IBM Support

IBM DB2 for z/OS is not affected by the OpenSSL Heartbleed vulnerability (CVE-2014-0160)

Flashes (Alerts)


Abstract

IBM DB2 for z/OS is not vulnerable to the CVE-2014-0160 OpenSSL Heartbleed vulnerability.

Content

DB2 for z/OS in all editions and all platforms is NOT vulnerable to the OpenSSL Heartbleed vulnerability (CVE-2014-0160) because it does not use OpenSSL.

Remediation: No action required.

Change History: 17 April 2014: original document published

[{"Product":{"code":"SSEPEK","label":"Db2 for z\/OS"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"--","Platform":[{"code":"PF035","label":"z\/OS"},{"code":"PF025","label":"Platform Independent"}],"Version":"7.0;8.0;9.1;9.0;6.0;10.0;10.1;8.1;11.0","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
25 September 2022

UID

swg21670761