5.9 / CVE-2024-21085:3.7"
},
"CVE-2023-40217": {
"url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory6.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/python_advisory6.asc",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp",
"filesets": "python3.9.base:3.9.0.0-3.9.17.1",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is affected by a denial of service (CVE-2023-45167) and a security restrictions bypass (CVE-2023-40217) due to Python",
"ifixes": "See Bulletin",
"issued": "20231107",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-40217:7.4 / CVE-2023-45167:6.2"
},
"CVE-2023-4408": {
"url": "https://aix.software.ibm.com/aix/efixes/security/bind_advisory26.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/bind_advisory26.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/bind_fix26.tar",
"filesets": "bind.rte:7.1.916.0-7.1.916.2604 bind.rte:7.2.916.0-7.2.916.2600 bind.rte:7.3.916.0-7.3.916.2601",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to denial of service due to ISC BIND",
"ifixes": "See Bulletin",
"issued": "20240604",
"updated": "20240605",
"reboot": "no",
"cvss": "CVE-2023-4408:7.5 / CVE-2023-50387:7.5 / CVE-2023-50868:7.5 / CVE-2023-5517:7.5 / CVE-2023-5679:7.5 / CVE-2023-6516:7.5"
},
"CVE-2023-45165": {
"url": "https://aix.software.ibm.com/aix/efixes/security/smbcd_advisory3.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/smbcd_advisory3.asc",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp",
"filesets": "smbc.rte:7.2.0.0-7.2.302.10",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to a denial of service due to the AIX SMB client",
"ifixes": "smbc_302_fileset_72.tar.gz smbc_302_fileset_73.tar.gz",
"issued": "20231221",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-45165:6.2"
},
"CVE-2023-45168": {
"url": "https://aix.software.ibm.com/aix/efixes/security/invscout_advisory5.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/invscout_advisory5.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/invscout_fix5.tar",
"filesets": "invscout.rte:2.2.0.0-2.2.0.24",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to arbitrary command execution due to invscout",
"ifixes": "See Bulletin",
"issued": "20231130",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-45168:8.4"
},
"CVE-2023-45803": {
"url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory11.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/python_advisory11.asc",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp",
"filesets": "python3.9.base:3.9.0.0-3.9.19.1",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is affected by information disclosure (CVE-2023-45803) and arbitrary code execution (CVE-2024-6345) due to Python",
"ifixes": "See Bulletin",
"issued": "20240812",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-45803:4.2 / CVE-2024-6345:8.8"
},
"CVE-2023-47038": {
"url": "https://aix.software.ibm.com/aix/efixes/security/perl_advisory8.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/perl_advisory8.asc",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp",
"filesets": "perl.rte:5.34.0.0-5.34.1.5",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to arbitrary command execution due to Perl (CVE-2024-25021 CVE-2023-47038 CVE-2023-47100)",
"ifixes": "perl5345ma.240213.epkg.Z",
"issued": "20240221",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-47038:7.8 / CVE-2023-47100:9.8 / CVE-2024-25021:8.4"
},
"CVE-2023-52425": {
"url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory8.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/python_advisory8.asc",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp",
"filesets": "python3.9.base:3.9.0.0-3.9.18.1",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is affected by multiple vulnerabilities due to Python (CVE-2023-52425 CVE-2023-52426 CVE-2023-6597)",
"ifixes": "See Bulletin",
"issued": "20240411",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-52425:7.5 / CVE-2023-52426:5.1 / CVE-2023-6597:8.4"
},
"CVE-2023-5363": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory40.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory40.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/openssl_fix40.tar",
"filesets": "openssl.base:1.0.2.500-1.0.2.2107 openssl.base:1.1.1.0-1.1.1.2200 openssl.base:1.1.2.0-1.1.2.2200 openssl.base:20.13.102.1000-20.16.102.2108 openssl.base:3.0.0.0-3.0.10.1002",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to a denial of service (CVE-2023-5678 CVE-2023-6129 CVE-2023-6237) and an attacker may obtain sensitive information (CVE-2023-5363) due to OpenSSL",
"ifixes": "1022107a.240107.epkg.Z 1112200a.240109.epkg.Z 1122200a.240110.epkg.Z fips2108a.240108.epkg.Z 301002sa.240122.epkg.Z",
"issued": "20240126",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-5363:5.9 / CVE-2023-5678:3.7 / CVE-2023-6129:5.9 / CVE-2023-6237:3.1"
},
"CVE-2023-7104": {
"url": "https://aix.software.ibm.com/aix/efixes/security/rpm_advisory2.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/rpm_advisory2.asc",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp",
"filesets": "rpm.rte:4.15.1.1000-4.15.1.1012 rpm.rte:4.15.1.2000-4.15.1.2010 rpm.rte:4.18.1.2000-4.18.1.2002",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to arbitrary code execution due to RPM (CVE-2023-7104)",
"ifixes": "See Bulletin",
"issued": "20240424",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2023-7104:5.5"
},
"CVE-2024-0397": {
"url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory12.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/python_advisory12.asc",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp",
"filesets": "python3.9.base:3.9.0.0-3.9.19.2",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is affected by a denial of service (CVE-2024-0397) and information disclosure (CVE-2024-4032 CVE-2024-37891) due to Python",
"ifixes": "See Bulletin",
"issued": "20240917",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-0397:7.5 / CVE-2024-37891:4.4 / CVE-2024-4032:5.3"
},
"CVE-2024-0450": {
"url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory10.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/python_advisory10.asc",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp",
"filesets": "python3.9.base:3.9.0.0-3.9.18.3",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is affected by a denial of service due to Python (CVE-2024-0450)",
"ifixes": "See Bulletin",
"issued": "20240624",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-0450:5.5"
},
"CVE-2024-0727": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory41.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory41.asc",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp&S_PKG=openssl",
"filesets": "openssl.base:1.1.1.0-1.1.1.2200 openssl.base:1.1.2.0-1.1.2.2200 openssl.base:3.0.5.101-3.0.10.1002",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to a denial of service (CVE-2024-2511 CVE-2024-0727) due to OpenSSL",
"ifixes": "See Bulletin",
