IBM tells CERT they don't care.

That's quite the "process error"