Rex,

I investigated this issue, and there is a way to identify PTF as being
SECINT. However, it does not include the CVSS metrics which I want to
access.
I do not understand why IBM hides this information, while it is disclosed
to everybody when it comes to IBM I.


*| **Itschak Mugzach | Director | SecuriTeam Software **|** IronSphere
Platform* *|* *Information Security Continuous Monitoring for Z/OS, zLinux
and IBM I **|  *

*|* *Email**: i_mugz...@securiteam.co.il **|* *Mob**: +972 522 986404 **|*
*Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il  **|*





On Tue, Jan 17, 2023 at 10:44 PM Pommier, Rex <rpomm...@sfgmembers.com>
wrote:

> Kurt,
>
> Your response brings up a related question.  I understand the SECINT
> HOLDDATA is only available from the security portal.  Are PTFs that get a
> SECINT hold on them also flagged in the normal holddata with some other
> hold reason?  Asking another way, am I missing PTFs that have holddata on
> them if I don't get the SECINT holddata from the portal?
>
> Thanks,
> Rex
>
> -----Original Message-----
> From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On Behalf
> Of Kurt J. Quackenbush
> Sent: Tuesday, January 17, 2023 1:57 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: [EXTERNAL] Re: How to determine if Enhanced HOLDDATA received?
>
> > Is there still such a thing as not-enhanced holddata?
>
> No, the old not-enhanced HOLDDATA no longer exists (for many years).  I do
> not use the descriptor "enhanced" because IBM only provides the one flavor
> of general use HOLDDATA.  Everybody, including vendors, have access to
> IBM's general use HOLDDATA.  You can get the file here
> https://urldefense.com/v3/__https://public.dhe.ibm.com/eserver/zseries/holddata/full.txt__;!!KjMRP1Ixj6eLE0Fj!pBdnXZ6I9JuqGglNFX8erL2uzWFHOOpQ31Qeg5lB-GgoxsEeZHY0mSYI5TALPLRXRxaTrjiIZ8_fjEAP$
> or with FTP as previously posted, or with Shopz or with SMP/E RECEIVE
> ORDER.  This HOLDDATA identifies PE, HIPER, and Fix Category fixes.  The
> HOLDDATA from the IBM Security Portal which identifies SECINT fixes is
> separate.
>
> Kurt Quackenbush
> IBM  |  z/OS SMP/E and z/OSMF Software Management  |  ku...@us.ibm.com
>
> Chuck Norris never uses CHECK when he applies PTFs.
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions, send email
> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> ----------------------------------------------------------------------
> The information contained in this message is confidential, protected from
> disclosure and may be legally privileged. If the reader of this message is
> not the intended recipient or an employee or agent responsible for
> delivering this message to the intended recipient, you are hereby notified
> that any disclosure, distribution, copying, or any action taken or action
> omitted in reliance on it, is strictly prohibited and may be unlawful. If
> you have received this communication in error, please notify us immediately
> by replying to this message and destroy the material in its entirety,
> whether in electronic or hard copy format. Thank you.
>
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to