| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Usage of Apache Commons with Message Broker |
« View previous topic :: View next topic » |
| Author |
Message
|
| muralihegde |
 Posted: Fri Jan 29, 2016 5:56 am Post subject: Usage of Apache Commons with Message Broker |
 |
|
Centurion
Joined: 30 Apr 2002
Posts: 108
|
We are using WebSphere Message Broker V8.0. We will need to determine if we are using Apache Commons as part of the implementation? We are trying to look for information as to which specific feature of message broker internally uses Apache Commons. For example, is it the usage of soap nodes, http nodes or any other specific nodes/features use apache commons. We need to determine if the scenario listed in the Security Bulletin is applicable to our customer implementation: Vulnerability in Apache Commons affects WebSphere Message Broker and IBM Integration Bus (CVE- 2015-7450) http://www-01.ibm.com/support/docview.wss?uid=swg21972391 .
I searched in the product help/infocenter, could not find this information. |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Fri Jan 29, 2016 6:08 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
The security bulletin you pointed to talks about the Global Cache component.
Are you using it? Do you plan on using it in the future?
Are you sure you will remember when the next flow wanting to use the Global Cache component comes up for review?
Just download the APAR and plan on applying it... 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| muralihegde |
| Posted: Mon Feb 01, 2016 4:26 am Post subject: |
|
|
Centurion
Joined: 30 Apr 2002
Posts: 108
|
Thanks. I will check with the development team to verify the usage of Global Cache.
I agree it is recommended to go ahead and install the APAR.
However on a practical point of view, with the number of message broker installations and the time/effort needed to do a check out verification etc, we might want to limit the frequency of installs/updates based on the urgency/impact. If the Global Cache is not being used as of today, probably with the next FixPack install, I assume this APAR would be included. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
