Fortra Completes Postmortem Of GoAnywhere Vulnerability Alex Woodie

​Security firm Fortra recently published an analysis of the zero-day vulnerability that impacted its GoAnywhere MFT customers earlier this year and committed itself to “continuous improvement.” Meanwhile, an analysis shows that dozens of organizations continue to run unpatched and exposed versions of GoAnywhere months after the flaw was discovered and patches became available.
Fortra (formerly HelpSystems) first became aware of the remote code injection exploit vulnerability in its GoAnywhere managed file transfer (MFT) product on January 30, as we previously reported, and quietly alerted customers on February 1. The company says it immediately shut down the hosted version of …
The post Fortra Completes Postmortem Of GoAnywhere Vulnerability appeared first on IT Jungle. Read More 

Guru: Binding Directory Entries Bob Cozzi

​I assume you’ve heard about *BNDDIR (Binding Directory) objects introduced circa 1994 with OS/400 V3R2. The infamous QC2LE binding directory is used by a huge number of RPG applications to access C runtime and unblocked MI functions such as system cvthc, cpybytes, and matmatr. You have probably seen RPG IV source code with the BNDDIR(‘QC2LE’) keyword on the header specification.
I was one of the first developers outside of IBM to use Binding Directories for my own code. When I go back and look at my own RPG IV code created prior to mid-2007, well over 90 percent of it …
The post Guru: Binding Directory Entries appeared first on IT Jungle. Read More 

IBM i PTF Guide, Volume 25, Number 22 Doug Bidwell

​Welcome back after the Memorial Day holiday, and our thanks to all who have served and who currently serve.
There is a slew of security issues that you need to deal with on the IBM i platform. So let’s get to it.
First, we have Security Bulletin: IBM Java SDK and IBM Java Runtime for IBM i are vulnerable to exposing sensitive information due to flaws and configurations (CVE-2023-30441), which you can find out more about here. The vulnerability can be fixed by applying the latest Java Group PTF.  Releases 7.5, 7.4, 7.3, and 7.2 of IBM i will …
The post IBM i PTF Guide, Volume 25, Number 22 appeared first on IT Jungle. Read More 

Verified by MonsterInsights