Interesting that SIS responds:  Item VM64258 is not available to
display.

But one can display the PTF.

-----Original Message-----
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Alan Altmark
Sent: Wednesday, January 16, 2008 10:47 AM
To: [email protected]
Subject: Re: Security Updates


On Wednesday, 01/16/2008 at 09:40 EST, "Huegel, Thomas" 
<[EMAIL PROTECTED]> wrote:
> I just can't let this go.
> Has anyone ever had some 'WINDOZE' auditor come in and ask if you are
> up-to-date with your z/VM security patches from IBM?  

In my experience talking to many customers, an auditor is an auditor is
an 
auditor.  They know what *they* know.  They don't know what *you* know.

It often turns out that they aren't *really* Windows auditors, but are 
just auditors who have never seen anything other than Windows.  If they 
showed up asking to check some registry entries on your Linux box, you'd

have a good chuckle, too.

But, yes, it is SOP for companies to apply "due diligence" to mainframe 
software security issues, including z/VM. 
When we close a security or integrity APAR, it will be placed on an RSU.

Note that z/VM 5.3 RSU 0703 contains
  VM64258 UM32131 CP  INTEGRITY APAR

(from http://www.vm.ibm.com/service/rsu/esa530.html)  You may also see a

description of "SECURITY APAR".

Alan Altmark
z/VM Development
IBM Endicott
--------------------------------------------------------

This message w/attachments (message) may be privileged, confidential or 
proprietary, and if you are not an intended recipient, please notify the 
sender, do not use or share it and delete it. Unless specifically indicated, 
this message is not an offer to sell or a solicitation of any investment 
products or other financial product or service, an official confirmation of any 
transaction, or an official statement of Merrill Lynch. Subject to applicable 
law, Merrill Lynch may monitor, review and retain e-communications (EC) 
traveling through its networks/systems. The laws of the country of each 
sender/recipient may impact the handling of EC, and EC may be archived, 
supervised and produced in countries other than the country in which you are 
located. This message cannot be guaranteed to be secure or error-free. This 
message is subject to terms available at the following link: 
http://www.ml.com/e-communications_terms/. By messaging with Merrill Lynch you 
consent to the foregoing.
--------------------------------------------------------

Reply via email to