"issued": "20240716",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-0727:3.1 / CVE-2024-2511:3.7"
},
"CVE-2024-0760": {
"url": "https://aix.software.ibm.com/aix/efixes/security/bind_advisory27.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/bind_advisory27.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/bind_fix27.tar",
"filesets": "bind.rte:7.1.916.0-7.1.916.4800 bind.rte:7.2.916.0-7.2.916.4801 bind.rte:7.3.916.0-7.3.916.4800",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to a denial of service due to ISC BIND",
"ifixes": "See Bulletin",
"issued": "20241118",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-0760:7.5 / CVE-2024-1737:7.5 / CVE-2024-1975:7.5 / CVE-2024-4076:7.5"
},
"CVE-2024-0914": {
"url": "https://aix.software.ibm.com/aix/efixes/security/opencryptoki_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/opencryptoki_advisory.asc",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp&S_PKG=opencryptoki",
"filesets": "opencki.base:3.21.0.0-3.21.0.1000",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to information disclosure due to openCryptoki (CVE-2024-0914)",
"ifixes": "See Bulletin",
"issued": "20240603",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-0914:5.9"
},
"CVE-2024-10917": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_apr2025_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_apr2025_advisory.asc",
"download": "https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=8.0.0.0&function=all",
"filesets": "Java8:8.0.0.0-8.0.0.830 Java8.jre:8.0.0.0-8.0.0.830 Java8.sdk:8.0.0.0-8.0.0.830 Java8_64.jre:8.0.0.0-8.0.0.830 Java8_64.sdk:8.0.0.0-8.0.0.830",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See Bulletin",
"issued": "20250425",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-10917:5.3 / CVE-2024-21208:3.7 / CVE-2024-21217:3.7"
},
"CVE-2024-11187": {
"url": "https://aix.software.ibm.com/aix/efixes/security/bind_advisory28.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/bind_advisory28.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/bind_fix28.tar",
"filesets": "bind.rte:7.1.916.0-7.1.916.4800 bind.rte:7.2.916.0-7.2.916.4801 bind.rte:7.2.918.0-7.2.918.2800 bind.rte:7.3.916.0-7.3.916.4800 bind.rte:7.3.918.0-7.3.918.2800",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to a denial of service due to ISC BIND",
"ifixes": "See Bulletin",
"issued": "20250520",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-11187:7.5 / CVE-2024-12705:7.5"
},
"CVE-2024-12718": {
"url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory16.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/python_advisory16.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/python_fix16.tar",
"filesets": "python3.9.base:3.9.0.0-3.9.20.2 python3.11.base:3.11.0.0-3.11.10.1",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX/VIOS is affected by arbitrary code execution (CVE-2025-47273 CVE-2025-4330 CVE-2024-12718 CVE-2025-4138 CVE-2025-4517) due to Python",
"ifixes": "See Bulletin",
"issued": "20250820",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-12718:5.3 / CVE-2025-4138:7.5 / CVE-2025-4330:7.5 / CVE-2025-4517:9.4 / CVE-2025-47273:8.8"
},
"CVE-2024-21131": {
"url": "https://aix.software.ibm.com/aix/efixes/security/java_nov2024_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/java_nov2024_advisory.asc",
"download": "https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/IBM+SDKs+for+Java+Technology/Java+Standard+Edition+%28Java+SE%29&release=8.0.0.0&function=all",
"filesets": "Java8:<8.0.0.830 Java8.jre:<8.0.0.830 Java8.sdk:<8.0.0.830 Java8_64.sdk:<8.0.0.830 Java8_64.jre:<8.0.0.830",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Multiple vulnerabilities in IBM Java SDK affect AIX",
"ifixes": "See Bulletin",
"issued": "20241111",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-21131:3.7 / CVE-2024-21144:3.7 / CVE-2024-21145:4.8 / CVE-2024-27267:5.9"
},
"CVE-2024-28757": {
"url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory9.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/python_advisory9.asc",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp",
"filesets": "python3.9.base:3.9.0.0-3.9.18.2",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is affected by information disclosure due to Python (CVE-2024-28757)",
"ifixes": "See Bulletin",
"issued": "20240613",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-28757:7.5"
},
"CVE-2024-45490": {
"url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory13.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/python_advisory13.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/python_fix13.tar",
"filesets": "python3.9.base:3.9.0.0-3.9.19.3",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is affected by multiple vulnerabilities due to Python",
"ifixes": "See Bulletin",
"issued": "20241105",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-45490:7.5 / CVE-2024-45491:7.3 / CVE-2024-45492:7.3 / CVE-2024-6923:5.5 / CVE-2024-7592:7.5 / CVE-2024-8088:8.7"
},
"CVE-2024-47081": {
"url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory17.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/python_advisory17.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/python_fix17.tar",
"filesets": "python3.9.base:3.9.0.0-3.9.23.0 python3.11.base:3.11.0.0-3.11.13.0",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is affected by multiple vulnerabilities due to Python",
"ifixes": "See Bulletin",
"issued": "20251119",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-47081:5.3 / CVE-2024-5642:2.7 / CVE-2025-59375:7.5 / CVE-2025-6965:9.8"
},
"CVE-2024-47115": {
"url": "https://aix.software.ibm.com/aix/efixes/security/invscout_advisory7.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/invscout_advisory7.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/invscout_fix7.tar",
"filesets": "invscout.rte:2.2.0.0-2.2.0.26",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to arbitrary command execution due to invscout (CVE-2024-47115)",
"ifixes": "See Bulletin",
"issued": "20241205",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-47115:7.8"
},
"CVE-2024-50602": {
"url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory14.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/python_advisory14.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/python_fix14.tar",
"filesets": "python3.9.base:3.9.0.0-3.9.20.0",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is affected by a denial of service (CVE-2024-50602) due to Python",
"ifixes": "See Bulletin",
"issued": "20250306",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-50602:5.9"
},
"CVE-2024-56406": {
"url": "https://aix.software.ibm.com/aix/efixes/security/perl_advisory10.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/perl_advisory10.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/perl_fix10.tar",
"filesets": "perl.rte:5.34.0.0-5.34.1.7 perl.rte:5.38.0.0-5.38.2.2",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to denial of service and possible code execution due to Perl (CVE-2024-8176 CVE-2024-56406)",
