JR49375: SECURITY APAR CVE-2014-0050 - DENIAL OF SERVICE VULNERABILITY IN APACHE COMMONS FILEUPLOAD LIBRARY

8.0.1.0-WS-BPM-IFJR49375
Version 8.5 Refresh Pack 5 for the IBM Business Process Manager products
Download Version 8.0.1 Fix Pack 3 for the IBM Business Process Manager products
Version 8.5.0 Fix Pack 2 for the IBM Business Process Manager products

APAR status

• Closed as program error.

Error description

• SECURITY APAR CVE-2014-0050 - DENIAL OF SERVICE VULNERABILITY IN
  APACHE COMMONS FILEUPLOAD LIBRARY
  

Local fix

• N/A
  

Problem summary

• SECURITY APAR CVE-2014-0050 - DENIAL OF SERVICE VULNERABILITY IN
  APACHE COMMONS FILEUPLOAD LIBRARY
  

Problem conclusion

• FIX AVAILABILITY:
  iFix for 7.5.0.1 is/will be available on Fix Central; search for
  APAR JR49375 at http://www.ibm.com/support/fixcentral/
  iFix for 7.5.1.2 is/will be available on Fix Central; search for
  APAR JR49375 at http://www.ibm.com/support/fixcentral/
  iFix for 8.0.1.2 is/will be available on Fix Central; search for
  APAR JR49375 at http://www.ibm.com/support/fixcentral/
  iFix for 8.5.0.1 is/will be available on Fix Central; search for
  APAR JR49375 at http://www.ibm.com/support/fixcentral/
  Fix is also targetted for inclusion in next fixpack for
  BPM V7.5.1, BPM V8.0.1
  
  When obtaining any of the above fixes, be sure to download the
  accompanying readme, for itself, and any prerequisite fixes, and
  review them thoroughly.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IC99466

Fix information

• Fixed component name

  BPM STANDARD

• Fixed component ID

  5725C9500

Applicable component levels

• R750 PSY

     UP

• R751 PSY

     UP

• R801 PSY

     UP

• R850 PSY

     UP