IBM Support

IT01002: SECURITY VULNERABILITIES WITH OPENSSL

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • OpenSSL security vulnerabilities exist with Tivoli Storage
Productivity Center.

CVE-2014-0160
CVE-2014-0076

Local fix

  • See security bulletin.

Problem summary

  • Users Affected:
Those using TPC 4.2.2.143 (FP3) through 4.2.2.177

Problem Description:
See ERROR DESCRIPTION.

Problem conclusion

  • The fix for this APAR is targeted for the following maintenance
packages:

| fix pack | 4.2.2-TIV-TPC-FP0006 - April 2014
| fix pack | 5.1.1-TIV-TPC-FP0004 - April 2014
| refresh pack | 5.2.1-TIV-TPC-FP0001 - April 2014

Please review the security bulletin for details.
http://www-01.ibm.com/support/docview.wss?&uid=swg21320822

The target dates for future refresh packs or fix packs do not
represent a formal commitment by IBM. The dates are subject to
change without notice.

Temporary fix

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    IT01002
    • 

  • Reported component name
    TPC STANDARD ED
    • 

  • Reported component ID
    5608TPCS0
    • 

  • Reported release
    422
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt
    • 

  • Submitted date
    2014-04-15
    • 

  • Closed date
    2014-04-22
    • 

  • Last modified date
    2014-04-22
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    
IT01003
    

    • 



Fix information


    

  • Fixed component name
    TPC STANDARD ED
    • 

  • Fixed component ID
    5608TPCS0
    • 



Applicable component levels


    

  • R422  PSY
       UP
    • 








      
              
                            

              

              [{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SS5R93","label":"IBM Spectrum Control"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"422","Edition":"","Line of Business":{"code":"LOB26","label":"Storage"}}]
              

                          

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            23 March 2022
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback