IT11016: ADDRESS SECURITY VULNERABILITIES WITH CVE-2015-1920 FOR TPC 5.1.X AND 5.2.X

IBM Spectrum Control V5.2.8 (December 2015)
IBM Spectrum Control V5.2.9 (February 2016)
IBM Spectrum Control V5.2.10 (May 2016)
IBM Spectrum Control V5.2.10.1 (July 2016)
IBM Spectrum Control V5.2.11 (August 2016)
IBM Spectrum Control V5.2.12 (November 2016)
IBM Spectrum Control V5.2.13 (March 2017)
IBM Spectrum Control V5.2.14 (May 2017)
IBM Spectrum Control V5.2.15 (August 2017)
IBM Spectrum Control V5.2.15.2 (November 2017)
IBM Spectrum Control V5.2.16 (March 2018)
IBM Spectrum Control V5.2.17 (May 2018)
4.2.2 Fix Pack 10 (August 2015) for Tivoli Storage Productivity Center

APAR status

• Closed as program error.

Error description

• CVE-2015-1920
  
  Affected releases:
  Tivoli Storage Productivity Center 5.2.0 through 5.2.6
  Tivoli Storage Productivity Center 5.1.0 through 5.1.1.7
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * TPC 5.2.x and 5.1.x users as listed in the security          *
  * bulletin.                                                    *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See security bulletin for details.                           *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * See security bulletin for resolution details.  The           *
  * resolution may involve upgrading to available fix            *
  * maintenance.                                                 *
  ****************************************************************
  

Problem conclusion

• The security vulnerability can be resolved using the information
  from the security bulletin.
  http://www.ibm.com/support/docview.wss?uid=swg21965557
  
  The fix for this APAR is targeted for the following maintenance
  package:
  
  | refresh pack | 5.2-TIV-TPC-RP0007
  | fix pack | 5.1.1-TIV-TPC-FP0008
  
  http://www-01.ibm.com/support/docview.wss?&uid=swg21320822
  
  The target dates for future refresh packs do not represent a
  formal commitment by IBM. The dates are subject to change
  without notice.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IT11017

Modules/Macros

• WAS
  

Fix information

• Fixed component name

  TPC

• Fixed component ID

  5608TPC00

Applicable component levels

• R520 PSY

     UP

• R526 PSY

     UP

• R511 PSY

     UP