"ifixes": "See Bulletin",
"issued": "20250626",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-56406:8.6 / CVE-2024-8176:7.5"
},
"CVE-2024-8176": {
"url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory15.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/python_advisory15.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/python_fix15.tar",
"filesets": "python3.9.base:3.9.0.0-3.9.20.1 python3.11.base:3.11.0.0-3.11.10.0",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is affected by a denial of service (CVE-2024-8176) due to Python",
"ifixes": "See Bulletin",
"issued": "20250520",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-8176:7.5"
},
"CVE-2025-13878": {
"url": "https://aix.software.ibm.com/aix/efixes/security/bind_advisory30.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/bind_advisory30.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/bind_fix30.tar",
"filesets": "bind.rte:7.1.916.0-7.1.916.4800 bind.rte:7.2.916.0-7.2.916.4801 bind.rte:7.2.918.0-7.2.918.4101 bind.rte:7.3.916.0-7.3.916.4800 bind.rte:7.3.918.0-7.3.918.4101",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Multiple vulnerabilities impact AIX due to ISC BIND (CVE-2025-13878 CVE-2026-1519 CVE-2026-3592 CVE-2026-5946 CVE-2026-5950)",
"ifixes": "See Bulletin",
"issued": "20260703",
"updated": "20260806",
"reboot": "no",
"cvss": "CVE-2025-13878:7.5 / CVE-2026-1519:7.5 / CVE-2026-3592:5.3 / CVE-2026-5946:7.5 / CVE-2026-5950:5.3"
},
"CVE-2025-29087": {
"url": "https://aix.software.ibm.com/aix/efixes/security/rpm_advisory3.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/rpm_advisory3.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/rpm_fix3.tar",
"filesets": "rpm.rte:4.15.1.1000-4.15.1.1015 rpm.rte:4.15.1.2000-4.15.1.2013 rpm.rte:4.18.1.2000-4.18.1.2005",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to arbitrary code execution (CVE-2025-3277 CVE-2025-29087) and denial of service (CVE-2025-29088) due to RPM",
"ifixes": "See Bulletin",
"issued": "20250717",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2025-29087:7.5 / CVE-2025-29088:5.6 / CVE-2025-3277:6.9"
},
"CVE-2025-33112": {
"url": "https://aix.software.ibm.com/aix/efixes/security/perl_advisory9.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/perl_advisory9.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/perl_fix9.tar",
"filesets": "perl.rte:5.38.0.0-5.38.2.0",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to arbitrary command execution due to Perl (CVE-2025-33112)",
"ifixes": "See Bulletin",
"issued": "20250610",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2025-33112:8.4"
},
"CVE-2025-40778": {
"url": "https://aix.software.ibm.com/aix/efixes/security/bind_advisory29.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/bind_advisory29.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/bind_fix29.tar",
"filesets": "bind.rte:7.1.916.0-7.1.916.4800 bind.rte:7.2.916.0-7.2.916.4801 bind.rte:7.2.918.0-7.2.918.2802 bind.rte:7.3.916.0-7.3.916.4800 bind.rte:7.3.918.0-7.3.918.2802",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Multiple vulnerabilities impact AIX due to ISC BIND (CVE-2025-40778 CVE-2025-40780 CVE-2025-8677)",
"ifixes": "See Bulletin",
"issued": "20260218",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2025-40778:8.6 / CVE-2025-40780:8.6 / CVE-2025-8677:7.5"
},
"CVE-2025-40909": {
"url": "https://aix.software.ibm.com/aix/efixes/security/perl_advisory11.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/perl_advisory11.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/perl_fix11.tar",
"filesets": "perl.rte:5.28.0.0-5.28.1.10 perl.rte:5.34.0.0-5.34.1.7 perl.rte:5.38.0.0-5.38.2.2",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX/VIOS is vulnerable to a race condition in directory handling due to Perl (CVE-2025-40909)",
"ifixes": "See Bulletin",
"issued": "20250916",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2025-40909:5.9"
},
"CVE-2025-4207": {
"url": "https://aix.software.ibm.com/aix/efixes/security/postgres_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/postgres_advisory.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/postgres_fix.tar",
"filesets": "ios.database.rte:7.3.3.0-7.3.3.1 ios.viodb13.rte:7.3.4.0-7.3.4.0 ios.viodb15.rte:7.3.4.0-7.3.4.0",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Multiple vulnerabilities in PostgreSQL affect PowerVM VIOS",
"ifixes": "See Bulletin",
"issued": "20260402",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2025-4207:5.9 / CVE-2025-8713:3.1 / CVE-2025-8714:8.8 / CVE-2025-8715:8.8"
},
"CVE-2025-6965": {
"url": "https://aix.software.ibm.com/aix/efixes/security/rpm_advisory4.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/rpm_advisory4.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/rpm_fix4.tar",
"filesets": "rpm.rte:4.15.1.1000-4.15.1.1016 rpm.rte:4.15.1.2000-4.15.1.2014 rpm.rte:4.18.1.2000-4.18.1.2006",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to a memory corruption issue (CVE-2025-6965) due to RPM",
"ifixes": "See Bulletin",
"issued": "20251006",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2025-6965:9.8"
},
"CVE-2026-24515": {
"url": "https://aix.software.ibm.com/aix/efixes/security/perl_advisory13.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/perl_advisory13.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/perl_fix13.tar",
"filesets": "perl.rte:5.34.0.0-5.34.1.9 perl.rte:5.38.0.0-5.38.2.4",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX Perl is vulnerable to a null pointer dereference (CVE-2026-24515) and an integer overflow (CVE-2026-25210)",
"ifixes": "See Bulletin",
"issued": "20260317",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2026-24515:2.5 / CVE-2026-25210:6.9"
},
"CVE-2026-27171": {
"url": "https://aix.software.ibm.com/aix/efixes/security/zlib_advisory3.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/zlib_advisory3.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/zlib_fix3.tar",
"filesets": "rpm.rte:4.9.1.3-4.15.1.1019 rpm.rte:4.15.1.2000-4.15.1.2015 rpm.rte:4.18.1.2000-4.18.1.2008 rpm.rte:4.20.1.2000-4.20.1.2001",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to denial of service due to zlib (CVE-2026-27171)",
"ifixes": "See Bulletin",
"issued": "20260722",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2026-27171:5.5"
},
"CVE-2026-34180": {
"url": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory48.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/openssl_advisory48.asc",
"download": "https://www-01.ibm.com/marketing/iwm/iwm/web/pickUrxNew.do?source=aixbp&S_PKG=openssl",
"filesets": "openssl.base:3.0.0.0-3.0.16.1000",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Multiple vulnerabilities impact AIX due to OpenSSL",
"ifixes": "openssl-3.0.21.1000.tar.Z",
"issued": "20260721",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2026-34180:7.5 / CVE-2026-34182:9.1 / CVE-2026-42766:5.9 / CVE-2026-42767:5.9 / CVE-2026-42770:3.7 / CVE-2026-45445:7.5 / CVE-2026-45446:4.8 / CVE-2026-45447:8.8 / CVE-2026-7383:8.1 / CVE-2026-9076:7.5"
},
"IJ10280": {
"url": "https://aix.software.ibm.com/aix/efixes/security/ntp_advisory11.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/ntp_advisory11.asc",
"download": "See Bulletin",
"filesets": "ntp.rte:7.4.2.8100-7.4.2.8110",
"fixedIn": "See Advisory",
"fixedInLink": "See Advisory",
"abstract": "There are vulnerabilities in NTPv4 that affect AIX.",
"ifixes": "IJ10280s3b.181206.epkg.Z",
"issued": "20181214",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2018-12327:5.9 / CVE-2018-7170:3.1"
},
"IJ17059": {
"url": "https://aix.software.ibm.com/aix/efixes/security/ntp_advisory12.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/ntp_advisory12.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/ntp_fix12.tar",
"filesets": "ntp.rte:7.4.2.8100-7.4.2.8121",
"fixedIn": "See Advisory",
"fixedInLink": "See Advisory",
"abstract": "There are vulnerabilities in NTPv4 that affect AIX.",
"ifixes": "IJ17059m9b.190719.epkg.Z",
"issued": "20190819",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2019-8936:5.3"
},
"IJ26684": {
"url": "https://aix.software.ibm.com/aix/efixes/security/ntp_advisory13.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/ntp_advisory13.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/ntp_fix13.tar",
"filesets": "ntp.rte:7.4.2.8100-7.4.2.8130",
"fixedIn": "See Advisory",
"fixedInLink": "See Advisory",
"abstract": "There are vulnerabilities in NTPv4 that affect AIX.",
"ifixes": "IJ26684s9a.200806.epkg.Z",
"issued": "20201026",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2020-11868:5.9 / CVE-2020-13817:7.4 / CVE-2020-15025:4.4"
},
"IJ26985": {
"url": "https://aix.software.ibm.com/aix/efixes/security/perl_advisory5.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/perl_advisory5.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/perl_fix5.tar",
"filesets": "perl.rte:5.20.1.0-5.20.1.3 perl.rte:5.28.1.0-5.28.1.3",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "There are vulnerabilities in Perl that affect AIX.",
"ifixes": "IJ26985s1a.200812.epkg.Z IJ26986s1a.200813.epkg.Z",
"issued": "20201209",
"updated": "20210304",
"reboot": "no",
"cvss": "CVE-2020-10543:9.8 / CVE-2020-10878:9.8 / CVE-2020-12723:9.8"
},
"IJ55344s9a": {
"url": "https://aix.software.ibm.com/aix/efixes/security/nas_advisory4.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/nas_advisory4.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/nas_fix4.tar",
"filesets": "krb5.client.rte:1.16.1.0-1.16.1.7",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX/VIOS is vulnerable to arbitrary file write due to Kerberos (CVE-2025-36244)",
"ifixes": "IJ55344s9a.250722.epkg.Z",
"issued": "20250916",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2025-36244:7.4"
},
"IV96311": {
"url": "https://aix.software.ibm.com/aix/efixes/security/ntp_advisory9.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/ntp_advisory9.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/ntp_fix9.tar",
"filesets": "ntp.rte:6.1.6.0-6.1.6.9 ntp.rte:7.1.0.0-7.1.0.9",
"fixedIn": "See Advisory",
"fixedInLink": "See Advisory",
"abstract": "There are multiple vulnerabilities in NTPv3 and NTPv4 that impact AIX",
"ifixes": "IV96311m5a.170518.epkg.Z IV96312m5a.170518.epkg.Z",
"issued": "20170707",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2017-6458:4.2 / CVE-2017-6462:1.6 / CVE-2017-6464:4.2 / CVE-2017-6451:1.8 / CVE-2017-6458:4.2 / CVE-2017-6462:1.6 / CVE-2017-6464:4.2"
},
"WS-2025-0004": {
"url": "https://aix.software.ibm.com/aix/efixes/security/perl_advisory12.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/perl_advisory12.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/perl_fix12.tar",
"filesets": "perl.rte:5.34.0.0-5.34.1.8 perl.rte:5.38.0.0-5.38.2.3",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to denial of service and possible code execution due to Perl (WS-2025-0004)",
"ifixes": "See Bulletin",
"issued": "20260205",
"updated": " ",
"reboot": "no",
"cvss": "WS-2025-0004:7.5"
},
"is22026s1a": {
"url": "https://aix.software.ibm.com/aix/efixes/security/invscout_advisory6.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/invscout_advisory6.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/invscout_fix6.tar",
"filesets": "invscout.rte:2.2.0.0-2.2.0.26",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX is vulnerable to arbitrary command execution due to invscout (CVE-2024-27260)",
"ifixes": "is22026s1a.240514.epkg.Z",
"issued": "20240515",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-27260:8.4"
},
"python-3.11.14.1": {
"url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory18.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/python_advisory18.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/python_fix18.tar",
"filesets": "python3.9.base:3.9.0.0-3.9.23.0 python3.11.base:3.11.0.0-3.11.14.0",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "AIX Python is vulnerable to a null pointer dereference (CVE-2026-24515) and an integer overflow (CVE-2026-25210)",
"ifixes": "python-3.11.14.1.tar.Z",
"issued": "20260317",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2026-24515:2.5 / CVE-2026-25210:6.9"
},
"python-3.11.15.0": {
"url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory19.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/python_advisory19.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/python_fix19.tar",
"filesets": "python3.9.base:3.9.0.0-3.9.23.0 python3.11.base:3.11.0.0-3.11.14.1",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Multiple vulnerabilities in Python affect AIX",
"ifixes": "python-3.11.15.0.tar.Z",
"issued": "20260415",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2025-12084:5.3 / CVE-2026-32776:5.5 / CVE-2026-32777:5.5 / CVE-2026-32778:5.5"
},
"python-3.11.15.1": {
"url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory20.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/python_advisory20.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/python_fix20.tar",
"filesets": "python3.9.base:3.9.0.0-3.9.24.0 python3.11.base:3.11.0.0-3.11.15.0",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Multiple vulnerabilities in Python affect AIX",
"ifixes": "python-3.11.15.1.tar.Z",
"issued": "20260714",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2026-2297:5.7 / CVE-2026-41080:2.9 / CVE-2026-4224:6.0 / CVE-2026-45186:7.5 / CVE-2026-50219:5.9 / CVE-2026-56131:4.9 / CVE-2026-56132:6.9 / CVE-2026-56403:6.9 / CVE-2026-56404:6.9 / CVE-2026-56405:6.9 / CVE-2026-56406:6.9 / CVE-2026-56407:6.9 / CVE-2026-56408:6.9 / CVE-2026-56409:6.5 / CVE-2026-56410:6.9 / CVE-2026-56411:6.9 / CVE-2026-56412:5.9 / CVE-2026-6100:9.1"
}
},
"HIPER": {"IJ52123": {
"url": "https://www.ibm.com/support/pages/node/7166703",
"bulletin": "https://www.ibm.com/support/pages/node/7166703",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp",
