IBM License Metric Tool (ILMT)

IBM License Metric Tool (ILMT)

Connect with Db2, Informix, Netezza, open source, and other data experts to gain value from your data, share insights, and solve problems.

 View Only
  • 1.  ILMT Vulnerability

    Posted 12/16/21 02:17 PM

    Hi All,

    We received below Security Bulletin regarding Security vulnerabilities in ILMT,

    Need suggestion about how to check and remediate it,

    1. Security Bulletin: Security vulnerabilities in Apache Commons Compress affects IBM License Metric Tool v9. (2021.12.16)
    2. Security Bulletin: Security vulnerabilities have been identified in IBM DB2 shipped with IBM License Metric Tool v9. (2021.12.16)


    #AIX
    #Support
    #SupportMigration


  • 2.  RE: ILMT Vulnerability

    Posted 12/16/21 03:21 PM


  • 3.  RE: ILMT Vulnerability

    Posted 01/12/22 09:34 PM

    Hi George,


    We received few more log4j related vulnerability. Can you please guide to remediate them as well,


    ILMT:  

    /opt/ibm/WebSphere/LMT/migration/SUA_2.x/lib/log4j-1.2.16.jar

    /opt/ibm/WebSphere/LMT/migration/product/lib/log4j-1.2.16.jar



    DB2:

    /opt/ibm/db2/V11.5/federation/jdbc/lib/log4j-core-2.13.3.jar

    /opt/ibm/db2/V11.5/federation/restservice/hyperledger-fabric/log4j-core-2.13.3.jar


    /opt/ibm/db2/V11.5/db2tss/lib/log4j-1.2.17.jar


    /opt/ibm/db2/V11.5/federation/jdbc/lib/log4j-core-2.13.3.jar

    /opt/ibm/db2/V11.5/federation/restservice/hyperledger-fabric/log4j-core-2.13.3.jar



    #AIX
    #Support
    #SupportMigration