Download IBM Content Collector 4.0.1 fix pack 17

These are all the new implementation and fixes which has been done in this release.

Encryption Security Enhancement
Enhanced the ICC encryption framework by transitioning to the AES/GCM encryption algorithm for all newly encrypted data, providing stronger security and improved protection of sensitive information. The implementation maintains backward compatibility by continuing to support decryption of data previously encrypted using DES and AES/CBC, ensuring seamless access to existing encrypted content.

Exchange On-Premises Archival Performance and Stability Enhancements
Introduced performance optimizations for Exchange On-Premises archival operations, resulting in faster processing, improved system responsiveness, and increased stability for ICC cluster configurations.
For more information: - https://www.ibm.com/support/pages/node/7277888
 

Email Archiving Date Filter Enhancement
Introduced an "On or After" date filtering option for Email Archiving Collectors, allowing more precise date-based archival selection and improved flexibility for email archiving operations.

Security Vulnerability Remediation (CWE Fixes)
Implemented code changes across the Email, File System, and SharePoint connectors to address identified Common Weakness Enumeration (CWE) security findings. These enhancements improve the overall security posture of IBM Content Collector by mitigating potential vulnerabilities and strengthening secure data processing.

Security Vulnerability Fixes – Apache Tika
Upgraded Apache Tika to address critical XML External Entity (XXE) vulnerabilities (CVE-2025-
54988, CVE-2025-66516) affecting PDF/XFA file processing.

Java Runtime Environment (JRE) Upgrade
The bundled Java Runtime Environment (JRE) has been upgraded to Java 8.0.8.65 to incorporate the latest maintenance, security, and stability enhancements.
These CVEs relate to vulnerabilities in the bundled Java SE runtime, remediated via the JRE
upgrade to 8.0.8.65 included in this release. Severity ranges from Low (2.9) to High (7.5).
CVE-2026-22016, CVE-2026-22021, CVE-2026-22013, CVE-2026-22018, CVE-2026-34268, CVE-2026-22007
 

Remote Manager Security and Configuration Enhancements
Enhanced security for Remote Manager communications by adding optional SSL/TLS encrypted connections on port 4555. Sensitive credentials and encryption keys are now externally configurable, improving security, maintainability, and deployment flexibility.

CM8.7 IF 03 Qualification

In the Fix pack IBM Content Collector installer is qualified with IBM CM8.7 IF 03.
In Addition, we have fixed the CM8 Prerequisite missing issue in the Fix Pack.

Content Cortex Qualification

In the Fix pack IBM Content Collector installer is qualified with IBM Content Cortex CPE/CSS 26.0.0

For more information: 

•  https://www.ibm.com/support/pages/node/7277691

SharePoint and Exchange Online Compatibility Enhancements
Implemented multiple updates for SharePoint Online and Exchange Online integrations, including migration to Microsoft Graph PowerShell commands, updated third-party libraries, and fixes for document stubbing, metadata extraction, time zone handling, and content approval scenarios. These enhancements improve compatibility with Microsoft platform changes, increase operational reliability, and resolve several known issues affecting archival and post-processing operations.

For more information:

• https://www.ibm.com/support/pages/node/7237447

SharePoint Integration Enhancement
Removed the dependency on SharePoint Add-ins by introducing automatic SharePoint column management and an integrated document restoration mechanism, ensuring continued compatibility with future SharePoint platform changes.

For more information:

• https://www.ibm.com/support/pages/node/7268010

Merged Previous Interim Fixes
We have merged all the previous interim fixes from 4.0.1.16-IBM-ICC-IF001 to 4.0.1.16-IBM-ICC-IF007 in this installer.

For more information:

• https://www.ibm.com/support/pages/node/7269383