Domino e Notes 8.5.3 FP5 , java security fix e raccomandazioni

IBM continua nello sviluppo dei fixpack della 8.5.3 e rilascia FP5 per Dominio e Notes.
Questa release introduce 74 correzioni rispetto a FP4 ed aggiorna la versione di Java alla 1.6 SR14 per chiudere potenziali buchi di sicurezza ( upgrade già previsto anche per Domino 9.0 con la futura 9.0.1).


Quello che voglio comunicare oggi è il comportamento che i partner ed i clienti dovrebbero seguire riguardo ai FixPack: SI DEVONO INSTALLARE !!

Questa oltre che essere la mia opinione è anche l'opinione di IBM che si puo' vedere andando a leggere le release note:

While Fix Packs provide important fixes and IBM strongly recommends applying the latest Fix Pack available for a Maintenance Release, IBM still recommends that customers upgrade to the latest Release + Fix Pack combination to receive the broadest set of fixes available.


Clienti, colleghi , aggiornate i vostri server Domino !

NB: Se aggiornate un server Domino 8.53 alla FP5 dove gira Traveler, dovete aggiornare anche lui alla 8.5.2IF4 per renderlo pienamente compatibile con la nuova versione di Java.

In sequito la top fix list della FP5:


Client

• + SPR# SHEZ97GH6E(LO75199) Installs missing Windows runtime library that could prevent other applications from launching such as IBM Access Manager 7.1, IBM i Access, Citrix ICA Client, & Symantec Endpoint after installing Client 8.5.3 FP4. This was a regression introduced in 8.5.3 FP4. (technote 1637068)
• SPR# PANN99NFP3 - Updated Time Zone information in ICU4J based on tzdata2013d including Jerusalem and Casablanca as shown here:http://www.ibm.com/developerworks/java/jdk/dst/olson_table.html Please ensure your operating system is patched with latest timezone information to align with these changes.
• SPR# MCMA8ZVNRV(LO72562) Fixes Notes Client Crashes On Startup After Upgrading To Adobe Pdf Maker 10.1.4.38 (technote 1616935)
• SPR# SJCN8GXGKW(LO70212) Fixes issue were when sending a mail may the Notes client may crash under some addressing conditions
• SPR# SFBI8KBHB6(LO62736) Fixed an intermittent Notes client crash when updating with a calendar notification. (technote 1608886)
• SPR# SODY8RSJH9(LO67544) Fixed an issue that the hover icon would not appear when the mouse hovered over a live text annotation on a secondary display
• SPR# PANN8HDJVB(LO65662) Fixed an intermittent Notes Client hang issue after getting java script errors.
• SPR# MWID8RGK6C(LO67305) - Fixed an intermittent Notes client crash when opening certain messages. (technote 1607488)

Server

• SPR# RGAU8KCHMZ(LO62692) This fix prevents Domino Administrator from crashing when checking database properties on a remote server connected via slow WAN connection.
• SPR# JSSI88X82D(LO54534) Fixes error message "0x1B1 - version mismatch between executable and preexisting shared memory versions" when launching Domino server.
• SPR# VPRS8TWTSE(LO69140) Prevent a Server crash associated with passing an invalid database list to NSFGetDBChanges.(technote 1596387)
• SPR# KJKJ9468AY(LO74041) Fixed a Windows Domino 64-bit Server Lotusscript OLE crash. Domino in this environment was not handling the size of parameters being passed in.
• SPR# JPMS92FR9L(LO72807) Prevent Server POP3 crash due to high handle usage in BLK_NSF_MIME_BUFFER (technote 1631743)
• SPR# JCOL8LBJEF(LO63526) Fixes Domino Server Crash On SMTP during Tnef Conversion
• SPR# GRCE8JWMVR(LO68318) Fixes issue where Mailfile Preferences become corrupt when the rich text signature grows larger than ~32k.(technote 1644253)
• +SPR# RDJS94GTVD(LO73748) - Fixes Domino crash on 64 bit platforms, caused by having a LotusScript agent that makes C API calls to Operating System APIs iteratively, such as in a loop. This was a regression introduced in 8.5.2 FP3.(technote 1624936)

iNotes

• +SPR# PJON8SNW24(LO68332) Fixes a problem where parentheses "()" where being stripped out of user names when addressing a mail. This regression was introduced in 8.5.2
• +SPR# CTSI8T9S26(LO68707) Fixed problem with accepting valid Notes ID passwords containing special characters. This regression was introduced in 8.5.1.
• SPR# BBSZ8TPDSU(LO68985) Fixed problem preventing iNotes User with ID stored in Mail file from from being renamed in ID Vault.
• SPR# TMAI8N6HJC(LO65126) Fixes the error "A Problem has occurred which may have caused the current operation to fail." that occurs when pressing the Enter Key after changing mail format.
• +SPR# CTSI8WHL6X(LO70718) - Fixed a situation where upgrading a user with an existing archive would result in errors when attempting to archive a document in the newly upgraded client. This regression was introduced in 8.5.3 FP1.

