刊登日期:
03/31/2015
下刊日期:
12/31/2099
資料來源:
IBM
標 題:
IBM Notes/Domino FAQ for March, 2015
內 容:
This month's mailing has seven sections:
1. Announcement - End of support for Notes/Domino/Sametime/LEI 8.0.x since April 30, 2015
2. Interim Fixes: Notes 901FP3IF3 / Domino 901 FP3IF2 available with TLS 1.2 support
3. Security Bulletin: IBM Domino LDAP Server (CVE-2015-0117),SSL V2 (CVE-2015-0134) & Notes System Diagnostics (CVE-2015-0179) vulnerabilities
4. Recent Published Technotes
5. Answers to Frequently Asked Questions
6. Upcoming OpenMic sessions
7. General Self-Help Resources
.
End of support for Notes/Domino/Sametime/LEI 8.0.x since April 30, 2015
URL:
http://www-01.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS914-082
Effective on the dates listed below, IBM will withdraw support from the following product release(s) licensed under the IBM International Program License Agreement:
5724-L76 8.0.0 04/30/15 IBM Enterprise Integrator V8.0.0
5724-L76 8.0.2 04/30/15 IBM Enterprise Integrator V8.0.2
5724-E62 8.0.0 04/30/15 IBM Lotus Notes/Domino V8.0.0
5724-E62 8.0.1 04/30/15 IBM Lotus Notes/Domino V8.0.1
5724-E62 8.0.2 04/30/15 IBM Lotus Notes/Domino V8.0.2
5724-J23 8.0.0 04/30/15 IBM Lotus Sametime V8.0.0
5724-J23 8.0.1 04/30/15 IBM Lotus Sametime V8.0.1
5724-J23 8.0.2 04/30/15 IBM Lotus Sametime V8.0.2
For more information, please refer to
IBM Software Support Lifecycle
Kindly reference links included in technote #1623106:
Title: Upgrade Central: Planning your upgrade to IBM Notes and Domino 9.0.x
URL:
http://www-01.ibm.com/support/docview.wss?uid=swg21623106
Interim Fixes: Notes 901FP3IF3 / Domino 901 FP3IF2 available with TLS 1.2 support
Transport Layer Security (TLS) ensure confidential network communication between application and Internet users.
Notes 9.0.1 FP3 IF 3 and Domino 9.0.1 FP3 IF2 or above starts to support
TLS 1.2
.
After installing Notes 9.0.1 FP3 IF 3 / Domino 9.0.1 FP3 IF2 , HTTP, SMTP, LDAP, POP3, IMAP Protocols support TLS 1.2 .
Before installing Notes/Domino 901 FP3 IF3/IF2, you should install
Notes/Domino 901 FP3
, then follow steps below:
1) Shutdown Notes client or Domino server processes
2) Find appropriate fix for specific platform, download and install
3) Launch Notes client or Domino server
Kindly notice:
1. Java support for TLS 1.2 (included in the JVM embedded with Notes & Domino) requires separate fixes, please refer to:
Security Bulletin: Multiple Vulnerabilities in the IBM Java SDK affect IBM Notes and Domino (Oracle January 2015 Critical Patch Update)
2. TLS support for DIIOP is not available at this time. The request has been submitted to Quality Engineering as SPR# ITDL9U329W.
3. These Interim fixes do not support TLS 1.1, IBM do not plan to support TLS 1.1 yet.
4. Since Interim Fixes do not permit changes to the user interface or to templates used for configuration (e.g. Domino server document, Internet site document where SSL is configured), all SSL configuration options remain in the UI. However, as mentioned above, the installation of this Interim Fix will override your existing configuration with support for TLS 1.2
5. Interim fixes still support SSL V3 by default for backward compatibility. To disable SSL V3, please add following notes.ini parameter on Domino server
:
DISABLE_SSLV3=1
Domino 9.0.1 FP3 IF2
Platform
Fix Central ID
W32
DominoServer_901FP3IF2_W32
W64
DominoServer_901FP3IF2_W64
Linux
DominoServer_901FP3IF2_Linux
Linux64
DominoServer_901FP3IF2_Linux64
AIX32
DominoServer_901FP3IF2_AIX32
AIX64
DominoServer_901FP3IF2_AIX64
IBM i Series
DominoServer_901FP3IF2_IBMi_6.1_7.1
System z
DominoServer_901FP3IF2_zSeries
Notes 9.0.1 FP3 IF3
Platform
Fix Central ID
W32
Notes_901FP3IF3_W32_Basic
W64
Notes_901FP3IF3_W32_Standard
Linux
Notes_901FP3IF3_MAC_Standard
Linux64
Notes_901FP3IF3_Linux_BinaryFiles
For comprehensive list of fixes included in Notes/Domino 9.0.1 FP3 IF, please refer to:
Interim Fixes for 9.0.1.x versions of IBM Notes, Domino, iNotes & Notes Browser Plug-in
http://www-01.ibm.com/support/docview.wss?uid=swg21657963
Security Bulletin: IBM Domino LDAP Server (CVE-2015-0117),SSL V2 (CVE-2015-0134) & Notes System Diagnostics (CVE-2015-0179) vulnerabilities
Problem Summary: IBM Domino has an LDAP remote execution vulnerability, an SSL V2 buffer overflow vulnerability and an NSD privilege escalation vulnerability.
The Domino LDAP server vulnerability is tracked as SPR KLYH9SLRGM and fixes
9.0.1 Fix Pack 3 Interim Fix 1
,
8.5.3 Fix Pack 6 Interim Fix 6
are available.
