Fixes are available
PH42862: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server (CVE-2021-44790 CVSS 9.8 and more)
PH44393:crash in ap_scan_http_field_content with interim fix IFPH43122
PH44829:Multiple vulnerabilities in IBM HTTP Server used by IBM WebSphere Application Server (CVE-2022-22720 CVSS 7.3 and more)
APAR status
Closed as program error.
Error description
Updating IHS to 9.0.5.10 may cause INSTCONFFAILED to be reported, even though the binaries are successfully updated.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: All users of IBM HTTP Server 9.0.5.10 * **************************************************************** * PROBLEM DESCRIPTION: Updating IHS to 9.0.5.10 may cause * * INSTCONFFAILED to be * * reported, even though the binaries are * * successfully updated. * **************************************************************** * RECOMMENDATION: Apply the temporary fix to resolve the * * problem * **************************************************************** Updating IHS from any older fixpack to 9.0.5.10 install may complete with errors/warnings referring to INSTCONFFAILED, even though IHS is fully updated to 9.0.5.10. For more detail see the following document: https://www.ibm.com/support/pages/node/6524000
Problem conclusion
The issue was fixed for subsequent fixpacks. While no action is required to recover the situation, see the Temporary Fix section for details on how to confirm that a case of INSTCONFFAILED matches If ANY interim fix was installed on 9.0.5.10, installation of 9.0.5.11 will likely report: WARNING: One or more fixes will be uninstalled when IBM HTTP Server for WebSphere Application Server is updated to 9.0.5.11 - "PH42587 in the fix package 9.0.5.10-WS-WASIHS*..." - "PH43887" ... - "PH44393" ... This error can be ignored. No replacement ifix is necessary and the problem will not be reported in 9.0.5.12. For more detail see the following document: https://www.ibm.com/support/pages/node/6524000 The fix for this APAR is targeted for inclusion in IBM HTTP Server fix packs 9.0.5.11 For more information, see 'Recommended Updates for WebSphere Application Server': https://www.ibm.com/support/pages/node/715553
Temporary fix
Unix: From your IHS installation root, running as the user that instal observe that the return code is zero after the missing directory bin/postinst -t update -i $PWD echo $? mkdir -p properties/state/ifix bin/postinst -t update -i $PWD echo $? Windows: From your IHS installation root, running as the user that instal observe that the message "postinst complete" is issued (only) th bin\postinst -t update -i %cd% mkdir properties\state\ifixes bin\postinst -t update -i %cd%
Comments
APAR Information
APAR number
PH42587
Reported component name
IBM HTTP SERVER
Reported component ID
5724J0801
Reported release
900
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2021-12-06
Closed date
2021-12-06
Last modified date
2022-03-07
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
IBM HTTP SERVER
Fixed component ID
5724J0801
Applicable component levels
R900 PSY
UP
[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSEQTJ","label":"IBM HTTP Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"9.0","Line of Business":{"code":"LOB45","label":"Automation"}}]
Document Information
Modified date:
04 May 2022