Disponibile Domino 8.5.3 e Notes 8.5.3 FP4

E' uscito il nuovo FP della release 8.5.3 che comprende 70 FIX.

Alcune delle fix rilasciate

Client

• SPR# GMAA8TQEVG - Fixes issue where view column sorting isn't maintained in the inbox view. This is a regression in 8.5.2
• SPR# BBSZ82DCP8 - Fixes issue where when a user is renamed to a different Hierarchical Certifier, they get prompted the first time they launch the Notes client, to accept Cross Certificates for Organizations that they are not a member of.
• SPR# RCEA8JGM72 - Fixes issue on Red Hat 6 where the Admin Client does not show disk space
• +SPR# JSHN8ZZ2AB - Fixes Client focus issue when using an outline entry pointing at a view. This is a regression in 8.5.3 FP2.
• SPR# JKAE8M3DVD - Fixes intermittent Notes Client crash in AsyncReceivePoll -> PostReceive -> OSVBlockAddr -> Panic

Server

• SPR# ADC8QXA8M - Fixes Server crash with Unknown Error in process Unknown and function DbClose2
• SPR# BFUY8XNL8M - Fixes Server crash when closing documents associated with a database that is being closed in the imap process
• SPR# MJBG8MV72E - Fixes Domino Server router hang while doing a message recall
• +SPR# RFRF92V973 - Fixes issue where some Chinese characters get lost in a message sent by iNotes user
• SPR# RNOG8VDLTW - Fixes issue where if a user is renamed to an OU an error is received if there is a policy assigning that OU to the ID Vault
• SPR# MKHS8L3TR3 - Fixes issue where users are prompted serveral times to create local cross-certificate after being moved to a new org using Adminp
• SPR# JWAE7L5SU2 - Fixes Server SMTP crash in NSFItemAppend
• SPR# TSAO8XFGBQ - Fixes Server crash with unexpected internal error returned to logger: 0x200F2010
• +SPR# JPMS8WVLW9 - Fixes performance issue where Clients are unable to connect to Server due to issue in UNK processing. This is a regression from 8.5.2.
• SPR# XCXC7MEDPQ - Fixes server crash during conversion of a document to html by the http process
• +SPR# THIO8T2FJ6 - Fxes issue where after upgrading to Domino 8.5.3, the subject of a mail is lost if that subject contains Japanese characters. This is a regression in 8.5.3.
• SPR# ANIA8RVE8Y - Fixes Server crash in Domidx while removing databases from the Domain Index
• SPR# ANIA8JG9BN - Defensive fix to avoid an issue where the Event Task Crashes With "Panic: Osvblockaddr: Bad Vblock Handle." We now check to ensure that the VBlock handle is NOT NULL before using it.
• SPR# MBOD8GZQBH - Fixed an issue where the mail file path (replica reference) of a replica copied using dbmove is incorrect on the target server.

iNotes

• +SPR# TSAO8MAEHH - When Alternate Name Support is enabled, while in the inbox, modification of the "To" Address is not reflected in the Altsendto Field. This is a companion fix to SPR IISA8WQABL. This is a regression in 8.5.2.
• +SPR# IISA8WQABL - When Alternate Name Support is enabled, while in the preview pain, modification of the "To" Address is not reflected in the Altsendto Field. This is a companion fix to SPR TSAO8MAEHH. This is a regression in 8.5.2.

A questa pagina le note di rilascio , e qui i download .

Buona fix a tutti

Sametime Community 8.5.2 IFR1 - Cumulative Fix Awareness

Ieri IBM ha reso disponibile un cumulative Fix pack che raccoglie le Fix relative all'awareness uscite fino ad ora.

In questa technote potete trovare la descrizione ed il link al download sul fixcentral.

L'indicazione di IBM nel caso che abbiate più Community Server nel vostro ambiente  è quello di installare questa fix su tutti i server dell'ambiente, in caso contrario l'efficacia potrebbe non essere garantita.

Perchè IBM non rilascia dei FixPack per Sametime come già fa per Domino???

IBM: why doesn't provide Sametime cumulative fix for every Sametime Server like Domino FixPack to semplify fix management ?? Another suggestion could be create updated setup with IFR1 and updated fix embedded.

