Download IBM Content Collector 4.0.1.16 interim fix 2

Download

Downloadable File

File link	File size	File description

Abstract

This document provides links to the download page for Content Collector 4.0.1.16 interim fix 2.

Download Description

IBM Content Collector downloads

All versions
Version 4.0.1 fix pack 16- selected tab,

When you click the download link below, a sign-in page opens. Enter your IBM ID and password to proceed. If you have forgotten your IBM ID or have never registered, follow the instructions on the sign-in page.

Prerequisites

The server package of this interim fix requires one of the following versions of Content Collector installed on your operating system:

4.0.1.10, 4.0.1.11, 4.0.1.12, 4.0.1.13, 4.0.1.14, 4.0.1.15, 4.0.1.16

For information about hardware and software compatibility, see the detailed system requirements document at:

[{"PRLabel":"Prerequisites for IBM Content Collector 4.0.1","PRLang":"English","PRSize":"1 B","PRPlat":{"label":"Windows","code":"PF033"},"PRURL":"https://www.ibm.com/support/pages/node/614445"},{"PRLabel":"IBM Software Product Compatibility Reports","PRLang":"English","PRSize":"1 B","PRPlat":{"label":"Windows","code":"PF033"},"PRURL":"https://www.ibm.com/software/reports/compatibility/clarity/index.html"}]

Installation Instructions

For other detailed information regarding features included in the release and installation instructions, refer to the Readme file:4.0.1.16-IBM-ICC-IF002.pdf

Download Package

The fix pack includes all the fixes to date. The download package consists of the following files:

Readme file:

4.0.1.16-IBM-ICC-IF002.pdf

Fix files for Windows:

4.0.1.16-IBM-ICC-AIX-IF002.gz (for AIX)
4.0.1.16-IBM-ICC-Linux32-IF002.tgz (for Linux)
4.0.1.16-IBM-ICC-Linuxz-IF002.tgz (for zLinux)
4.0.1.16-IBM-ICC-WIN-IF002.zip (for Windows)

How critical is this fix?

Security Vulnerabilities Fixed in this Release
IBM Runtime Environment, Java Technology Edition.

1. CVE-2025-1470
Description: A vulnerability in the OpenJ9 JVM's ASCII to EBCDIC (atoe) translation functions could result in a JVM crash or the disclosure of sensitive information on z/OS systems. The issue arises because the functions did not check the return value of malloc() for NULL before accessing the allocated buffer.
Resolution: The fix ensures that NULL return values are properly handled to prevent crashes or unintended behaviour.

2. CVE-2025-1471
Description: A flaw in the OpenJ9 JVM's ASCII to EBCDIC (atoe) translation function could lead to the exposure of sensitive information. This occurs when the JVM processes an extremely large string and reads beyond the end of a buffer.
Resolution: The fix introduces bounds checks to ensure large strings are processed safely.

Related Information

IBM Content Collector 4.0.1 documentation

          [{"DNLabel":"Interim fix","DNDate":"05 May 2025","DNLang":"Language Independent","DNSize":"519.01 MB","DNPlat":{"label":"Windows","code":"PF033"},"DNURL":"https://www.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FInformation+Management%2FContent+Collector&fixids=4.0.1.16-IBM-ICC-IF002&source=SAR&function=fixId&parent=Enterprise%20Content%20Management","DNURL_FTP":"","DDURL":null}]
          

Document Location

Worldwide

[{"Line of Business":{"code":"LOB76","label":"Data Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSAE9L","label":"Content Collector"},"ARM Category":[{"code":"a8m50000000L1KJAA0","label":"Installation"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"4.0.1"}]

Tips