IT41694: SECURITY APAR FOR CVE-2022-2068, CVE-2022-2097

APAR status

• Closed as program error.

Error description

• OpenSSL (Publicly disclosed vulnerability)
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Storage Insights users                                   *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * SECURITY APAR FOR CVE-2022-2068, CVE-2022-2097               *
  *                                                              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * An upgrade of your IBM Storage Insights Data Collector(s)    *
  * will apply this fix.                                         *
  *                                                              *
  * If you do not have automatic upgrade enabled, please         *
  * upgrade your Data Collector(s) manually to apply the fix.    *
  *                                                              *
  *                                                              *
  ****************************************************************
  

Problem conclusion

• The fix for this APAR is contained in the following release:
  
  IBM Storage Insights 3Q22   [ 54X-IBM-SI ]
  ( 3Q 2022 / end of September )
  
  To protect IBM Storage Insights against emerging security
  vulnerabilities, the service was updated to protected against
  the following vulnerabilities: CVE-2022-2068, CVE-2022-2097
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STORAGE INSIGHT

• Fixed component ID

  5608TPCSI

Applicable component levels