IBM Support

IT36310: MQ appliance might reload due to error SSL function/TLS

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • MQ appliance might reload if an administrative user activity
    involves SSL/TLS.
    
    mqa#? show time
        Local time: Mon Feb  1 09:10:34 2021
         Time zone: EST
    Time zone spec: EST5EDT,M3.2.0/2:00,M11.1.0/2:00
    Uptime: reload: 2 days 05:21:41
    Uptime: reboot: 22 days 06:28:38
    
    Failure Notification shows that reload was due to a crash...
    
    <FailureNotificationStatus2>
    <Date>20210130035028624EST</Date>
    <Reason>crash</Reason>
    <UploadStatus>in-progress</UploadStatus>
    

Local fix

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    All users of MQ appliance
    
    
    Platforms affected:
    MultiPlatform
    
    ****************************************************************
    PROBLEM DESCRIPTION:
    Memory overwrite in an SSL/TLS function caused unexpected MQ
    appliance reload.
    
    Note that this issue affects administrative or REST API
    connections to the appliance, MQ channels using TLS protection
    use alternative cryptographic logic and are not impacted.
    

Problem conclusion

  • MQ appliance code has been modified to prevent the memory
    corruption.
    
    ---------------------------------------------------------------
    The fix is targeted for delivery in the following PTFs:
    
    Version    Maintenance Level
    v9.2 LTS   9.2.0.2
    v9.x CD    9.2.3
    
    The latest available maintenance can be obtained from
    'WebSphere MQ Recommended Fixes'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
    
    If the maintenance level is not yet available information on
    its planned availability can be found in 'WebSphere MQ
    Planned Maintenance Release Dates'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
    ---------------------------------------------------------------
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT36310

  • Reported component name

    MQ APPL M2002 V

  • Reported component ID

    5737H4701

  • Reported release

    920

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    YesHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2021-03-22

  • Closed date

    2021-03-31

  • Last modified date

    2021-03-31

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    MQ APPL M2002 V

  • Fixed component ID

    5737H4701

Applicable component levels

[{"Line of Business":{"code":"LOB36","label":"IBM Automation"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SS5K6E","label":"IBM MQ Appliance"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"920"}]

Document Information

Modified date:
01 April 2021