IBM Support

PI90804:Security vulnerability in Apache Commons used by WebSphere Application Server

Download


Abstract

Security vulnerability in Apache Commons used by WebSphere Application Server

Download Description

PI90804 resolves the following problem:

ERROR DESCRIPTION:
Security vulnerability in Apache Commons used by WebSphere Application Server.

LOCAL FIX:

PROBLEM SUMMARY:
Security vulnerability in Apache Commons used by WebSphere Application Server.

PROBLEM CONCLUSION:
The fix for this APAR is currently targeted for inclusion in fixpacks 8.0.0.15, 8.5.5.13, 9.0.0.7, and
Liberty 18.0.0.1

NOTE: Due to a regression in the original Liberty interim fixes for PI90804, new fixes have been published. Please refer to security bulletin for more details http://www-01.ibm.com/support/docview.wss?uid=swg22011428

Prerequisites

None

Installation Instructions

Please review the readme.txt for detailed installation instructions.

[{"INLabel":"V80 Readme","INLang":"US English","INSize":"2400","INURL":"ftp://public.dhe.ibm.com/software/websphere/appserv/support/fixes/PI90804/8.0.0.14/readme.txt"},{"INLabel":"V85 Readme","INLang":"US English","INSize":"2476","INURL":"ftp://public.dhe.ibm.com/software/websphere/appserv/support/fixes/PI90804/8.5.5.12/readme.txt"},{"INLabel":"V90 Readme","INLang":"US English","INSize":"2316","INURL":"ftp://public.dhe.ibm.com/software/websphere/appserv/support/fixes/PI90804/9.0.0.5/readme.txt"},{"INLabel":"9.0.0.6 Readme","INLang":"US English","INSize":"2240","INURL":"ftp://public.dhe.ibm.com/software/websphere/appserv/support/fixes/PI90804/9.0.0.6/readme.txt"}]
On
[{"DNLabel":"8.0.0.8 - 8.0.0.14 WAS traditional","DNDate":"2 Jan 2018","DNLang":"US English","DNSize":"265312","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm/WebSphere&product=ibm/WebSphere/WebSphere Application Server&release=All&platform=All&function=fixId&fixids=8.0.0.8-WS-WAS-IFPI90804&includeSupersedes=0","DNURL_FTP":" ","DDURL":null},{"DNLabel":"8.5.5.0 - 8.5.5.12 WAS traditional","DNDate":"2 Jan 2018","DNLang":"US English","DNSize":"275114","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm/WebSphere&product=ibm/WebSphere/WebSphere Application Server&release=All&platform=All&function=fixId&fixids=8.5.5.0-WS-WAS-IFPI90804&includeSupersedes=0","DNURL_FTP":" ","DDURL":null},{"DNLabel":"9.0.0.0 - 9.0.0.5 WAS traditional","DNDate":"2 Jan 2018","DNLang":"US English","DNSize":"265420","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm/WebSphere&product=ibm/WebSphere/WebSphere Application Server&release=All&platform=All&function=fixId&fixids=9.0.0.0-WS-WAS-IFPI90804&includeSupersedes=0","DNURL_FTP":" ","DDURL":null},{"DNLabel":"9.0.0.6 WAS traditional","DNDate":"19 Jan 2018","DNLang":"US English","DNSize":"258881","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%2FWebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=All&platform=All&function=fixId&fixids=9.0.0.6-WS-WAS-IFPI90804&includeSupersedes=0","DNURL_FTP":" ","DDURL":null}]

Technical Support

Contact IBM Support using SR (http://www.ibm.com/software/support/probsub.html), visit the WebSphere Application Server support web site (http://www.ibm.com/software/webservers/appserv/was/support/), or contact 1-800-IBM-SERV (U.S. only).

[{"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"General","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF012","label":"IBM i"},{"code":"PF013","label":"Inspur K-UX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"},{"code":"PF035","label":"z\/OS"}],"Version":"9.0.0.6;9.0.0.5;9.0.0.4;9.0.0.3;9.0.0.2;9.0.0.1;9.0;8.5.5.9;8.5.5.8;8.5.5.7;8.5.5.6;8.5.5.5;8.5.5.4;8.5.5.3;8.5.5.2;8.5.5.12;8.5.5.11;8.5.5.10;8.5.5.1;8.5.5;8.0.0.9;8.0.0.8;8.0.0.14;8.0.0.13;8.0.0.12;8.0.0.11;8.0.0.10;17.0.0.4;17.0.0.3","Edition":"Advanced;Base;Developer;Enterprise;Express;Network Deployment;Single Server","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
15 June 2018

UID

swg24044445