ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » General IBM MQ Support » Potential Data Integrity issue and a Security Vulnerability

Post new topic  Reply to topic
 Potential Data Integrity issue and a Security Vulnerability « View previous topic :: View next topic » 
Author Message
JasonE
PostPosted: Tue Feb 24, 2009 3:50 am    Post subject: Potential Data Integrity issue and a Security Vulnerability Reply with quote

Grand Master

Joined: 03 Nov 2003
Posts: 1220
Location: Hursley

This is just a heads up on two important issues that IBM released notifications about yesterday:
Quote:
Potential Data Integrity Issue (IC60063)
Affects v6 and v7 circular logging queue managers
See IBM Flash at http://www-01.ibm.com/support/docview.wss?rs=171&context=SSFKSJ&context=SSEP7X&dc=D600&uid=swg21375605&loc=en_US&cs=UTF-8&lang=en

Quote:
Security Vulnerability (IZ40824)
Affects Unix platforms (not Windows or Z/OS)
See IBM Flash at http://www.ibm.com/support/docview.wss?rs=171&context=SSFKSJ&context=SSEP7X&dc=D600&uid=swg21376107&loc=en_US&cs=UTF-8&lang=en

Fixes...
Since both fixes overlap, combined fixes have been produced - See http://www-01.ibm.com/support/docview.wss?rs=0&uid=swg24022268
Back to top
View user's profile Send private message
PeterPotkay
PostPosted: Tue Feb 24, 2009 7:50 pm    Post subject: Reply with quote

Poobah

Joined: 15 May 2001
Posts: 7722

Jason, the link recommends rebuilding the QM simply to get more (not bigger) primary logs. Why? Restarting the QM is all that's need to increase the # of logs, right?
_________________
Peter Potkay
Keep Calm and MQ On
Back to top
View user's profile Send private message
JasonE
PostPosted: Wed Feb 25, 2009 2:13 am    Post subject: Reply with quote

Grand Master

Joined: 03 Nov 2003
Posts: 1220
Location: Hursley

Hiya,

If you take a queue manager offline and increase the number of primaries, then restart the queue manager, these primaries are not preallocated (as they would be at crtmqm time) and hence we continue to use the logs we have over and over again. Once we run out of log space we will add in a log, which is there the problem occurs for the duration of that run of the queue manager. Upon restart, that new log will continue to be in the usable log space array (safely) compared to a secondary log which we may release and delete once it is not needed.

By far the simplest solution is to apply the fix (aplogies for the highlighting, but wanted anyone reading this to be under no doubt). The only 'alternative' to recreating the queue manager is to shut down, increase the number of primaries, restart, deliberately fill the logs completely (eg have a deliberately long running task), shutdown, restart. Deliberately filling the logs is not necessarily a good idea on a production machine, whereas recreating the queue manager can be planned.

PS Peter - Your trailer info needs updating as one URL has moved (or was giving an error this morning)
Back to top
View user's profile Send private message
gbaddeley
PostPosted: Sun Mar 15, 2009 3:03 pm    Post subject: Reply with quote

Jedi Knight

Joined: 25 Mar 2003
Posts: 2538
Location: Melbourne, Australia

The fixes for these 2 issues in MQ 6.0 are in FixPack 6, released at the end of last week : http://www-01.ibm.com/support/docview.wss?uid=swg21377756

No sign of MQ 7.0 FixPack 2 yet...

http://xforce.iss.net/xforce/xfdb/48529 says APAR IZ40824 is applicable to MQ 5.3 but it is very unlikley that IBM will provide a fix because its out-of-support s/w.
_________________
Glenn
Back to top
View user's profile Send private message
JasonE
PostPosted: Mon Mar 16, 2009 1:23 am    Post subject: Reply with quote

Grand Master

Joined: 03 Nov 2003
Posts: 1220
Location: Hursley

Yep... 6.0.2.6 is out

From http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
Quote:
Fix Pack 7.0.0.2 - 2Q 2009


Dont hold your breath that it will be early in that quarter...
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » General IBM MQ Support » Potential Data Integrity issue and a Security Vulnerability
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.