Direct links to fixes
4.6.0.6-SterlingConnectDirectforMicrosoftWindows-x86-fp0006-if008
4.6.0.6-SterlingConnectDirectforMicrosoftWindows-x86-fp0006-if009
4.6.0.6-SterlingConnectDirectforMicrosoftWindows-x86-fp0006
4.6.0.6-SterlingConnectDirectforMicrosoftWindows-x86-fp0006-if013
4.6.0.6-SterlingConnectDirectforMicrosoftWindows-x86-fp0006-if015
4.6.0.6-SterlingConnectDirectforMicrosoftWindows-x86-fp0006-if018
Sterling Connect:Direct for Microsoft Windows 4.6.0 Fix Packs
APAR status
Closed as program error.
Error description
Several vulnerabilities were reported in OpenSSL which makes OpenSSL vulnerable. Sterling Connect:Direct for Microsoft Windows uses OpenSSL and therefore is also vulnerable to CVE-2016-0702, CVE-2016-0799, CVE-2016-2107 and CVE-2016-2108.
Local fix
STRRTC - 494970, 501474 VF / VF Circumvention: None
Problem summary
Users Affected: Sterling Connect:Direct for Windows 4.5.00 Sterling Connect:Direct for Windows 4.5.01 Sterling Connect:Direct for Windows 4.6.0 Problem Description: OpenSSL vulnerabilities were disclosed by the OpenSSL Project. OpenSSL is used by IBM Sterling Connect:Direct for Microsoft Windows. IBM Sterling Connect:Direct for Microsoft Windows has addressed the applicable CVEs. Platforms Affected: Windows
Problem conclusion
Resolution Summary: Updated OpenSSL libraries. Delivered In: Sterling Connect:Direct for Windows 4.5.00 Patch 060 Sterling Connect:Direct for Windows 4.5.01 Patch 026 Sterling Connect:Direct for Windows 4.6.0.6
Temporary fix
Comments
APAR Information
APAR number
IT15273
Reported component name
STR CD FOR WIND
Reported component ID
5725C9908
Reported release
460
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2016-05-13
Closed date
2016-06-01
Last modified date
2016-06-01
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
STR CD FOR WIND
Fixed component ID
5725C9908
Applicable component levels
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSRRVY","label":"Sterling Connect:Direct for Microsoft Windows"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"4.6","Line of Business":{"code":"LOB59","label":"Sustainability Software"}}]
Document Information
Modified date:
28 August 2023