Azul Zulu Java Multiple Vulnerabilities

1

Detailed explanation of the problem:

hi, i use webMethods 10.15, and have scan vulnerability assessment and got finding Azul Zulu Java Multiple Vulnerabilities , and the recommendation is

Path : /opt/soa/sag1015/is/jvm/jvm0148.bck/

Installed version : 11.58.24

Fixed version : Upgrade to a version 11.63.16 (SA) and above

Path : /opt/soa/sag1015/is/jvm/jvm/

Installed version : 11.62.18

Fixed version : Upgrade to a version 11.63.16 (SA) and above

if i update the component to that version is it safe? or i must update the version of webMethods as a full package?

Thank you

2

Hi,

you should check on Empower or IBM webMethods Support Site (preferrably via SAG UpdateManager), if there is a CJP-Fix available, which contains the Azul Zulu Java Version you are looking for.

Manually updating the JVM is not recommended.

Regards,
Holger

1 Like
3

Installing updates selectively isn’t usually recommended. If the updates are accumulated, the recommended action is to take a back up and then install every fixes starting from the lowest environment and gradually applying the fix to higher environment later on.

1 Like