You are entitled to your opinion. I have my own. I am already subscribed to the notifications. I do get the notifications. If a notification is for a release I'm not at yet, I ignore the email. When I upgrade I check the CVE site. There is a reason IBM has this site.
I may have also missed an email. I get busy.
------------------------------
Robert Berendt IBMChampion
Business Systems Analyst, Lead
Dekko
Fort Wayne
------------------------------
Original Message:
Sent: Fri April 11, 2025 10:06 AM
From: Nezih Boyacioglu
Subject: CVE search: secret encoder ring required
In my opinion, the CVE hunt for FlashSystem is a bit unnecessary. if you are using your FlashSystem on segmented VLAN, using http proxy to communicate with support center (call home). You don't need to hunt the CVE's. You can subscribe to the FlashSystem product notifications and if there is a high-level CVE, you will get an email about it.
here's the link for the IBM product notification subscription:
https://www.ibm.com/systems/support/myview/subscription/css.wss
------------------------------
Nezih Boyacioglu
Original Message:
Sent: Fri April 11, 2025 07:53 AM
From: Robert Berendt
Subject: CVE search: secret encoder ring required
When using IBM's CVE search site, https://www.ibm.com/support/pages/bulletin/ and you want to search by product, do NOT individualize between 7300 or 7200. Instead pick IBM FlashSystem 7x00. Otherwise you'll miss a lot of CVE's. One example being
https://www.ibm.com/support/pages/node/7184182
------------------------------
Robert Berendt IBMChampion
Business Systems Analyst, Lead
Dekko
Fort Wayne
------------------------------