APAR status
Closed as program error.
Error description
List of third party packages updated in cumulative security update: 9.3.5.2
Local fix
Problem summary
**************************************************************** USERS AFFECTED: Users of the IBM MQ components affected by the third party product list in the product conclusion. Platforms affected: MultiPlatform **************************************************************** PROBLEM DESCRIPTION: A new version for some third party packages included in IBM MQ are available, and updated in MQ CSU 9.3.5.2
Problem conclusion
The following updates are included in this APAR : - Bouncy Castle - bcprov-jdk15to18 1.78.1, - bcpkix-jdk15to18 1.78.1, - bcutil-jdk15to18 1.78.1 - Liberty Profile 24.0.0.3 + APARs PH59117, PH59146, PH59682, PH59781, PH60146, PH60195, PH60199 - JRE to 8.0.8.25 on Linux -- Applications using the IBM MQ classes for Java and the IBM MQ classes for JMS who are running the application using the JRE embedded into the MQ installation -- IBM MQ Managed File Transfer Edition -- IBM MQ Advanced Message Protocol (AMQP) -- IBM MQ Telemetry Transport (MQTT) -- IBM MQ Explorer -- IBM MQ REST API -- IBM MQ Console -- IBM MQ IPT -- IBM MQ has assessed the issues addressed in this update and will release an IBM MQ security bulletin for any vulnerabilities applicable to IBM MQ components use of the Java APIs and runtime environment. Users who use the supplied IBM Java runtime to execute other code or applications not supplied with IBM MQ should review the complete list of vulnerabilities fixed to check applicability of any vulnerabilities based on the API usage of those applications: https://www.ibm.com/support/pages/java-sdk-security-vulnerabilit ies --------------------------------------------------------------- The fix is targeted for delivery in the following PTFs: Version Maintenance Level v9.x CD 9.3.5.2 The latest available maintenance can be obtained from 'IBM MQ Recommended Fixes' https://www.ibm.com/support/pages/recommended-fixes-ibm-mq If the maintenance level is not yet available information on its planned availability can be found in 'IBM MQ Planned Maintenance Release Dates' https://ibm.biz/mqplannedmaintenance ---------------------------------------------------------------
Temporary fix
Comments
APAR Information
APAR number
IT46168
Reported component name
MQ APPLIANCE M2
Reported component ID
5900ALJ00
Reported release
935
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2024-05-15
Closed date
2024-06-26
Last modified date
2024-06-26
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
MQ APPLIANCE M2
Fixed component ID
5900ALJ00
Applicable component levels
[{"Business Unit":{"code":"BU053","label":"Cloud \u0026 Data Platform"},"Product":{"code":"SS5K6E","label":"IBM MQ Appliance"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"935","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]
Document Information
Modified date:
26 June 2024