PI43736: OPENSSL RECEIVED SECURITY UPDATES AND MUST BE UPGRADED TO 1.0.1O

IBM MobileFirst Platform Foundation Interim Fix README for 7.0
IBM MobileFirst Platform Foundation Interim Fix README for 6.3
IBM Worklight Interim Fix README for 6.2.0.1
IBM Worklight Interim Fix README for 6.1.0.2

APAR status

• Closed as program error.

Error description

• There are security vulnerablities that have been fixed in 1.0.1o
  

Local fix

• -
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Application developers who use FIPS support in a Worklight   *
  * or MobileFirst Platform application and are running the      *
  * application on Android (armv7, i386, or armv7s) or iOS       *
  * (armv7, armv7, or i386).                                     *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Security vulnerabilities were reported in OpenSSL 1.0.1l     *
  * which is used by the FIPS optional feature.                  *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * -                                                            *
  ****************************************************************
  

Problem conclusion

• The FIPS feature was updated to include OpenSSL 1.01o that fixed
  the known vulnerabilities.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  MFPF/WORKLIGHT

• Fixed component ID

  5725I4301

Applicable component levels

• R610 PSY

     UP

• R620 PSY

     UP

• R630 PSY

     UP

• R700 PSY

     UP