JR62832: SECURITY UPDATES FOR ICP4A 20.0.2

APAR status

• Closed as program error.

Error description

• Underlying Components of the IBM Cloud pak for Automation
  revealed security vulnerabilities
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Users running CP4A.                                          *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Underlying Components of the IBM Cloud pak for Automation    *
  * revealed security vulnerabilities.                           *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• Red Hat Universal Base Image (UBI) were updated to 7.8.311
  Websphere Liberty was upgraded to 20.0.0.6.
  IBM Java was upgraded to 8.0.6.15.
  Apache Flink was upgraded to 1.10.1.
  The Kafka client JAR of the Event SDK was upgraded to 2.5.0.
  The Kafka schema registry client was upgraded to 5.4.1.
  OpenJDK 8 was upgraded to 1.8.0.262.b10-0.
  Security fixes for Node.js and other open source software.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  CLOUD PAK FOR A

• Fixed component ID

  5737I2300

Applicable component levels