"filesets": "smbc.rte:7.2.302.6-7.2.302.5000",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Potential undetected data loss can occur when copying or writing to files on an SMB share using the AIX SMB Client",
"ifixes": "See Bulletin",
"issued": "20241022",
"updated": " ",
"reboot": "no",
"cvss": ""
}},
"SECURITY": {
"CVE-2019-8936": {
"url": "https://aix.software.ibm.com/aix/efixes/security/ntp_advisory12.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/ntp_advisory12.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/ntp_fix12.tar",
"filesets": "bos.net.tcp.ntp:7.2.3.0-7.2.3.15 bos.net.tcp.ntpd:7.2.3.0-7.2.3.15",
"fixedIn": "7200-03-04",
"fixedInLink": "7200-03-04<\/a>",
"abstract": "Vulnerabilities in NTP affect AIX",
"ifixes": "IJ17065m3a.190701.epkg.Z",
"issued": "20190819",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2019-8936:5.3"
},
"IJ09625": {
"url": "https://aix.software.ibm.com/aix/efixes/security/freebsd_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/freebsd_advisory.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/freebsd_fix.tar",
"filesets": "bos.net.tcp.client_core:7.2.3.0-7.2.3.15",
"fixedIn": "7200-03-03",
"fixedInLink": "7200-03-03<\/a>",
"abstract": "There is a vulnerability in FreeBSD that affects AIX.",
"ifixes": "IJ09625s0a.181010.epkg.Z IJ09625s2a.181203.epkg.Z",
"issued": "20181108",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2018-6922:7.5"
},
"IJ09805": {
"url": "https://aix.software.ibm.com/aix/efixes/security/solaris_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/solaris_advisory.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/solaris_fix.tar",
"filesets": "bos.net.tcp.client_core:7.2.3.0-7.2.3.0",
"fixedIn": "7200-03-02-1845",
"fixedInLink": "7200-03-02-1845",
"abstract": "There is a vulnerability in Oracle Solaris that affects AIX.",
"ifixes": "IJ09805s0a.181012.epkg.Z",
"issued": "20181211",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2017-3623:10"
},
"IJ11550": {
"url": "https://aix.software.ibm.com/aix/efixes/security/xorg_advisory3.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/xorg_advisory3.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/xorg_fix3.tar",
"filesets": "X11.base.rte:7.2.3.0-7.2.3.15",
"fixedIn": "7200-03-03",
"fixedInLink": "7200-03-03<\/a>",
"abstract": "There is a vulnerability in Xorg that affects AIX.",
"ifixes": "IJ11550s0a.181127.epkg.Z",
"issued": "20181211",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2018-14665:8.8"
},
"IJ20785": {
"url": "https://aix.software.ibm.com/aix/efixes/security/tcpdump_advisory5.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/tcpdump_advisory5.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/tcpdump_fix5.tar",
"filesets": "bos.net.tcp.tcpdump:7.2.3.0-7.2.3.16",
"fixedIn": "7200-03-05-2016",
"fixedInLink": "7200-03-05-2016<\/a>",
"abstract": "There is a vulnerability in tcpdump that affects AIX.",
"ifixes": "IJ20785s1a.191120.epkg.Z IJ20785s2a.191119.epkg.Z IJ20785s3a.191115.epkg.Z",
"issued": "20200108",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2018-14467:6.5 / CVE-2018-14463:6.5 / CVE-2018-14464:6.5 / CVE-2018-14470:6.5 / CVE-2018-10105:8.8 / CVE-2018-14461:6.5 / CVE-2018-10103:8.8 / CVE-2019-15167:6.5 / CVE-2018-14466:6.5 / CVE-2018-14469:6.5 / CVE-2018-14468:6.5 / CVE-2018-14881:6.5 / CVE-2018-14462:6.5 / CVE-2018-14880:6.5 / CVE-2018-14465:6.5 / CVE-2018-16451:5.5 / CVE-2018-16452:5.5 / CVE-2018-16230:5.5 / CVE-2019-15166:5.5 / CVE-2018-14879:6.1 / CVE-2018-16228:5.5 / CVE-2018-16229:5.5 / CVE-2018-16227:5.5 / CVE-2018-16300:5.5 / CVE-2018-14882:5.5 / CVE-2017-16808:7.5"
}
}
},
"latest": {
"name": "AIX 7.3 Technology Level 7300-03-00",
"version": "7300-03-00",
"releaseDate": "2024.12.12",
"eosps": "2027.12.31",
"url": "http://www.ibm.com/support/fixcentral/aix/quickorder?fixids=7300-03&function=fixId&includeRequisites=1&includeSupersedes=0&release=7.3&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/aix/quickorder?fixids=7300-03&function=fixId&includeRequisites=1&includeSupersedes=0&release=7.3&source=flrt",
"fixDetails": "https://www.ibm.com/support/fixcentral/aix/fixpackdetails?fixid=7300_03&fixname=7300-03&fixtype=group_TL&xmlUri=https://download4.boulder.ibm.com/sar/CMA/AXA/0cpr6/1/7300-03.xml",
"reboot": true,
"notes": [{"note": "IBM recommends that most users not upgrade AIX until the new version has been in the field for 90 days. You may wish to wait until October 15 to upgrade to 7300-04-01-2620"}],
"apars": {
"HIPER": {
"IJ53641": {
"url": "https://www.ibm.com/support/pages/node/7230030",
"bulletin": "https://www.ibm.com/support/pages/node/7230030",
"download": "https://aix.software.ibm.com/aix/ifixes/ij53641/",
"filesets": "bos.mp64:7.3.3.0-7.3.3.0",
"fixedIn": "7300-03-01",
"fixedInLink": "7300-03-01<\/a>",
"abstract": "Unexpected performance loss on AIX 7.3 TL3 with offload_iodone enabled",
"ifixes": "IJ53641s0a.250324.AIX73TL03SP00.epkg.Z",
"issued": "20250410",
"updated": " ",
"reboot": "yes",
"cvss": ""
},
"IJ53661": {
"url": "https://www.ibm.com/support/pages/node/7183873",
"bulletin": "https://www.ibm.com/support/pages/node/7183873",
"download": "https://aix.software.ibm.com/aix/ifixes/ij53660/",
"filesets": "bos.liveupdate.rte:7.3.3.0-7.3.3.0",
"fixedIn": "7300-03-01",
"fixedInLink": "7300-03-01<\/a>",
"abstract": "Live Kernel Update of a PowerVC managed LPAR may incorrectly remove a disk from the LPAR",
"ifixes": "IJ53661s0b.250421.AIX73TL03SP00.epkg.Z",
"issued": "20250603",
"updated": " ",
"reboot": "no",
"cvss": ""
}
},
"SECURITY": {
"IJ53792": {
"url": "https://aix.software.ibm.com/aix/efixes/security/nim_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/nim_advisory.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/nim_fix.tar",
"filesets": "bos.sysmgt.nim.client:7.3.3.0-7.3.3.0 bos.sysmgt.nim.master:7.3.3.0-7.3.3.0 bos.sysmgt.sysbr:7.3.3.0-7.3.3.0",
"fixedIn": "7300-03-01",
"fixedInLink": "7300-03-01<\/a>",
"abstract": "AIX is vulnerable to arbitrary command execution (CVE-2024-56346 CVE-2024-56347)",
"ifixes": "IJ53792m0a.250317.epkg.Z IJ53792m0b.250317.epkg.Z",
"issued": "20250318",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-56346:10 / CVE-2024-56347:9.6"
},
"IJ54059": {
"url": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory7.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory7.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/libxml2_fix7.tar",
"filesets": "bos.rte.control:7.3.3.0-7.3.3.0",
"fixedIn": "7300-03-01",
"fixedInLink": "7300-03-01<\/a>",
"abstract": "AIX is vulnerable to a denial of service due to libxml2 (CVE-2022-49043)",
"ifixes": "IJ54059s0a.250409.epkg.Z",
"issued": "20250425",
"updated": "20250506",
"reboot": "no",
"cvss": "CVE-2022-49043:8.1"
},
"IJ54754": {
"url": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory8.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory8.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/libxml2_fix8.tar",
"filesets": "bos.rte.control:7.3.3.0-7.3.3.0",
"fixedIn": "7300-03-01",
"fixedInLink": "7300-03-01<\/a>",
