IT13956: ADDRESS SECURITY VULNERABILITIES WITH IBM SDK, JAVA TECHNOLOGYEDITION QUARTERLY CPU - OCT 2015 & JAN 2016

IBM Spectrum Control V5.2.10.1 (July 2016)
IBM Spectrum Control V5.2.11 (August 2016)
Fix Pack 5.1.1.12 (October 2016) for Tivoli Storage Productivity Center
Fix Pack 5.1.1.13 (February 2017) for Tivoli Storage Productivity Center
Fix Pack 5.1.1.14 (June 2017) for Tivoli Storage Productivity Center
Fix Pack 5.1.1.15 (Sept 2017) for Tivoli Storage Productivity Center
IBM Spectrum Control V5.2.12 (November 2016)
IBM Spectrum Control V5.2.13 (March 2017)
IBM Spectrum Control V5.2.14 (May 2017)
IBM Spectrum Control V5.2.15 (August 2017)
IBM Spectrum Control V5.2.15.2 (November 2017)
IBM Spectrum Control V5.2.16 (March 2018)
IBM Spectrum Control V5.2.17 (May 2018)
IBM Spectrum Control V5.2.9 (February 2016)
IBM Spectrum Control V5.2.10 (May 2016)

APAR status

• Closed as program error.

Error description

• Address security vulnerabilities with IBM SDK, Java Technology
  Edition Quarterly CPU - October 2015 & January 2016.  See
  security bulletin for details.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * TPC and Spectrum Control 5.2.x users as noted in the         *
  * security bulletin.                                           *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See security bulletin.                                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * See security bulletin for resolution details.   Manual steps *
  * may be required in addition to the upgrade.                  *
  ****************************************************************
  

Problem conclusion

• The security vulnerability can be resolved using the information
  from the security bulletin.  Manual steps may be required in
  addition to the upgrade.
  http://www-01.ibm.com/support/docview.wss?uid=swg21977730
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• SECURITY
  

Fix information

• Fixed component name

  TPC

• Fixed component ID

  5608TPC00

Applicable component levels

• R520 PSY

     UP

• R528 PSY

     UP