IBM Support

PI53527: UPGRADING THE VERSION OF APACHE COMMONS COLLECTION TO INCLUDE A FIX FOR THE SERIALIZATION VULNERABILITY

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • No immediate exposure to the vulnerability has been found. To
    avoid future problems, the vulnerable version of Apache Commons
    Collections is replaced with the fixed one.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * Users are not affected                                       *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * This fix addresses an Apache Commons Collections security    *
    * vulnerability.                                               *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * -                                                            *
    ****************************************************************
    

Problem conclusion

  • The fix replaces the version of Apache Commons Collection
    included in Worklight and MobileFirst Platform with a version
    that contains the fix for the vulnerability.
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI53527

  • Reported component name

    MFPF/WORKLIGHT

  • Reported component ID

    5725I4301

  • Reported release

    710

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2015-12-03

  • Closed date

    2016-02-11

  • Last modified date

    2016-02-11

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    MFPF/WORKLIGHT

  • Fixed component ID

    5725I4301

Applicable component levels

  • R600 PSY

       UP

  • R610 PSY

       UP

  • R620 PSY

       UP

  • R630 PSY

       UP

  • R700 PSY

       UP

  • R710 PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSZH4A","label":"IBM Worklight"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"710","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
14 October 2021