"abstract": "Multiple vulnerabilities in libxml2 affect AIX",
"ifixes": "IJ54754m0a.250522.epkg.Z",
"issued": "20250604",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-56171:7.8 / CVE-2025-24928:7.8 / CVE-2025-27113:7.5 / CVE-2025-32415:7.5"
},
"IJ55269": {
"url": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory9.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory9.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/libxml2_fix9.tar",
"filesets": "bos.rte.control:7.3.3.0-7.3.3.1",
"fixedIn": "7300-03-02",
"fixedInLink": "7300-03-02<\/a>",
"abstract": "Multiple vulnerabilities in libxml2 affect AIX",
"ifixes": "IJ55269m0a.250716.epkg.Z IJ55269s1a.250716.epkg.Z",
"issued": "20250717",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2025-49794:9.1 / CVE-2025-49795:7.5 / CVE-2025-49796:9.1 / CVE-2025-6021:7.5"
},
"IJ55695": {
"url": "https://aix.software.ibm.com/aix/efixes/security/xorg_advisory4.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/xorg_advisory4.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/xorg_fix4.tar",
"filesets": "X11.base.rte:7.3.3.0-7.3.3.0",
"fixedIn": "7300-03-02",
"fixedInLink": "7300-03-02<\/a>",
"abstract": "AIX is vulnerable to a denial of service (CVE-2025-49175 CVE-2025-49178) and an integer overflow (CVE-2025-49176 CVE-2025-49179)",
"ifixes": "IJ55695s1a.250912.epkg.Z",
"issued": "20251013",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2025-49175:6.1 / CVE-2025-49176:7.3 / CVE-2025-49178:5.5 / CVE-2025-49179:7.3"
},
"IJ55897": {
"url": "https://aix.software.ibm.com/aix/efixes/security/nim_advisory2.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/nim_advisory2.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/nim_fix2.tar",
"filesets": "bos.sysmgt.nim.client:7.3.3.0-7.3.3.1 bos.sysmgt.nim.master:7.3.3.0-7.3.3.1 bos.sysmgt.sysbr:7.3.3.0-7.3.3.1",
"fixedIn": "7300-03-02",
"fixedInLink": "7300-03-02<\/a>",
"abstract": "AIX is vulnerable to arbitrary command execution (CVE-2025-36251 CVE-2025-36250) insufficiently protected credentials (CVE-2025-36096) and path traversal (CVE-2025-36236)",
"ifixes": "IJ55897m1a.251112.epkg.Z IJ55897m1b.251112.epkg.Z",
"issued": "20251113",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2025-36096:9 / CVE-2025-36236:8.2 / CVE-2025-36250:10 / CVE-2025-36251:9.6"
},
"IJ57128": {
"url": "https://aix.software.ibm.com/aix/efixes/security/xorg_advisory5.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/xorg_advisory5.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/xorg_fix5.tar",
"filesets": "X11.base.rte:7.3.3.0-7.3.3.1",
"fixedIn": "7300-03-03",
"fixedInLink": "7300-03-03",
"abstract": "AIX Xorg X Server is vulnerable to memory corruption or a denial of service (CVE-2025-62230 CVE-2025-62231)",
"ifixes": "IJ57128m1a.260217.epkg.Z IJ57128m1b.260224.epkg.Z",
"issued": "20260219",
"updated": "20260224",
"reboot": "no",
"cvss": "CVE-2025-62230:7.3 / CVE-2025-62231:7.3"
},
"IJ57292": {
"url": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory10.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory10.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/libxml2_fix10.tar",
"filesets": "bos.rte.control:7.3.3.0-7.3.3.2",
"fixedIn": "7300-03-03",
"fixedInLink": "7300-03-03",
"abstract": "Vulnerability in libxml2 (CVE-2025-8732) affects AIX",
"ifixes": "IJ57292s1a.260212.epkg.Z IJ57292s1b.260224.epkg.Z",
"issued": "20260218",
"updated": "20260314",
"reboot": "no",
"cvss": "CVE-2025-8732:3.3"
},
"IJ58140": {
"url": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory11.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory11.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/libxml2_fix11.tar",
"filesets": "bos.rte.control:7.3.3.0-7.3.3.2",
"fixedIn": "7300-03-03",
"fixedInLink": "7300-03-03",
"abstract": "Vulnerabilities in libxml2 (CVE-2026-0989 CVE-2026-0990 CVE-2026-0992) affect AIX",
"ifixes": "IJ58140m2a.260527.epkg.Z",
"issued": "20260528",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2026-0989:3.7 / CVE-2026-0990:5.9 / CVE-2026-0992:2.9 / CVE-2026-6732:7.5"
}
}
}
}
},
"update": {
"name": "AIX 7.2 Technology Level 7200-03-07",
"version": "7200-03-07-2114",
"releaseDate": "2021.06.25",
"eosps": "2021.09.30",
"url": "http://www.ibm.com/support/fixcentral/aix/quickorder?fixids=U889859,U889860&function=fixId&includeRequisites=1&includeSupersedes=0&release=7.2&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/aix/quickorder?fixids=U889859,U889860&function=fixId&includeRequisites=1&includeSupersedes=0&release=7.2&source=flrt",
"fixDetails": "https://www.ibm.com/support/fixcentral/aix/fixpackdetails?fixid=U889860&fixname=7200-03-07-2114&fixtype=group_SP&xmlUri=https://delivery04.dhe.ibm.com/sar/CMA/AXA/09skk/1/7200-03-07.xml",
"reboot": true,
"notes": [{"note": "support has ended for this update"}],
"apars": {
"HIPER": {
"IJ34340": {
"url": "https://www.ibm.com/support/pages/node/6480733",
"bulletin": "https://www.ibm.com/support/pages/node/6480733",
"download": "https://aix.software.ibm.com/aix/ifixes/ij34340/",
"filesets": "bos.net.tcp.client_core:7.2.3.0-7.2.3.21",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Applications can terminate on systems with active IPv6 traffic",
"ifixes": "IJ34340s3a.210810.AIX72TL03SP03.epkg.Z IJ34340s7a.210811.AIX72TL03SP07.epkg.Z",
"issued": "20210819",
"updated": " ",
"reboot": "yes",
"cvss": " "
},
"IJ52123": {
"url": "https://www.ibm.com/support/pages/node/7166703",
"bulletin": "https://www.ibm.com/support/pages/node/7166703",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp",
"filesets": "smbc.rte:7.2.302.6-7.2.302.5000",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Potential undetected data loss can occur when copying or writing to files on an SMB share using the AIX SMB Client",
"ifixes": "See Bulletin",
"issued": "20241022",
"updated": " ",
"reboot": "no",
"cvss": ""
}
},
"SECURITY": {
"IJ32285": {
"url": "https://aix.software.ibm.com/aix/efixes/security/ksh_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/ksh_advisory.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/ksh_fix.tar",
"filesets": "bos.rte.shell:7.2.3.0-7.2.3.20",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "There is a vulnerability in Korn Shell (ksh) that affects AIX",
"ifixes": "IJ32285s4a.210628.epkg.Z",
"issued": "20210730",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2021-29741:8.4"
},
"IJ32629": {
"url": "https://aix.software.ibm.com/aix/efixes/security/kernel_advisory2.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/kernel_advisory2.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/kernel_fix2.tar",
"filesets": "bos.mp64:7.2.3.0-7.2.3.21",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "There are multiple vulnerabilities in the AIX kernel",
"ifixes": "IJ32629m5a.210805.epkg.Z IJ32629m6a.210805.epkg.Z IJ32629s7a.210805.epkg.Z",
"issued": "20210825",
"updated": " ",
"reboot": "yes",
"cvss": "CVE-2021-29727:6.2 / CVE-2021-29801:8.4 / CVE-2021-29862:6.2"
},
"IJ33277": {
