IT40865: SECURITY APAR FOR CVE-2021-35550, CVE-2021-35603

APAR status

• Closed as program error.

Error description

• IBM SDK, Java Technology Edition Quarterly (deferred from Oracle
  Oct 2021 CPU)
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Storage Insights users                                   *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Security vulnerabilities:                                    *
  * CVE-2021-35550, CVE-2021-35603 Java (Publicly disclosed      *
  * vulnerability)                                               *
  *                                                              *
  * See security bulletin for details of the vulnerabilities:    *
  * https://www.ibm.com/support/pages/node/6590209               *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• The fix for this APAR is contained in the following release:
  
  IBM Storage Insights 3Q22   [ 54X-IBM-SI ]
  ( release target 3Q 2022 / July )
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  STORAGE INSIGHT

• Fixed component ID

  5608TPCSI

Applicable component levels