Secunia

Some vulnerabilities have been reported in OS/400, which have unknown impacts.

1) The local CA (Certificate Authority) certificates do not contain the X509 basic constraints extension. This can potentially cause incorrect verification of certification chains.

2) An error in the certificate store causes an old certificate associated with an application identifier to be returned even when it has been renewed.

3) An unspecified error in ASN.1 parsing has an unknown impact.

Solution
PTFs are reportedly available, which fixes these security issues.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://www-1.ibm.com/support/docview.wss?uid=nas35f7de7b32acabf8b86256fa3004d18d9
http://www-1.ibm.com/support/docview.wss?uid=nas3f2a7c440c92a03d986256f87005814fc
http://www-1.ibm.com/support/docview.wss?uid=nas3122fa662021ae36686256eb600477c88
http://www-1.ibm.com/support/docview.wss?uid=nas356b41438afe6eeea86256eb600477cc5
http://www-1.ibm.com/support/docview.wss?uid=nas2ea407628c8db0e5286256ea70070e7c8

Deep Links
Links available in Customer Area