IT08539: FIX SECURITY VULNERABILITY CVE-2015-2808 FOR TPC 5.X

4.2.2 Fix Pack 9 (May 2015) for Tivoli Storage Productivity Center
4.2.2 Fix Pack 10 (August 2015) for Tivoli Storage Productivity Center

APAR status

• Closed as program error.

Error description

• Security update for vulnerability CVE-2015-2808
  
  
  Affected versions:
  Tivoli Storage Productivity Center 5.2.0 through 5.2.5
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * TPC 4.x users                                                *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Vulnerability in RC4 stream cipher affects Tivoli Storage    *
  * Productivity Center (CVE-2015-2808)                          *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * See security bulletin for details.                           *
  * http://www.ibm.com/support/docview.wss?uid=swg21883158       *
  ****************************************************************
  

Problem conclusion

• See security bulletin for full details to resolve.
  http://www.ibm.com/support/docview.wss?uid=swg21883158
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IT08318

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• SECURITY
  

Fix information

• Fixed component name

  TPC STANDARD ED

• Fixed component ID

  5608TPCS0

Applicable component levels

• R422 PSY

     UP