Domino 8.5.3 Fix Pack 2 disponibile

Oggi è uscito Domino 8.5.3 fixpack 2 che comprende le seguenti fix per la parte client, server e inotes

Client

• SPR# VSHA8AZVL4 (LO66100) - Fixed a Notes client crash that could occur closing a database
• SPR# VSHA8B2R79 (LO61397) - Fixes potential hang on launch of an attachment
• +SPR# PCHE89APJV (LO54770) - Fixed a problem where the view pane shrunk after multiple opens. This regression was introduced in 8.5.2.
• SPR# RHAN8CVS32 (LO57550) - Notes client crash trying to delete message after error "ILLEGAL DELETE"
• SPR# ADC8RLQCG - Fixes Notes client hang in print dialog
• +SPR# RRAL8M5MGS (LO66747) - Fixed an issue which occurred when sending a confirmation of an Event Announcement to a group that contains duplicate subgroups. The message would not be sent after receiving the following error: "An error occurred while saving: Document has invalid structure". (technote 1600390)
• SPR# ADC8QQA8M (LO68639) - Fixes Notes crash with Unknown Error in process Unknown and function ListMergeList.
• +SPR# BHUY8MZJR8 (LO64992) - Fixes issue where the navigator pane is opening very small when the "Auto adjust panes at runtime" flag on the navigator properties is set.
• SPR# MOBN6ZKLBH (LO40207) - Fixes issue where synching contacts does not fail over to any other replicas.(technote 1579082)
• SPR# PJOK8NNSSX - Fixes issue where Notes client interactions are being terminated as the result of a roaming upgrade check on the UI thread
• SPR# PACY8M6HN6 (LO64338) - Fixes issue where contact synchronization can delete mails from different databases having different replica IDs. (technote 1596479)
• SPR# TMDS8MQMPY (LO64760) - Fixes issue using XenApp Active Directory and setting Time Zone Redirection via Group Policy Object editor whereby the Lotus Notes calendar shows incorrect start and end times. (technote 1584369)

Server

• SPR# TITH8LNG8F (LO63791) - Fixed an Domino server HTTP crash on an iNotes request. (technote 1579496)
• +SPR# TPON8N7DKT (LO65112) - Fixes issue where return receipt does not include the return receipt body when disclaimers are enabled. (technote 1586180)
• SPR# MHAR842JGR (LO65881) - Fixes a Domino server crash with error:: Process C:\WINDOWS\system32\mmc.exe (3224/0xC98) has terminated abnormally
• SPR# ATHS7BCW5L (LO64918) - Fixed a Domino server crash in OSUnlockSem trying to release memory for Sem which was indirectly deleted by another thread
• +SPR# JPMS8NLJQQ (LO65446) - Fixes a Domino server crash on CollectSuperBlock. (technote 1594703)
• SPR# PHEY8KRJJ7 (LO63073) - Fixes Domino server CPU spike to 100% and shutdown hang when Platform Statistics are enabled. (technote 1584409)
• +SPR# SODY8RBKY6 (LO67196) - Fixes issue where CKEditor in XPages does not work correctly if there are two rich text editors on the page
• SPR# DSAN8NUV5S (LO65640) - Fixes Domino server crash in Adminp task when registering people
• SPR# YVEN87MQUH (LO69091) - Fixes Domino server with Traveler crash on HTML conversion
• SPR# ADC8PJPRD - Fixes Domino server crash in senddiag with Unknown Error

iNotes Web Access

• +SPR# MLEY8P2LQC (LO65714) - Fixes issue where the Out Of Office message in the body of the out of office mail is incorrect in German iNotes.
• +SPR# MYAA8NNBFD (LO65509) - Fixes JavaScript error when user uses Ctrl+A to select all contents in rich text editor followed by hitting the Enter key. (technote 1586423)
• SPR# PTHN87DRAA (LO65919) - Fixed an issue surrounding an expired token that would lead to hundreds of duplicate requests '/iNotes/Proxy/?OpenDocument&Form=l_CommonPollJSON&PresetFields=FolderName;($Alarms),DBQuotaInfo/'. Server console reports: "ERROR: when decoding LtpaToken [Single Sign-On token is expired]."
• SPR# PTHN8QUSVP (LO69886) - Addressed security issue CVE ID: CVE-2012-2175. Prior to the fix, it is possible for an attacker to compromise the DWA85W ActiveX control used within Lotus iNotes to remotely execute arbitrary code by instantiating this control from Microsoft Internet Explorer. This was also addressed in iNotes 8.5.3 Fix Pack 1 Interim Fix 1. (technote 1596862)

Il download dei pacchetti lo potete trovare a questa pagina, buon aggiornamento a tutti!

