Mark, there is a way to identify such PTFs without access to the holddata,
but the CVE information is not accessible.

ITschak Mugzach
*|** IronSphere Platform* *|* *Information Security Continuous Monitoring
for z/OS, x/Linux & IBM I **| z/VM coming soon  *




On Wed, Jan 10, 2024 at 10:43 PM Mark Jacobs <
00000224d287a4b1-dmarc-requ...@listserv.ua.edu> wrote:

> Yes. They make their way into normal RSUs just like all other recommended
> PTFs. Without access to the security portal they won't be identified as
> SECINT PTFs though.
>
> Mark Jacobs
>
> Sent from ProtonMail, Swiss-based encrypted email.
>
> GPG Public Key -
> https://api.protonmail.ch/pks/lookup?op=get&search=markjac...@protonmail.com
>
>
> On Wednesday, January 10th, 2024 at 3:22 PM, rpinion865 <
> 0000042a019916dd-dmarc-requ...@listserv.ua.edu> wrote:
>
>
> > Which begs the next question. Would security related PTFs make their way
> into normal RSUs, or must they be ordered separately as per the holddata?
> >
> >
> >
> >
> > Sent with Proton Mail secure email.
> >
> > On Wednesday, January 10th, 2024 at 3:14 PM, Allan Staller
> 00000387911dea17-dmarc-requ...@listserv.ua.edu wrote:
> >
> >
> >
> > > Classification: Confidential
> > >
> > > This is a severely manual process.
> > > The PTFS/APARS can be determined from the HOLDDATA.
> > >
> > > The PTFs are individually orderable via ShopZ (just like any other
> PTF). The only difference is that the PTF/APAR information is only
> available in the HOLDDATA.
> > >
> > > HTH,
> > >
> > > -----Original Message-----
> > > From: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU On
> Behalf Of rpinion865
> > >
> > > Sent: Wednesday, January 10, 2024 2:03 PM
> > > To: IBM-MAIN@LISTSERV.UA.EDU
> > > Subject: IBM Security Portal
> > >
> > > [CAUTION: This Email is from outside the Organization. Unless you
> trust the sender, Don't click links or open attachments as it may be a
> Phishing email, which can steal your Information and compromise your
> Computer.]
> > >
> > > I know how to navigate to IBM's Security Portal and pull down the
> security hold data. My question pertains to where does one get the security
> related PTFs and APARs. In other words, do the security related PTFs and
> APARs have to be pulled down from another site, as opposed to the site
> where one pulls down general maintenance? Thanks in advance.
> > >
> > > Sent with Proton Mail secure email.
> > >
> > > ----------------------------------------------------------------------
> > > For IBM-MAIN subscribe / signoff / archive access instructions, send
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> > > ::DISCLAIMER::
> > > ________________________________
> > > The contents of this e-mail and any attachment(s) are confidential and
> intended for the named recipient(s) only. E-mail transmission is not
> guaranteed to be secure or error-free as information could be intercepted,
> corrupted, lost, destroyed, arrive late or incomplete, or may contain
> viruses in transmission. The e mail and its contents (with or without
> referred errors) shall therefore not attach any liability on the originator
> or HCL or its affiliates. Views or opinions, if any, presented in this
> email are solely those of the author and may not necessarily reflect the
> views or opinions of HCL or its affiliates. Any form of reproduction,
> dissemination, copying, disclosure, modification, distribution and / or
> publication of this message without the prior written consent of authorized
> representative of HCL is strictly prohibited. If you have received this
> email in error please delete it and notify the sender immediately. Before
> opening any email and/or attachments, please check them for viruses and
> other defects.
> > > ________________________________
> > >
> > > ----------------------------------------------------------------------
> > > For IBM-MAIN subscribe / signoff / archive access instructions,
> > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
> >
> >
> > ----------------------------------------------------------------------
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to