The Domino SSL V2 vulnerability is fixed on all 8.5.x and 9.0.x releases.
9.0.1 Fix Pack 2 Interim Fix 3
,
9.0 Interim Fix 7
,
8.5.3 Fix Pack 6 Interim Fix 6
,
8.5.2 Fix Pack 4 Interim Fix 3
,
8.5.1 Fix Pack 5 Interim Fix 3
removed SSL V2 support in favor of SSL V3 and TLS.
The Notes/Domino NSD privilege escalation vulnerabilty is tracked as SPR TCHL9SST8V and fixes
9.0.1 Fix Pack 3 Interim Fix 1
,
8.5.3 Fix Pack 6 Interim Fix 6
are available.
IBM strongly recommends applying the above fixes. Refer to the links below for fix downloads.
http://www-01.ibm.com/support/docview.wss?uid=swg21700029
Recent Published Technotes
Title: What are IBM's plans surrounding IBM HTTP Server (IHS) support in Domino?
URL:
http://www.ibm.com/support/docview.wss?uid=swg21697303
Title: Deleted user still shows up in License Tracking
URL:
http://www.ibm.com/support/docview.wss?uid=swg21699083
Title: Error processing certificate created by /org for /org: The subject's public key found in the certificate is not the one stored in our ID file for that entity appears in a users local log.nsf after a key rollover
URL:
http://www.ibm.com/support/docview.wss?uid=swg21698715
Title: LS2J "Java constructor failed to execute" error occurs after installing Notes 9.0.1 Fix Pack 3
URL:
http://www.ibm.com/support/docview.wss?uid=swg21696682
Title: Security Bulletin: Multiple Vulnerabilities in the IBM Java SDK affect IBM Notes and Domino (Oracle January 2015 Critical Patch Update)
URL:
http://www.ibm.com/support/docview.wss?uid=swg21698222
Frequently Asked Questions
Title: How to launch Notes Basic Configuration from a mailto: command
URL:
http://www-01.ibm.com/support/docview.wss?uid=swg21305054
Title: Can I restore hard deleted documents in a database?
URL:
http://www-01.ibm.com/support/docview.wss?uid=swg21679494
Title: Can the POP3MarkRead parameter cause messages to be marked as READ?
URL:
http://www-01.ibm.com/support/docview.wss?uid=swg21438596
Title: Error: 'Field is too large (32k) or view's column and selection formulas too large' when saving document
URL:
http://www-01.ibm.com/support/docview.wss?uid=swg21087474
Title: How to Customize Search Results for Web Browsers Using LotusScript
URL:
http://www-01.ibm.com/support/docview.wss?uid=swg21104833
Recently Published Open Mic Sessions
Topic: Webcast: iNotes Setup, Configuration & Troubleshooting - 25 February 2015
URL:
http://www-01.ibm.com/support/docview.wss?uid=swg27044517
The IBM Domino Web Server team shared information on "iNotes Setup, Configuration & Troubleshooting." .
Topic: Webcast: POODLE fix and SHA-2 Implemetation - 25 February 2015
URL:
http://www-01.ibm.com/support/docview.wss?uid=swg27045179
The IBM Domino Web Server team shared information on "POODLE fix and SHA-2 implementation" .
Upcoming Open Mic Sessions
Topic: Ask us anything about Notes and Domino Install and Upgrade - 07 April 2015
URL:
http://www-01.ibm.com/support/docview.wss?uid=swg27045308
Link to Open Mic Webcast schedule and details
General Self-Help Resources
You are welcomed to join IBM Client Self Assist Community (
http://ibm.biz/BdxuJx
), and share your experience with Client Self Assist.
Here are links to other ways that you can access IBM Lotus Notes & Domino self-help support information on the Web:
1.
IBM Support Portal
, provides IBM customers with a unified, centralized view of all technical support tools and information for all IBM systems, software, and services.
http://www.ibm.com/support/entry/portal
2.
IBM Knowledge Center
, new technology designed to bring IBM's technical publications together in a single location.
http://www.ibm.com/support/knowledgecenter/
3.
IBM collaboration and social software Forum
, expand your understanding of these products, and create connections with others
http://www.ibm.com/developerworks/lotus/community/index.html
4.
Fix Central
provides fixes and updates for your system's software, hardware, and operating system.
http://www-933.ibm.com/eserver/support/fixes/
5.
IBM Education Assistant
(
http://publib.boulder.ibm.com/infocenter/ieduasst/lotv1r0/index.jsp
), a collection of multimedia educational modules designed to help you gain a better understanding of IBM Lotus software products and use them more effectively.
6. Register for
My Support
(
http://www.ibm.com/software/support/einfo.html
), which allows you to build a custom portal of support information and to subscribe to email notifications.
7.
IBM Electronic Support
(
http://www.ibm.com/software/lotus/support/clickaway/
); learn more about IBM Software Self-Assist Options.
8
.
More and more customers are using SR to manage problem reports, as it's convenient and 24*7 open.
You may download the user guide for more information:
http://www-01.ibm.com/support/docview.wss?uid=swg21634717
Welcome to raise
Service Request
for reporting software problems to IBM.
Feedback
If you'd like to provide feedback regarding this mailing, other than technote feedback via the web, or if you would like to suggest new content, please send it back to Lotusfaq@cn.ibm.com
If you'd like to recommend the newsletter to your friend, please send to lotusfaq@cn.ibm.com with subject: subscribe <e-mail address>
Sincerely,
_________________________________________________________
IBM Collaboration Solutions Support Team, China