IBM Support

IT35715: CUMULATIVE APAR FOR FIXES TO BE INCLUDED IN WMQ FOR HPE NONSTOP SERVER FIXPACK 5.3.1.17

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as documentation error.

Error description

  • Cumulative APAR for fixes to be included in WMQ for
    HPE NonStop Server FixPack 5.3.1.17
    

Local fix

Problem summary

  •  The following problems are resolved in FixPack
    V5.3.1.17:
    APAR IT35896 - Mitigation for the following security
                   vulnerabilities in OpenSSL:
                    CVE-2021-23839
                    CVE-2021-23840
                    CVE-2021-23841
    APAR IT35713 - Mitigation for the following security
                   vulnerabilities in OpenSSL:
                    CVE-2020-1971 EDIPARTYNAME NULL pointer
    de-reference
    APAR IT32657 - Mitigation for the following security
                   vulnerabilities in openssl:
                    CVE-2019-1551 rsaz_512_sqr overflow bug on
                                  x86_64
    APAR IT31015 - Mitigation for the following security
                   vulnerabilities in openssl:
                    CVE-2019-1547 ECDSA remote timing attack
                    CVE-2019-1549 Fork protection
                    CVE-2019-1563 Padding Oracle in
                                  PKCS7_dataDecode
                                  and CMS_decrypt_set1_pkey
    

Problem conclusion

  • WMQ V5.3.1.17 FixPack for HPE NonStop.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT35715

  • Reported component name

    WEBS MQ NSS ITA

  • Reported component ID

    5724A3902

  • Reported release

    531

  • Status

    CLOSED DOC

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2021-01-27

  • Closed date

    2021-03-11

  • Last modified date

    2021-03-11

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

[{"Line of Business":{"code":"LOB10","label":"Data and AI"},"Business Unit":{"code":"BU029","label":"Software"},"Product":{"code":"SSFKSJ","label":"WebSphere MQ"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.3.1"}]

Document Information

Modified date:
12 March 2021