Due to security issues with openSSL, upgrade OpenSSL to 1.0.1m and disable RC4. Multiple crashes and functionality-related issues were reported with older versions of Web clients.
Fix Central Link
Link to Download the Fix : Sametime 9 Web Player OpenSSL security Bulletin
Prerequisite: Sametime System Console 9.0.
Prior releases of Sametime System Console will generate a failure message while installing the fix.
Installing the fix on a Sametime Proxy Server node
- Start the Installation Manager.
- Select File -> Preferences.
- Disable the automatic web update search to allow the installation to run successfully.
- Clear the check box Search service repositories during installation and updates and click OK.
- Choose Add Repository.
- In the Browse field, enter the location of the repository.config that was previously unzipped, for example, .../SametimeProxyServer/disk1/STProxy/respository.config
- Compete the following steps:
1. Download the fix from above location.
2. Copy the downloaded file, SametimeProxyServer.zip, to the Sametime Proxy Server file system.()
3. Unzip the file on the server file system.
4. Apply the fix by competing the following steps on the Sametime Proxy Server:
In the main Installation Manager window, choose Update.
Select the IBM Sametime Server Platform package group.
Enter the WebSphere wasadmin user credentials for the Sametime Proxy Server and then click Validate.
Enter the Sametime System Console server details, and WebSphere wasadmin credentials.
5. Follow the instructions on the screen until the installation completes.
Note: If you are running a multiple node clustered configuration, repeat these instructions on each node.
For individual clients using the browser plugin, install the plugins by running the Setup.exe file for Windows or STWebplayer.dmg file for the Mac stand-alone installer.
If the User Access Control (UAC) setting on the client is set to Never Notify (disable), complete the following steps:
- Rename the existing package "STWebPlayerWin7.CAB" to the name STWebPlayerWin7_UserScope.CAB"
- Rename "STWebPlayerWin7UAC.CAB" to "STWebPlayerWin7.CAB"
- Ensure that the user/group ownership of the file matches all other WebPlayer files
Using setup.exe and setup.msi for various configurations
Using the setup.exe file
To install the fix for a specific user, run the following command while logged in as a "standard" user on target computer:
GUI mode - setup.exe /S /V"Lvx* install.log "
SILENT mode - setup.exe /S /V"Lvx* /qn install.log "
To install the fix for all user accounts on one target computer, run the following command while logged in as an "administrator" user on target computer:
GUI mode - setup.exe /S /V"Lvx* install.log INSTALLSCOPE=machine "
SILENT mode - setup.exe /S /V"Lvx* /qn install.log INSTALLSCOPE=machine "
Using the setup.msi file
To install the fix for a specific user, run the following command while logged in as "standard" user on target computer:
GUI mode - msiexec /Lv install.log /i setup.msi
SILENT mode - msiexec /Lv install.log /i setup.msi /qn
To install the fix for all the user accounts on one target computer, run the following command while logged in as an "administrator" user on target computer:
GUI mode - msiexec /Lv install.log /i setup.msi INSTALLSCOPE=machine
SILENT mode - msiexec /Lv install.log /i setup.msi /qn INSTALLSCOPE=machine
Note: When installing for a specific user, the installer can be run by a standard user or an administrator user on target system. When installing for all user accounts on one target computer, the installer must be run with elevated privileges by an administrator user on target system.
21 June 2018