IBM Support

IT43325: Thirdparty component updates for cumulative security update 9.0.0.17

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • List of third party packages updated in April CSU 9.0.0.17
    

Local fix

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    Users of the IBM MQ components affected by the third party
    product list in the product conclusion.
    
    
    Platforms affected:
    MultiPlatform
    
    ****************************************************************
    PROBLEM DESCRIPTION:
    A new version for some third party packages included in IBM MQ
    are available, and updated in January CSU: 9.0.0.17
    

Problem conclusion

  • The following updates are included in this APAR :
    
    - libcurl 8.0.1
    - OpenSSL for IBMi 1.1.1t
    
    - JRE 8.0.8.0 on AIX, Windows, Linux, and Solaris
    - JRE 8.0.7.20 on HP :
    
    --  IBM MQ has assessed the issues addressed in this update and
    will release an IBM MQ security bulletin for any vulnerabilities
    applicable to IBM MQ components? use of the Java APIs and
    runtime environment.
    Users who use the supplied IBM Java runtime to execute other
    code or applications not supplied with IBM MQ should review the
    complete list of vulnerabilities fixed to check applicability of
    any vulnerabilities based on the API usage of those
    applications:
    https://www.ibm.com/support/pages/java-sdk-security-vulnerabilit
    ies
    
    ---------------------------------------------------------------
    The fix is targeted for delivery in the following PTFs:
    
    Version    Maintenance Level
    v9.0 LTS   9.0.0.17
    
    
    The latest available maintenance can be obtained from
    'WebSphere MQ Recommended Fixes'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
    
    If the maintenance level is not yet available information on
    its planned availability can be found in 'WebSphere MQ
    Planned Maintenance Release Dates'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
    ---------------------------------------------------------------
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT43325

  • Reported component name

    IBM MQ BASE M/P

  • Reported component ID

    5724H7261

  • Reported release

    900

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2023-03-10

  • Closed date

    2023-04-25

  • Last modified date

    2023-05-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    IBM MQ BASE M/P

  • Fixed component ID

    5724H7261

Applicable component levels

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"9.0","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
02 May 2023