[AIX-Announcements] BES Auto Notification: New Fixlets Published in Fixlet Site: 'Patches for AIX'

[Notification of New AIX Fixlet Messages]

Fixlet Site - 'Patches for AIX'
Current Version: 367	Published: Mon, 14 Apr 2014 19:32:13  GMT

New Fixlets:
============

***************************************************************
Title: AIX 6.1: Security Advisory: AIX OpenSSL Heartbleed Vulnerability
Severity: Security Advisory
Fixlet ID: 61140401
Fixlet Link: http://www14.software.ibm.com/webapp/set2/subscriptions/onvdq?mode=7&heading=AIX61&path=/201404/SECURITY/20140410/datafile144855&label=AIX%20OpenSSL%20Heartbleed%20Vulnerability%20CVE-2014-0160
Fixlet Link: http://support.bigfix.com/bes/sites/aixpatches.html

Fixlet Description: IBM has released a bulletin for AIX 6.1: AIX OpenSSL Heartbleed Vulnerability, which details several security vulnerabilities. This Fixlet can be used to deploy the interim fix (ifix) provided by IBM. This ifix disables the OpenSSL heartbeat option by compiling with -DOPENSSL_NO_HEARTBEATS. To view more information about this issue, please select the link below.

***************************************************************
Title: AIX 7.1: Security Advisory: AIX OpenSSL Heartbleed Vulnerability
Severity: Security Advisory
Fixlet ID: 71140401
Fixlet Link: http://www14.software.ibm.com/webapp/set2/subscriptions/onvdq?mode=7&heading=AIX71&path=/201404/SECURITY/20140410/datafile144855&label=AIX%20OpenSSL%20Heartbleed%20Vulnerability%20CVE-2014-0160
Fixlet Link: http://support.bigfix.com/bes/sites/aixpatches.html

Fixlet Description: IBM has released a bulletin for AIX 7.1: AIX OpenSSL Heartbleed Vulnerability, which details several security vulnerabilities. This Fixlet can be used to deploy the interim fix (ifix) provided by IBM. This ifix disables the OpenSSL heartbeat option by compiling with -DOPENSSL_NO_HEARTBEATS. To view more information about this issue, please select the link below.