IBM Support

IV67198: FIX SECURITY VULNERABILITY CVE-2014-3566

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Error Message: N/A
.
Stack Trace: N/A
.

Local fix

  • 



Problem summary


    

  • A security vulnerability has been identified.

    



Problem conclusion


    

  • The Java Runtime Environment has been updated to fix the pro
described in CVE-2014-3566 at
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566.
.
This APAR will be fixed in the following Java Releases:
   7 R1 SR2       (7.1.2.0)
   7    SR8       (7.0.8.0)
   6 R1 SR8 FP2   (6.1.8.2)
   6    SR16 FP2  (6.0.16.2)
   5.0  SR16 FP8  (5.0.16.8)
   1.4.2  available as an ifix
.
Contact your IBM Product's Service Team for these Service
Refreshes and Fix Packs.
For those running stand-alone, Java maintenance is available
from:
           https://www.ibm.com/developerworks/java/jdk/

    



Temporary fix


    

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    IV67198
    • 

  • Reported component name
    JAVA 1.4 AIX PP
    • 

  • Reported component ID
    5648C9802
    • 

  • Reported release
    142
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt
    • 

  • Submitted date
    2014-11-21
    • 

  • Closed date
    2014-11-21
    • 

  • Last modified date
    2014-11-21
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    
IV66110
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    • 



Fix information


    

  • Fixed component name
    JAVA 1.4 AIX PP
    • 

  • Fixed component ID
    5648C9802
    • 



Applicable component levels


    

  • R142  PSY
       UP
    • 








      
              
                            

              

              [{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSNVBF","label":"Runtimes for Java Technology"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"1.4.2","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]
              

                                                                    

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            21 November 2014
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback