IBM Support

IV59876: PROTOSSLENGINE DOES NOT HANDLE PROPERLY UNKNOWN CONTENT TYPE SUC H AS THE ONE FOR HEARTBLEED.

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • Error Message: Causes WebSphere denial of service in Java 5 when
    running a python script to test the Heartbleed bug
    .
    Stack Trace: N/A
    .
    N/A
    

Local fix

  • N/A
    

Problem summary

  • When unknown content type was received, ProtoSSLEngine cannot
    handle the status properly
    

Problem conclusion

  • This APAR will be fixed in the following Java Releases:
       5.0  SR16 FP7  (5.0.16.7)
    .
    A fix is made to IBMJSSE2 provider to handle unknown content
    typeThe associated Hursley RTC Problem Report is 64781The
    associated Hursley CMVC defect is 202233The associated Austin
    CMVC defect is 115448The associated Austin APAR is IV59780JVMs
    affected: Java 5.0The fix was delivered for Java 5.0 SR16FP7The
    affected jar is "ibmjsseprovider2.jar".The build level of this
    jar for the affected releases is "20140424"
    

Temporary fix

Comments

APAR Information

  • APAR number

    IV59876

  • Reported component name

    JAVA 5 SECURITY

  • Reported component ID

    620500125

  • Reported release

    500

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2014-04-28

  • Closed date

    2014-05-05

  • Last modified date

    2014-07-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    JAVA 5 SECURITY

  • Fixed component ID

    620500125

Applicable component levels

  • R500 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSNVBF","label":"Runtimes for Java Technology"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.0","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
07 December 2020