"url": "https://aix.software.ibm.com/aix/efixes/security/bind_advisory19.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/bind_advisory19.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/bind_fix19.tar",
"filesets": "bos.net.tcp.bind:7.2.3.0-7.2.3.15",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "There is a vulnerability in BIND that affects AIX.",
"ifixes": "IJ33277s7a.210622.epkg.Z",
"issued": "20210729",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2021-25215:7.5"
}
}
},
"latest": {
"name": "AIX 7.2 Technology Level 7200-03-07",
"version": "7200-03-07-2114",
"releaseDate": "2021.06.25",
"eosps": "2021.09.30",
"url": "http://www.ibm.com/support/fixcentral/aix/quickorder?fixids=U889859,U889860&function=fixId&includeRequisites=1&includeSupersedes=0&release=7.2&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/aix/quickorder?fixids=U889859,U889860&function=fixId&includeRequisites=1&includeSupersedes=0&release=7.2&source=flrt",
"fixDetails": "https://www.ibm.com/support/fixcentral/aix/fixpackdetails?fixid=U889860&fixname=7200-03-07-2114&fixtype=group_SP&xmlUri=https://delivery04.dhe.ibm.com/sar/CMA/AXA/09skk/1/7200-03-07.xml",
"reboot": true,
"notes": [{"note": "support has ended for this update"}],
"apars": {
"HIPER": {
"IJ34340": {
"url": "https://www.ibm.com/support/pages/node/6480733",
"bulletin": "https://www.ibm.com/support/pages/node/6480733",
"download": "https://aix.software.ibm.com/aix/ifixes/ij34340/",
"filesets": "bos.net.tcp.client_core:7.2.3.0-7.2.3.21",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Applications can terminate on systems with active IPv6 traffic",
"ifixes": "IJ34340s3a.210810.AIX72TL03SP03.epkg.Z IJ34340s7a.210811.AIX72TL03SP07.epkg.Z",
"issued": "20210819",
"updated": " ",
"reboot": "yes",
"cvss": " "
},
"IJ52123": {
"url": "https://www.ibm.com/support/pages/node/7166703",
"bulletin": "https://www.ibm.com/support/pages/node/7166703",
"download": "https://www.ibm.com/resources/mrs/assets?source=aixbp",
"filesets": "smbc.rte:7.2.302.6-7.2.302.5000",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "Potential undetected data loss can occur when copying or writing to files on an SMB share using the AIX SMB Client",
"ifixes": "See Bulletin",
"issued": "20241022",
"updated": " ",
"reboot": "no",
"cvss": ""
}
},
"SECURITY": {
"IJ32285": {
"url": "https://aix.software.ibm.com/aix/efixes/security/ksh_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/ksh_advisory.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/ksh_fix.tar",
"filesets": "bos.rte.shell:7.2.3.0-7.2.3.20",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "There is a vulnerability in Korn Shell (ksh) that affects AIX",
"ifixes": "IJ32285s4a.210628.epkg.Z",
"issued": "20210730",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2021-29741:8.4"
},
"IJ32629": {
"url": "https://aix.software.ibm.com/aix/efixes/security/kernel_advisory2.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/kernel_advisory2.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/kernel_fix2.tar",
"filesets": "bos.mp64:7.2.3.0-7.2.3.21",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "There are multiple vulnerabilities in the AIX kernel",
"ifixes": "IJ32629m5a.210805.epkg.Z IJ32629m6a.210805.epkg.Z IJ32629s7a.210805.epkg.Z",
"issued": "20210825",
"updated": " ",
"reboot": "yes",
"cvss": "CVE-2021-29727:6.2 / CVE-2021-29801:8.4 / CVE-2021-29862:6.2"
},
"IJ33277": {
"url": "https://aix.software.ibm.com/aix/efixes/security/bind_advisory19.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/bind_advisory19.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/bind_fix19.tar",
"filesets": "bos.net.tcp.bind:7.2.3.0-7.2.3.15",
"fixedIn": "See Bulletin",
"fixedInLink": "See Bulletin",
"abstract": "There is a vulnerability in BIND that affects AIX.",
"ifixes": "IJ33277s7a.210622.epkg.Z",
"issued": "20210729",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2021-25215:7.5"
}
}
}
}
},
"upgrade": {
"name": "AIX 7.3 Technology Level 7300-04-00",
"version": "7300-04-00",
"releaseDate": "2025.12.05",
"eosps": "2028.12.31",
"url": "http://www.ibm.com/support/fixcentral/aix/quickorder?fixids=7300_04&function=fixId&includeRequisites=1&includeSupersedes=0&release=7.4&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/aix/quickorder?fixids=7300_04&function=fixId&includeRequisites=1&includeSupersedes=0&release=7.4&source=flrt",
"fixDetails": "https://www.ibm.com/support/fixcentral/aix/fixpackdetails?fixid=7300_04&fixname=7300-04&fixtype=group_TL&xmlUri=https://delivery04-mul.dhe.ibm.com/sar/CMA/AXA/0dks0/1/7300-04.xml",
"reboot": true,
"apars": {"SECURITY": {
"IJ57232": {
"url": "https://aix.software.ibm.com/aix/efixes/security/xorg_advisory5.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/xorg_advisory5.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/xorg_fix5.tar",
"filesets": "X11.base.rte:7.3.4.0-7.3.4.0",
"fixedIn": "7300-04-01",
"fixedInLink": "7300-04-01<\/a>",
"abstract": "AIX Xorg X Server is vulnerable to memory corruption or a denial of service (CVE-2025-62230 CVE-2025-62231)",
"ifixes": "IJ57232s0a.260128.epkg.Z",
"issued": "20260219",
"updated": "20260224",
"reboot": "no",
"cvss": "CVE-2025-62230:7.3 / CVE-2025-62231:7.3"
},
"IJ57282": {
"url": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory10.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory10.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/libxml2_fix10.tar",
"filesets": "bos.rte.control:7.3.4.0-7.3.4.0",
"fixedIn": "7300-04-01",
"fixedInLink": "7300-04-01<\/a>",
"abstract": "Vulnerability in libxml2 (CVE-2025-8732) affects AIX",
"ifixes": "IJ57282s0a.260206.epkg.Z",
"issued": "20260218",
"updated": "20260314",
"reboot": "no",
"cvss": "CVE-2025-8732:3.3"
},
"IJ58122": {
"url": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory11.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory11.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/libxml2_fix11.tar",
"filesets": "bos.rte.control:7.3.4.0-7.3.4.0",
"fixedIn": "7300-04-01",
"fixedInLink": "7300-04-01<\/a>",
"abstract": "Vulnerabilities in libxml2 (CVE-2026-0989 CVE-2026-0990 CVE-2026-0992) affect AIX",
"ifixes": "IJ58122m0a.260528.epkg.Z",
"issued": "20260528",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2026-0989:3.7 / CVE-2026-0990:5.9 / CVE-2026-0992:2.9 / CVE-2026-6732:7.5"
}
}},
"latest": {
"name": "AIX 7.3 Technology Level 7300-03-00",
"version": "7300-03-00",
"releaseDate": "2024.12.12",
"eosps": "2027.12.31",
"url": "http://www.ibm.com/support/fixcentral/aix/quickorder?fixids=7300-03&function=fixId&includeRequisites=1&includeSupersedes=0&release=7.3&source=flrt",
"download": "http://www.ibm.com/support/fixcentral/aix/quickorder?fixids=7300-03&function=fixId&includeRequisites=1&includeSupersedes=0&release=7.3&source=flrt",
"fixDetails": "https://www.ibm.com/support/fixcentral/aix/fixpackdetails?fixid=7300_03&fixname=7300-03&fixtype=group_TL&xmlUri=https://download4.boulder.ibm.com/sar/CMA/AXA/0cpr6/1/7300-03.xml",
"reboot": true,
"apars": {
"HIPER": {
"IJ53641": {
"url": "https://www.ibm.com/support/pages/node/7230030",
"bulletin": "https://www.ibm.com/support/pages/node/7230030",
"download": "https://aix.software.ibm.com/aix/ifixes/ij53641/",
"filesets": "bos.mp64:7.3.3.0-7.3.3.0",
"fixedIn": "7300-03-01",
"fixedInLink": "7300-03-01<\/a>",
"abstract": "Unexpected performance loss on AIX 7.3 TL3 with offload_iodone enabled",
"ifixes": "IJ53641s0a.250324.AIX73TL03SP00.epkg.Z",
"issued": "20250410",
"updated": " ",
"reboot": "yes",
"cvss": ""
},
"IJ53661": {
"url": "https://www.ibm.com/support/pages/node/7183873",
"bulletin": "https://www.ibm.com/support/pages/node/7183873",
"download": "https://aix.software.ibm.com/aix/ifixes/ij53660/",
"filesets": "bos.liveupdate.rte:7.3.3.0-7.3.3.0",
"fixedIn": "7300-03-01",
"fixedInLink": "7300-03-01<\/a>",
"abstract": "Live Kernel Update of a PowerVC managed LPAR may incorrectly remove a disk from the LPAR",
"ifixes": "IJ53661s0b.250421.AIX73TL03SP00.epkg.Z",
"issued": "20250603",
"updated": " ",
"reboot": "no",
"cvss": ""
}
},
"SECURITY": {
"IJ53792": {
"url": "https://aix.software.ibm.com/aix/efixes/security/nim_advisory.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/nim_advisory.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/nim_fix.tar",
"filesets": "bos.sysmgt.nim.client:7.3.3.0-7.3.3.0 bos.sysmgt.nim.master:7.3.3.0-7.3.3.0 bos.sysmgt.sysbr:7.3.3.0-7.3.3.0",
"fixedIn": "7300-03-01",
"fixedInLink": "7300-03-01<\/a>",
"abstract": "AIX is vulnerable to arbitrary command execution (CVE-2024-56346 CVE-2024-56347)",
"ifixes": "IJ53792m0a.250317.epkg.Z IJ53792m0b.250317.epkg.Z",
"issued": "20250318",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-56346:10 / CVE-2024-56347:9.6"
},
"IJ54059": {
"url": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory7.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory7.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/libxml2_fix7.tar",
"filesets": "bos.rte.control:7.3.3.0-7.3.3.0",
"fixedIn": "7300-03-01",
"fixedInLink": "7300-03-01<\/a>",
"abstract": "AIX is vulnerable to a denial of service due to libxml2 (CVE-2022-49043)",
"ifixes": "IJ54059s0a.250409.epkg.Z",
"issued": "20250425",
"updated": "20250506",
"reboot": "no",
"cvss": "CVE-2022-49043:8.1"
},
"IJ54754": {
"url": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory8.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory8.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/libxml2_fix8.tar",
"filesets": "bos.rte.control:7.3.3.0-7.3.3.0",
"fixedIn": "7300-03-01",
"fixedInLink": "7300-03-01<\/a>",
"abstract": "Multiple vulnerabilities in libxml2 affect AIX",
"ifixes": "IJ54754m0a.250522.epkg.Z",
"issued": "20250604",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2024-56171:7.8 / CVE-2025-24928:7.8 / CVE-2025-27113:7.5 / CVE-2025-32415:7.5"
},
"IJ55269": {
"url": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory9.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory9.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/libxml2_fix9.tar",
"filesets": "bos.rte.control:7.3.3.0-7.3.3.1",
"fixedIn": "7300-03-02",
"fixedInLink": "7300-03-02<\/a>",
"abstract": "Multiple vulnerabilities in libxml2 affect AIX",
"ifixes": "IJ55269m0a.250716.epkg.Z IJ55269s1a.250716.epkg.Z",
"issued": "20250717",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2025-49794:9.1 / CVE-2025-49795:7.5 / CVE-2025-49796:9.1 / CVE-2025-6021:7.5"
},
"IJ55695": {
"url": "https://aix.software.ibm.com/aix/efixes/security/xorg_advisory4.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/xorg_advisory4.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/xorg_fix4.tar",
"filesets": "X11.base.rte:7.3.3.0-7.3.3.0",
"fixedIn": "7300-03-02",
"fixedInLink": "7300-03-02<\/a>",
"abstract": "AIX is vulnerable to a denial of service (CVE-2025-49175 CVE-2025-49178) and an integer overflow (CVE-2025-49176 CVE-2025-49179)",
"ifixes": "IJ55695s1a.250912.epkg.Z",
"issued": "20251013",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2025-49175:6.1 / CVE-2025-49176:7.3 / CVE-2025-49178:5.5 / CVE-2025-49179:7.3"
},
"IJ55897": {
"url": "https://aix.software.ibm.com/aix/efixes/security/nim_advisory2.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/nim_advisory2.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/nim_fix2.tar",
"filesets": "bos.sysmgt.nim.client:7.3.3.0-7.3.3.1 bos.sysmgt.nim.master:7.3.3.0-7.3.3.1 bos.sysmgt.sysbr:7.3.3.0-7.3.3.1",
"fixedIn": "7300-03-02",
"fixedInLink": "7300-03-02<\/a>",
"abstract": "AIX is vulnerable to arbitrary command execution (CVE-2025-36251 CVE-2025-36250) insufficiently protected credentials (CVE-2025-36096) and path traversal (CVE-2025-36236)",
"ifixes": "IJ55897m1a.251112.epkg.Z IJ55897m1b.251112.epkg.Z",
"issued": "20251113",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2025-36096:9 / CVE-2025-36236:8.2 / CVE-2025-36250:10 / CVE-2025-36251:9.6"
},
"IJ57128": {
"url": "https://aix.software.ibm.com/aix/efixes/security/xorg_advisory5.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/xorg_advisory5.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/xorg_fix5.tar",
"filesets": "X11.base.rte:7.3.3.0-7.3.3.1",
"fixedIn": "7300-03-03",
"fixedInLink": "7300-03-03",
"abstract": "AIX Xorg X Server is vulnerable to memory corruption or a denial of service (CVE-2025-62230 CVE-2025-62231)",
"ifixes": "IJ57128m1a.260217.epkg.Z IJ57128m1b.260224.epkg.Z",
"issued": "20260219",
"updated": "20260224",
"reboot": "no",
"cvss": "CVE-2025-62230:7.3 / CVE-2025-62231:7.3"
},
"IJ57292": {
"url": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory10.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory10.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/libxml2_fix10.tar",
"filesets": "bos.rte.control:7.3.3.0-7.3.3.2",
"fixedIn": "7300-03-03",
"fixedInLink": "7300-03-03",
"abstract": "Vulnerability in libxml2 (CVE-2025-8732) affects AIX",
"ifixes": "IJ57292s1a.260212.epkg.Z IJ57292s1b.260224.epkg.Z",
"issued": "20260218",
"updated": "20260314",
"reboot": "no",
"cvss": "CVE-2025-8732:3.3"
},
"IJ58140": {
"url": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory11.asc",
"bulletin": "https://aix.software.ibm.com/aix/efixes/security/libxml2_advisory11.asc",
"download": "https://aix.software.ibm.com/aix/efixes/security/libxml2_fix11.tar",
"filesets": "bos.rte.control:7.3.3.0-7.3.3.2",
"fixedIn": "7300-03-03",
"fixedInLink": "7300-03-03",
"abstract": "Vulnerabilities in libxml2 (CVE-2026-0989 CVE-2026-0990 CVE-2026-0992) affect AIX",
"ifixes": "IJ58140m2a.260527.epkg.Z",
"issued": "20260528",
"updated": " ",
"reboot": "no",
"cvss": "CVE-2026-0989:3.7 / CVE-2026-0990:5.9 / CVE-2026-0992:2.9 / CVE-2026-6732:7.5"
}
}
}
}
},
"minimum": {
"name": "AIX 7.2 Technology Level 7200-05-03",
"version": "7200-05-03-2148",
"releaseDate": "2021.12.10",
"fixDetails": "https://www.ibm.com/support/fixcentral/aix/fixpackdetails?fixid=U891100&fixname=7200-05-03-2148&fixtype=group_SP&xmlUri=https://download4.boulder.ibm.com/sar/CMA/AXA/0a512/7/7200-05-03.xml",
"reboot": true
}
}}}
]}