IT01003: SECURITY VULNERABILITIES WITH OPENSSL

APAR status

• Closed as program error.

Error description

• OpenSSL security vulnerabilities exist with Tivoli Storage
  Productivity Center.
  
  CVE-2014-0160
  CVE-2014-0076
  

Local fix

• See security bulletin.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * TPC 4.2.2.x, 5.1.x, 5.2.x users.  See security bulletin for  *
  * details.                                                     *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See ERROR DESCRIPTION.                                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Refer to security bulletin and apply fix maintenance as soon *
  * as practicable.                                              *
  ****************************************************************
  

Problem conclusion

• The fix for this APAR is targeted for the following maintenance
  packages:
  
  | fix pack | 4.2.2-TIV-TPC-FP0006 - April 2014
  | fix pack | 5.1.1-TIV-TPC-FP0004 - April 2014
  | refresh pack | 5.2.1-TIV-TPC-FP0001 - April 2014
  
  Please review the security bulletin for details.
  http://www-01.ibm.com/support/docview.wss?&uid=swg21320822
  
  The target dates for future refresh packs or fix packs do not
  represent a formal commitment by IBM. The dates are subject to
  change without notice.
  
  
  Security Bulletin
  http://www-01.ibm.com/support/docview.wss?uid=swg21670858
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IT01002

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• SSL
  

Fix information

• Fixed component name

  TPC

• Fixed component ID

  5608TPC00

Applicable component levels

• R510 PSY

     UP

• R511 PSY

     UP

• R520 PSY

     UP

• R521 PSY

     UP