PM89201: SHIP FMID HHAP700 COMPID 5655I3510 - Z/OS IBM HTTP SERVER FOR WEBSPHERE (POWERED BY APACHE) FIX PACK 7.0.0.29

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• z/OS IBM HTTP Server for WebSphere (powered by Apache) Fix Pack
  7.0.0.29
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM HTTP Server V7.0           *
  *                  (powered by Apache) for z/OS                *
  ****************************************************************
  * PROBLEM DESCRIPTION: This APAR addresses various defects     *
  *                      in IBM HTTP Server V7.0 on z/OS         *
  *                      (powered by Apache)                     *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  This APAR fixes the following defects in IBM HTTP Server V7.0
  (powered by Apache) for z/OS:
  
  APAR    Description
  ------- ----------------------------------------------------
  PM75876 'Header' directive can't set a header only if the
          header is absent
  PM76110 CVE-2012-4557: mod_proxy_ajp prevents a single long
          request marking a worker in error.
  PM77980 IHS should not add the Server: header by default
  PM78087 IHS V7 high memory use when many hundreds of
          RewriteCond %{REQUEST_URI}
  PM78144 IHS large logformats cannot be correctly logged by
          piped loggers
  PM80058 CVE-2012-3499/CVE-2012-4558: XSS in IHS modules
  
  *** NOTE ***
  Additional information about the APARs listed above can befound
  in RETAIN or by using the APAR search facility located at URL:
  
  http://www.ibm.com/software/webservers/appserv/was/support/
  to search on the APAR number.
  

Problem conclusion

• This APAR fixes various defects in IBM HTTP Server V7.0
  (powered by Apache) for z/OS.  It is currently targeted for
  inclusion in Service Level (Fix Pack) 7.0.0.29 of IBM HTTP
  Server V7.0.
  
  Please refer to URL:
  //www.ibm.com/support/docview.wss?rs=404&uid=swg27006970
  for Fix Pack availability.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UK94913

Fix information

• Fixed component name

  WAS IHS ZOS

• Fixed component ID

  5655I3510

Applicable component levels

• R700 PSY UK94913

     UP13/06/20 P F306

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.