IT10634: SECURITY APAR FOR JAVA 0-DAY CVE-2015-2590 - TPC 5.x

Tivoli Storage Productivity Center 5.2.7 (select fixes from group)
TPC_5.1.1.9_NL_aix_disk1_part1
TPC_5.1.1.9_NL_linux_ix86_disk1_part1
TPC_5.1.1.9_NL_windows_disk1_part1
TPC_5.1.1.9_SRA
Tivoli Storage Productivity Center 5.1.1.9
IBM Spectrum Control V5.2.8 (December 2015)
IBM Spectrum Control V5.2.9 (February 2016)
IBM Spectrum Control V5.2.10 (May 2016)
IBM Spectrum Control V5.2.10.1 (July 2016)
IBM Spectrum Control V5.2.11 (August 2016)
Fix Pack 5.1.1.12 (October 2016) for Tivoli Storage Productivity Center
Fix Pack 5.1.1.13 (February 2017) for Tivoli Storage Productivity Center
Fix Pack 5.1.1.14 (June 2017) for Tivoli Storage Productivity Center
Fix Pack 5.1.1.15 (Sept 2017) for Tivoli Storage Productivity Center
IBM Spectrum Control V5.2.12 (November 2016)
IBM Spectrum Control V5.2.13 (March 2017)
IBM Spectrum Control V5.2.14 (May 2017)
IBM Spectrum Control V5.2.15 (August 2017)
IBM Spectrum Control V5.2.15.2 (November 2017)
IBM Spectrum Control V5.2.16 (March 2018)
IBM Spectrum Control V5.2.17 (May 2018)
Fix Pack 5.1.1.9 (October 2015) for Tivoli Storage Productivity Center

APAR status

• Closed as program error.

Error description

• CVE-2015-2590
  
  Affected Versions:
  TPC 5.2.0 - 5.2.6
  TPC 5.1.0 - 5.1.1.8
  TPC 4.2.x through 4.2.2.195
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * TPC 5.x users downloading and installing an IBM JRE from the *
  * TPC device server for use with the TPC Java WebStart based   *
  * GUI (legacy).                                                *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See security bulletin:                                       *
  * http://www.ibm.com/support/docview.wss?uid=swg21963288       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fix maintenance when available.                        *
  ****************************************************************
  

Problem conclusion

• See security bulletin for details on updating the JRE:
  http://www.ibm.com/support/docview.wss?uid=swg21963288
  
  5.2.7 (August 2015)
  -OR-
  5.2-TIV-TPC-JRE-6SR16FP7
  
  5.1.1.9 (October 2015)
  -OR-
  5.1-TIV-TPC-JRE-6SR16FP7
  
  http://www-01.ibm.com/support/docview.wss?&uid=swg21320822
  
  The target dates for future refresh packs do not represent a
  formal commitment by IBM. The dates are subject to change
  without notice.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IT10635

Modules/Macros

• JWSGUI
  

Fix information

• Fixed component name

  TPC

• Fixed component ID

  5608TPC00

Applicable component levels