IT35715: CUMULATIVE APAR FOR FIXES TO BE INCLUDED IN WMQ FOR HPE NONSTOP SERVER FIXPACK 5.3.1.17

APAR status

• Closed as documentation error.

Error description

• Cumulative APAR for fixes to be included in WMQ for
  HPE NonStop Server FixPack 5.3.1.17
  

Local fix

Problem summary

•  The following problems are resolved in FixPack
  V5.3.1.17:
  APAR IT35896 - Mitigation for the following security
                 vulnerabilities in OpenSSL:
                  CVE-2021-23839
                  CVE-2021-23840
                  CVE-2021-23841
  APAR IT35713 - Mitigation for the following security
                 vulnerabilities in OpenSSL:
                  CVE-2020-1971 EDIPARTYNAME NULL pointer
  de-reference
  APAR IT32657 - Mitigation for the following security
                 vulnerabilities in openssl:
                  CVE-2019-1551 rsaz_512_sqr overflow bug on
                                x86_64
  APAR IT31015 - Mitigation for the following security
                 vulnerabilities in openssl:
                  CVE-2019-1547 ECDSA remote timing attack
                  CVE-2019-1549 Fork protection
                  CVE-2019-1563 Padding Oracle in
                                PKCS7_dataDecode
                                and CMS_decrypt_set1_pkey
  

Problem conclusion

• WMQ V5.3.1.17 FixPack for HPE NonStop.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels