PI05413: CPSM WUI JAVA POPUP WARNING ABOUT AN UNSIGNED APPLICATION AFTER APPLYING JAVA MAINTENANCE

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• After upgrading or applying Java maintenance to the Java JRE
  from Sun/Oracle, you begin getting popup warnings about an
  unsigned applet on each interaction with the CPSM WUI.
  
  In January, Oracle issued security bulletin CVE-2013-0422 which
  changed one of the defaults for the JRE. That bulletin can be
  found here
  
  http://www.oracle.com/technetwork/topics/security/alert-cve-2013
  -0422-1896849.html
  
  CPSM needs to address this issue so that a popup warning window
  is not constantly appearing.
  
  Additional Symptom(s) Search Keyword(s): KIXREVSVR
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICSPlex SM V5R1M0 Users                 *
  ****************************************************************
  * PROBLEM DESCRIPTION:    After upgrading or applying Java     *
  *                      maintenance to your Java JRE, you begin *
  *                      getting popup warnings about unsigned   *
  *                      applets on each interaction with the    *
  *                      CPSM Web User Interface (WUI).          *
  ****************************************************************
  * RECOMMENDATION:    After applying the PTF that resolves      *
  *                 this APAR, all MASes configured as CPSM      *
  *                 WUI servers must be recycled to pick up      *
  *                 the new code.  Note that regions do not      *
  *                 need to be brought down and restarted at     *
  *                 the same time.                               *
  ****************************************************************
     Oracle issued security bulletin CVE-2013-0422 which changed
  one of the defaults for the JRE.  That bulletin can be found
  here:
  
  http://www.oracle.com/technetwork/topics/security/alert-cve-2013
  -0422-1896849.html
  

Problem conclusion

• Java applets EYUWUIWATCHDOG, which monitors browser sessions,
  and EYUWUILIGHT, which implements special display options like
  range bars and status lights, were distributed as unsigned CLASS
  files.  These applets have been repackaged in a signed JAR.
  

Temporary fix

• FIX AVAILABLE BY PTF ONLY
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PI05340

• APAR is sysrouted TO one or more of the following:

  UI12776

Modules/Macros

• EYU0VHVA EYU0VHVQ EYU0VHVR EYU0VPAB EYU0VPAP EYU0VUHI EYUEVHVA
  EYUEVPAF EYUEVPNF EYUKVHVA EYUKVPAF EYUKVPNF EYUSVHVA EYUSVPAF
  EYUSVPNF EYUTVTJE EYUTVTJK EYUTVTJS
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R80M PSY UI12776

     UP13/12/02 P F311

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.