PH72240: IP ADDRESS BLOCKING FAILS FOR HIGH-VALUE IP ADDRESSES.

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• High-value IP addresses can trigger an integer overflow during
  IP address processing, causing IP address blocking to fail.
  

Local fix

• NA
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of IBM Security Guardium S-TAP for     *
  *                 Db2 on z/OS.                                 *
  *                                                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: High-value IP addresses can trigger an  *
  *                      integer overflow during IP address      *
  *                      processing, causing IP address          *
  *                      blocking to fail.                       *
  ****************************************************************
  * RECOMMENDATION: Apply the PTF                                *
  ****************************************************************
  IP address blocking fails for high-value IP addresses.
  

Problem conclusion

• IP blocking decisions are consistent across the full IPv4 space,
  including high-value addresses, and policy enforcement behaves
  as designed.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UO08891

Modules/Macros

• ADHKAFLN ADHKAFLO ADHKAFLT ADHKAFLU ADHKBFLT ADHKKTMP ADHKLCOR
  ADHKLOGN ADHKLPRS ADHKLTKN ADHKSCPM ADHKSTRC
  

Fix information

• Fixed component name

  SEC GUAR STAP D

• Fixed component ID

  5655STP00

Applicable component levels

• RB30 PSY UO08891

     UP26/08/11 P F608

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.