Upgrade Pack && Fix Pack

Come già scritto in precedenti post IBM ha iniziato a rilasciare i controlli Xpages sviluppati dalla comunità in forma di Upgrade Pack, che si vanno quindi ad aggiungere ai classici Fixpack che rimangono in essere come raccolta di Fix.

Ma se ho installato un Upgrade Pack, posso in seguito installare in Fix Pack?
Fortunatamente come logica vuole la risposta è si, si possono installare i Fix Pack della maintenance release in uso ma a mio parere non si è mai sufficentemente sicuri senza porsi questi problemi.!

Ecco il link alla technote che conferma quanto detto

Domino e Notes 8.5.3 fp1 quasi disponibile

Come sapete IBM mantiene le varie release di Domino e Notes con dei Fix Pack che vengono rilasciati a cadenza maggiore da qualche relase. Questi FP contengono la raccolta di FIX che vanno a correggere i BUG che vengono riconosciuti e risolti  e generalmente vengono inglobati nelle major release successive (purtroppo non sempre accade e si chiamano regression bug).

La FP1 della 8.5.3 è andata in stado di GOLD da alcuni giorni (terminata) quindi dovrebbe essere disponibile a ore.

Nel link seguente potete vedere lo stato delle release Domino, delle sue FP quando sono state rilasciate e quante e quali fix contengono.

Qui sotto invece il contenuto del 8.5.3Fp1


Client

• +SPR# PANN8LNT3Y - Fix resolves a Calendar refresh issue. Calendar documents failed to display without hitting Refresh.
• +SPR# EFUU8P4V6P - Fix resolves "Invalid Or Nonexistent Document" error for a form with a "Microsoft Web Browser" control in Notes 8.5.3.
• SPR# ACHG8H6DAR - Fixed the issue where a Notes client internal error occurred during: "Dip File Auto Savejob".
• SPR# AFIL8GLGK4 - Fixed a problem where creating a mail with right-click on Sametime contact resulted in the display of all mail in the application showing as part of the 'conversation'.
• +SPR# ICRE8HGS65 - Fix resolves an issue where Html bold, italic, and underline tags are not rendering with Embedded Browser disabled in 8.5.2 & 8.5.3.

Server

• SPR# RNOG82FPFV - Fix resolves use of Program document to shutdown the Domino server with nserver -q correctly.
• SPR# DANG7UCHMJ - Fix resolves use of REPL_SYNC_ALL_UNREAD notes.ini parameter as designed to sync unread counts across replicas.
• SPR# BBSZ8MRKYS - Fix resolves replication issue around Profile documents not replicating.
• +SPR# GTON8GHD4N - Fix resolves a defect where profile documents are not replicating when the best merge flag on the properties of the form is set in the design.
• +SPR# NORK86PNB8 - Fix resolves a potential Domino Server Performance issue when email messages are trying to find the next hop to a domain where there are thousands of connection documents in the directory.
• +SPR# NBRR8LHTGP - Resolved a server crash when trying to open signed S/MIME email in 8.5.2 FP3.

iNotes Web Access

• +SPR# MJON8MRQGX - Fix resolves an issue in iNotes where Vertical Scroll Bar does not work in iNotes 853 when using IE8 in Compatibility Mode.
• +SPR# MJON8MSK2V - Fix resolves an issue in 8.5.3 iNotes where logout button does not work in Full Mode when Sametime is enabled in the preferences.
• +SPR# CTSI8MLMDR - Fixed an issue where the notes.ini setting, iNotes_WA_DefaultUI, was causing requests to be issued repeatedly.
• SPR# MVEO8JXQLN - Resolved HTTP crashes on Domino clustered servers caused by iNotes Client.

Lotus Quickr for Domino 8.5.1 fixpack 25: ecco le funzionalità

Quickr Domino 8.5.1 balza dal fixpack 12 al fixpack 25 e non ci sono solo i soliti bugfix che accompagnano le uscite quasi mensili di ma comprende le nuove caratteristiche annunciate a #LS12 , in particolare:

• Addition of the Folder Navigator for libraries with deep folder hierarchies and the Index
• Improved preview for Microsoft Office file attachments and imported pages
• Support for importing HTML
• Display of an attachment's last modified date on Attachments tab
• Simplified place creation process that eliminates the requirement of reauthentication
• The ability for editors and authors to create folders in a place.
• Support for Internet Site documents
• Support for Microsoft Office 2010

Personalmente apprezzo molto l'eliminazione della reauthentication in fase di creazione place!
Consigliatissimo l'aggiornameto! Potete trovare degli screenshot dettagliati sul wiki