IBM License Metric Tool (ILMT)

IBM License Metric Tool (ILMT)

Connect with Db2, Informix, Netezza, open source, and other data experts to gain value from your data, share insights, and solve problems.

 View Only
  • 1.  ILMT Vulnerability

    Posted Thu December 16, 2021 02:17 PM

    Hi All,

    We received below Security Bulletin regarding Security vulnerabilities in ILMT,

    Need suggestion about how to check and remediate it,

    1. Security Bulletin: Security vulnerabilities in Apache Commons Compress affects IBM License Metric Tool v9. (2021.12.16)
    2. Security Bulletin: Security vulnerabilities have been identified in IBM DB2 shipped with IBM License Metric Tool v9. (2021.12.16)


    #AIX
    #Support
    #SupportMigration


  • 2.  RE: ILMT Vulnerability

    Posted Thu December 16, 2021 03:21 PM


  • 3.  RE: ILMT Vulnerability

    Posted Wed January 12, 2022 09:34 PM

    Hi George,


    We received few more log4j related vulnerability. Can you please guide to remediate them as well,


    ILMT:  

    /opt/ibm/WebSphere/LMT/migration/SUA_2.x/lib/log4j-1.2.16.jar

    /opt/ibm/WebSphere/LMT/migration/product/lib/log4j-1.2.16.jar



    DB2:

    /opt/ibm/db2/V11.5/federation/jdbc/lib/log4j-core-2.13.3.jar

    /opt/ibm/db2/V11.5/federation/restservice/hyperledger-fabric/log4j-core-2.13.3.jar


    /opt/ibm/db2/V11.5/db2tss/lib/log4j-1.2.17.jar


    /opt/ibm/db2/V11.5/federation/jdbc/lib/log4j-core-2.13.3.jar

    /opt/ibm/db2/V11.5/federation/restservice/hyperledger-fabric/log4j-core-2.13.3.jar



    #AIX
    #Support
    #SupportMigration