IT22109: SECURITY APAR FOR CVE-2017-10115, CVE-2017-10116

TPC 5.1.1.15 - AIX Server Files
TPC 5.1.1.15 - Linux Server Files
TPC 5.1.1.15 - Windows Server Files
Fix Pack 5.1.1.15 (Sept 2017) for Tivoli Storage Productivity Center

APAR status

• Closed as program error.

Error description

• IBM SDK, Java Technology Edition Quarterly CPU - Jul 2017 -
  Includes Oracle Jul 2017 CPU
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Control 5.2.x users, and IBM Tivoli Storage     *
  * Productivity Center 5.1.x users                              *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * SECURITY VULNERABILITY: Ship Java 6 SR16 FP50 for WebSphere  *
  * Application Server                                           *
  *                                                              *
  * Security Bulletin:                                           *
  * http://www-01.ibm.com/support/docview.wss?uid=swg22006034    *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fix maintenance when available                         *
  ****************************************************************
  

Problem conclusion

• The fix for this APAR is targeted for the following maintenance
  package:
  
  Fixed in IBM Spectrum Control 5.2.15, and Tivoli Storage
  Productivity Center 5.1.1.15
  
  | refresh pack | 5.2-TIV-TPC-RP0015 - released August 2017
  | fix pack | 5.1.1-TIV-TPC-FP0015 - released September 2017
  
  http://www.ibm.com/support/docview.wss?&uid=swg21320822
  
  The target dates for future refresh packs do not represent a
  formal commitment by IBM. The dates are subject to change
  without notice.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TPC

• Fixed component ID

  5608TPC00

Applicable component levels