PH63825: IBM JAVA JRE UPDATE NEEDED FOR VULNERABILITY CVE-2024-27267

APAR status

• Closed as program error.

Error description

• IBM Java JRE update needed for vulnerability CVE-2024-27267.
  

Local fix

• ITXCQ - ITX00062651
  GM / CF
  Circumvention: None
  

Problem summary

• Users Affected:
  IBM Transformation Extender users using any java API or design
  studio or design server
  
  Problem Description:
  Scan of ITX found Java vulnerability CVE-2024-27267.
  
  
  Platforms Affected:
  All
  

Problem conclusion

• Vulnerability has been addressed thru the 2024 October CPUs
  publishing of IBM Java JRE 8.0.8.30 to IBM Support Fix Central.
  
  Applies to:
  10.1.0.2, 10.1.1.1, 10.1.2.1 11.0.0.0
  
  Fixed in the next service packs and releases.
  
  To obtain the fix for this APAR:
  
  
  To see if the next fix pack or product release is available,
  check the IBM Transformation Extender product Release Notes
  page:
  https://www.ibm.com/support/pages/node/318755
  
  If a fix pack release is available, download it from Fix
  Central:
  http://www.ibm.com/support/fixcentral/
  
  If a new product release is available, download it from
  PassportAdvantage:
  https://www.ibm.com/software/passportadvantage/pao_customer.html
  
  
  If the fix pack or product release is not available and you
  require the APAR fix immediately, request a Limited Availability
  Interim Fix (LAIF) by opening a support Case:
  https://www.ibm.com/mysupport
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  ITX

• Fixed component ID

  5724Q2300

Applicable component levels