IBM License Metric Tool (ILMT)

IBM License Metric Tool (ILMT)

Connect with Db2, Informix, Netezza, open source, and other data experts to gain value from your data, share insights, and solve problems.

 View Only
  • 1.  migration\product\lib\log4j-1.2.16.jar vulnerability

    Posted Thu February 16, 2023 02:44 PM

    Good day,  the following vulnerability reported in ILMT 9.2.26 or higher as shown below.  Is this file still needed or entire folder migration\SUA_2.x\lib can be deleted?   Please advise.  Thanks.

    Path              : C:\Program Files\ibm\LMT\migration\SUA_2.x\lib\log4j-1.2.16.jar
      Installed version : 1.2.16



    ------------------------------
    York Ly
    ------------------------------


  • 2.  RE: migration\product\lib\log4j-1.2.16.jar vulnerability

    Posted Fri February 17, 2023 02:21 AM

    Hello York,

    'C:\Program Files\ibm\LMT\migration' folder can be removed altogether as it's not used anymore.



    ------------------------------
    Thank you,
    Oktawian

    Oktawian Powązka, L3 Support
    IBM License Metric Tool
    ------------------------------



  • 3.  RE: migration\product\lib\log4j-1.2.16.jar vulnerability

    Posted Mon February 20, 2023 01:59 PM

    Thanks Oktawian for quick response.   Is there a plan to completely remove this ibm\LMT\migration folder in the future release?   Thanks.



    ------------------------------
    York Ly
    ------------------------------



  • 4.  RE: migration\product\lib\log4j-1.2.16.jar vulnerability

    Posted Mon February 20, 2023 03:39 PM

    Already working on it...

    Hopefully, in the next release: 9.2.31



    ------------------------------
    Thank you,
    Oktawian

    Oktawian Powązka, L3 Support
    IBM License Metric Tool
    ------------------------------