Hello Gerd,

Thank you for the info. After much searching, I finally found it here:
https://www.ibm.com/support/pages/node/6537634

I still can not find it on IBM's PSIRT site.

On Mon, Jan 3, 2022 at 11:57 AM Gerd Becker <gerd.bec...@cristie.de> wrote:

> Hello Uwe, hello Zoltan,
> just today we got another Flash from IBM adressig the log4j problem in
> Spectrum Protect Plus:
> Security Bulletin: Vulnerabilities in Apache Log4j impact IBM Spectrum
> Protect Plus (CVE-2021-45105, CVE-2021-45046)
> When upgrading to 10.1.9.2, the problem should be solved.
>
> Kind Regards
> Gerd Becker
>
> Gerd Becker
> Head of Solution Competence Center
>
> Cristie Data GmbH | #atyourservice
> Nordring 53-55 | D-63843 Niedernberg
> Telefon: +49 6028 9795 744 | Fax: +49 6028 9795 799 | Mobil: +49 160
> 98100120
> E-Mail: gerd.bec...@cristie.de<mailto:gerd.bec...@cristie.de> | Internet:
> www.cristie.de<http://www.cristie.de>
> Geschäftsführer: Ian Cameron, Volker Wester | Amtsgericht Aschaffenburg
> HRB9393
>
> Datenschutz - Information über die Speicherung Ihrer personenbezogenen
> Daten gemäß den Artikeln 12, 13 und 14 DSGVO
> siehe: https://www.cristie.de/datenschutz
>
> Gerd Becker
> Head of Solution Competence Center
>
> Cristie Data GmbH | #atyourservice
> Nordring 53-55 | D-63843 Niedernberg
> Telefon: +49 6028 9795 744 | Fax: +49 6028 9795 799 | Mobil: +49 160
> 98100120
> E-Mail: gerd.bec...@cristie.de<mailto:gerd.bec...@cristie.de> | Internet:
> www.cristie.de<http://www.cristie.de>
> Geschäftsführer: Ian Cameron, Volker Wester | Amtsgericht Aschaffenburg
> HRB9393
>
> Datenschutz - Information über die Speicherung Ihrer personenbezogenen
> Daten gemäß den Artikeln 12, 13 und 14 DSGVO
> siehe: https://www.cristie.de/datenschutz
>
> -----Ursprüngliche Nachricht-----
> Von: ADSM: Dist Stor Manager <ADSM-L@VM.MARIST.EDU<mailto:
> ADSM-L@VM.MARIST.EDU>> Im Auftrag von Zoltan Forray
> Gesendet: Montag, 3. Januar 2022 14:51
> An: ADSM-L@VM.MARIST.EDU<mailto:ADSM-L@VM.MARIST.EDU>
> Betreff: Re: [ADSM-L] Spectrum Protect Plus 10.1.9.2
>
> [Sie erhalten nicht oft E-Mail von "zfor...@vcu.edu<mailto:zfor...@vcu.edu>".
> Weitere Informationen, warum dies wichtig ist, finden Sie unter "
> http://aka.ms/LearnAboutSenderIdentification";.]
>
> Hello Uwe,
>
> Thank you for the response.  If that is true, then we have a more serious
> problem.  We have had to restart the appliance twice since upgrading on
> December 22nd.  I don't see anything on the PSIRT page about addressing
> anything other than 2.15 in SPP.
>
> On Mon, Jan 3, 2022 at 8:36 AM Uwe Schreiber <uwe.h.schrei...@t-online.de
> <mailto:uwe.h.schrei...@t-online.de>>
> wrote:
>
> > Hello Zoltan,
> >
> > AFAIK 10.1.9 iFix2 does only include Log4j 2.17.0
> >
> > Regards, Uwe
> >
> > -----Original Message-----
> > From: ADSM: Dist Stor Manager <ADSM-L@VM.MARIST.EDU<mailto:
> ADSM-L@VM.MARIST.EDU>> On Behalf Of
> > Zoltan Forray
> > Sent: Montag, 3. Januar 2022 14:22
> > To: ADSM-L@VM.MARIST.EDU<mailto:ADSM-L@VM.MARIST.EDU>
> > Subject: [ADSM-L] Spectrum Protect Plus 10.1.9.2
> >
> > Can anyone here from IBM tell us what issues are addressed in ifix2?
> >
> > Against better judgment, we jumped from 10.1.8.2 to 10.1.9.1 to
> > mitigate Log4j but are now having intermittent scheduling freeze-ups
> > (e.g. suddenly all policies/report schedules stop running/being
> > scheduled) requiring a reboot of the appliance.
> >
> > IBM is infamous for releasing patches/updates but not updating the
> > documentation for many days later.  We have already opened a ticket
> > for the problem itself.
> >
> > --
> > *Zoltan Forray*
> > Backup Systems Administrator
> > VMware Administrator
> > Virginia Commonwealth University
> > UCC/Office of Technology Services
> > www.ucc.vcu.edu<http://www.ucc.vcu.edu>
> > zfor...@vcu.edu<mailto:zfor...@vcu.edu> - 804-828-4807
> > Don't be a phishing victim - VCU and other reputable organizations
> > will never use email to request that you reply with your password,
> > social security number or confidential personal information. For more
> > details visit http://phishing.vcu.edu/
> > <https://adminmicro2.questionpro.com>
> >
>
>
> --
> *Zoltan Forray*
> Backup Systems Administrator
> VMware Administrator
> Virginia Commonwealth University
> UCC/Office of Technology Services
> www.ucc.vcu.edu<http://www.ucc.vcu.edu>
> zfor...@vcu.edu<mailto:zfor...@vcu.edu> - 804-828-4807
> Don't be a phishing victim - VCU and other reputable organizations will
> never use email to request that you reply with your password, social
> security number or confidential personal information. For more details
> visit http://phishing.vcu.edu/ <https://adminmicro2.questionpro.com>
>


-- 
*Zoltan Forray*
Backup Systems Administrator
VMware Administrator
Virginia Commonwealth University
UCC/Office of Technology Services
www.ucc.vcu.edu
zfor...@vcu.edu - 804-828-4807
Don't be a phishing victim - VCU and other reputable organizations will
never use email to request that you reply with your password, social
security number or confidential personal information. For more details
visit http://phishing.vcu.edu/
<https://adminmicro2.questionpro.com>

Reply via email to