IT42456: Update the IBM JRE to level 8.0.7.20 (AIX, Linux, Solaris, and Windows) for IBM MQ

APAR status

• Closed as program error.

Error description

• IBM MQ ships a Java Runtime Environment (JRE) embedded within
  its installation, and an updated level of the JRE is available.
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  The components of MQ which utilise the embedded JRE include:
  
  - Applications using the IBM MQ classes for Java and the IBM MQ
  classes for JMS who are running the application using the JRE
  embedded into the MQ installation
  
  - IBM MQ Managed File Transfer Edition
  
  - IBM MQ Advanced Message Protocol (AMQP)
  
  - IBM MQ Telemetry Transport (MQTT)
  
  - IBM MQ Explorer
  
  
  Platforms affected:
  AIX, Linux on Power, Linux on x86-64, Linux on zSeries, Solaris
  SPARC, Windows, Solaris x86-64
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  The IBM MQ installation includes an embedded Java Runtime
  Environment (JRE).  An updated version of the JRE is available.
  

Problem conclusion

• The level of JRE shipped with IBM MQ has been updated to the
  following versions:
  
    8.0.7.20 - AIX, Linux (x86-64, ppcLE, zLinux), Solaris (SPARC
  and x86-64), Windows
  
  
  IBM MQ has assessed the issues addressed in this update and will
  release an IBM MQ security bulletin for any vulnerabilities
  applicable to IBM MQ components use of the Java APIs and
  runtime environment.
  
  Users who use the supplied IBM Java runtime to execute other
  code or applications not supplied with IBM MQ should review the
  complete list of vulnerabilities fixed to check applicability of
  any vulnerabilities based on the API usage of those
  applications:
  https://www.ibm.com/support/pages/java-sdk-security-vulnerabilit
  ies
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v9.0 LTS   9.0.0.14
  v9.2 LTS   9.2.0.7
  v9.3 LTS   9.3.0.2
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM MQ BASE MP

• Fixed component ID

  5724H7251

Applicable component levels