Download
Release Date
11 September 2020
Abstract
This document lists the fixes contained in IBM Cloud Pak System Version 2.3.3.0.
Download Description
To download the interim fix, go to the IBM Cloud Pak System product page on IBM Fix Central.
Version 2.3.3.0 includes fixes for these security vulnerabilities:
| Security Bulletin Link | CVEs | Description |
| Security Bulletin | CVE-2020-2604 CVE-2020-2593 CVE-2020-2659 CVE-2020-2583 CVE-2019-4732 CVE-2020-2805 CVE-2020-2803 CVE-2020-2830 CVE-2020-2781 CVE-2020-2800 CVE-2020-2757 CVE-2020-2756 CVE-2020-2755 CVE-2020-2754 CVE-2020-2654 |
Multiple vulnerabilities in IBM Java SDK addressed in IBM Cloud Pak System (April 2020 updates) |
| Security Bulletin | CVE-2019-5436 | Vulnerability in libcurl affects the OS image for Red Hat Enterprise Linux for IBM Cloud Pak System (CVE-2019-5436) |
| Security Bulletin | CVE-2020-4230 CVE-2020-4135 CVE-2020-4200 CVE-2020-4161 |
Multiple vulnerabilities in IBM Db2 affect IBM Cloud Pak System and IBM Cloud Pak System Software Suite |
| Security Bulletin | CVE-2019-11135 | Vulnerability in side-channel in Intel CPUs affects IBM Cloud Pak System (CVE-2019-11135) |
| Security Bulletin | CVE-2020-3959 | IBM Cloud Pak System is affected by a vulnerability in the VMware component |
| Security Bulletin | CVE-2020-1967 | Vulnerability in OpenSSL library affects OS Pattern Kit used in IBM Cloud Pak System |
The following tables contain the Authorized Program Analysis Reports (APARs) and other fixes that are included in this release. If an integrated pattern or component is not listed, there were no fixes for that pattern or component in this version. The upgrade recommendation is to move directly to 2.3.3.0.
IBM Cloud Pak System APARs
| APAR | APAR Description |
|---|---|
| IT21356 | Unable to edit or modify the environment profile. |
| IT26845 | "Internal Server Error" occurs in Administering reports. |
| IT27276 | Must Gather logs script package failure in the virtual machine CAQA2018. |
| IT28546 | Cannot log in to the IBM Cloud Pak System user interface. |
| IT28736 | Error ID = 74002: Node warm-started due to an internal error on the V7K firmware V7.8.1.1. |
| IT29071 | The time zone set in the multi-cloud environment profile returns to the default value in a multi-system setup. |
| IT29106 | CMT current clients looping. RETAIN pages filling up. |
| IT29516 | Rest API needs to return more than 500 results by default. |
| IT32489 | Send notification getting disabled incorrectly. |
| IT32562 | Errors while updating network configuration. |
| IT32658 | A subdomain is unavailable: CWZIP5540W Shared file system disks are not available on nodes. |
| IT32863 | No storage expansions are visible - Compressed Capacity. |
| IT32932 | The Db2 upgrade fix pack failed on the HADR pair. |
| IT32944 | The Chargeback report returns incorrect information. |
| IT33283 | VSI deletion does not execute script package(s). |
| Internal tracking number | Issue | Fix |
|---|---|---|
|
|
Problems (APARS) fixed
Problems (APARS) fixed
Was this topic helpful?
Document Information
Modified date:
26 April 2023
UID
ibm16209596