way of identifying security fixes

Products

• CIS
• COMMON SERVICES FOR Z/OS
• 90S SERVICES
• DATABASE MANAGEMENT SOLUTIONS FOR DB2 FOR Z/OS
• COMMON PRODUCT SERVICES COMPONENT
• Common Services
• Datacom/AD
• CA ECOMETER SERVER COMPONENT FOC
• Easytrieve Report Generator for Common Services
• INFOCAI MAINTENANCE
• IPC
• UNICENTER JCLCHECK COMMON COMPONENT
• Mainframe VM Product Manager
• CHORUS SOFTWARE MANAGER
• CA ON DEMAND PORTAL
• CA Service Desk Manager - Unified Self Service
• PAM CLIENT FOR LINUX ON MAINFRAME
• MAINFRAME CONNECTOR FOR LINUX ON MAINFRAME
• GRAPHICAL MANAGEMENT INTERFACE
• WEB ADMINISTRATOR FOR TOP SECRET
• Xpertware
• Compress Data Compression for MVS
• Compress Data Compression for Fujitsu

Issue/Introduction

Is there some sort of mainframe security patch page/link?
 

Bbeing asked to identify security fixes that are applied to our products. I don't believe that I have ever seen a publicly available list of security fixes for mainframe products from CA nor have i seen a smp/e sourceid that would identify a PTF or APAR as a security fix. Does CA have such a list that is publicly available ? 

Environment

z/OS

Resolution

There is no landing page for CA MAINFRAME Security (as a whole). We only have TSS and ACF2. Like RACF they already are doing security, and would not advertise security matters. The only things I can offer are SUPPORT.CA.COM product pages https://support.ca.com/us/product-information.html mainframe compatibilies. https://support.ca.com/us/mainframe-compatibilites/mainframe-compatibilities.html I would apply CA maintenance to every product as a normal routine.