IBM Support

OpenSSL Security Issues - Sametime 9 Web Audio Video Web Player Plugin

Fix Readme


Abstract

Due to security issues with openSSL, upgrade OpenSSL to 1.0.1m and disable RC4. Multiple crashes and functionality-related issues were reported with older versions of Web clients.

Content

Fix Central Link

Link to Download the Fix : Sametime 9 Web Player OpenSSL security Bulletin

Installation Instructions

Prerequisite: Sametime System Console 9.0.
Prior releases of Sametime System Console will generate a failure message while installing the fix.


Installing the fix on a Sametime Proxy Server node

      Compete the following steps:
      1. Download the fix from above location.
      2. Copy the downloaded file, SametimeProxyServer.zip, to the Sametime Proxy Server file system.()
      3. Unzip the file on the server file system.
      4. Apply the fix by competing the following steps on the Sametime Proxy Server:
        • Start the Installation Manager.
        • Select File -> Preferences.
        • Disable the automatic web update search to allow the installation to run successfully.
        • Clear the check box Search service repositories during installation and updates and click OK.
        • Choose Add Repository.
        • In the Browse field, enter the location of the repository.config that was previously unzipped, for example, .../SametimeProxyServer/disk1/STProxy/respository.config
        Select OK.
        In the main Installation Manager window, choose Update.
        Select the IBM Sametime Server Platform package group.
        Click Next.
        Enter the WebSphere wasadmin user credentials for the Sametime Proxy Server and then click Validate.
        Click Next.
        Enter the Sametime System Console server details, and WebSphere wasadmin credentials.
        Click Next.
        Click Upgrade.

        5. Follow the instructions on the screen until the installation completes.
        Note: If you are running a multiple node clustered configuration, repeat these instructions on each node.

        For individual clients using the browser plugin, install the plugins by running the Setup.exe file for Windows or STWebplayer.dmg file for the Mac stand-alone installer.

        If the User Access Control (UAC) setting on the client is set to Never Notify (disable), complete the following steps:
        1. Rename the existing package "STWebPlayerWin7.CAB" to the name STWebPlayerWin7_UserScope.CAB"
        2. Rename "STWebPlayerWin7UAC.CAB" to "STWebPlayerWin7.CAB"
        3. Ensure that the user/group ownership of the file matches all other WebPlayer files

        Using setup.exe and setup.msi for various configurations

        Using the setup.exe file

        To install the fix for a specific user, run the following command while logged in as a "standard" user on target computer:
        GUI mode - setup.exe /S /V"Lvx* install.log "
        SILENT mode - setup.exe /S /V"Lvx* /qn install.log "

        To install the fix for all user accounts on one target computer, run the following command while logged in as an "administrator" user on target computer:
        GUI mode - setup.exe /S /V"Lvx* install.log INSTALLSCOPE=machine "
        SILENT mode - setup.exe /S /V"Lvx* /qn install.log INSTALLSCOPE=machine "

        Using the setup.msi file

        To install the fix for a specific user, run the following command while logged in as "standard" user on target computer:
        GUI mode - msiexec /Lv install.log /i setup.msi
        SILENT mode - msiexec /Lv install.log /i setup.msi /qn

        To install the fix for all the user accounts on one target computer, run the following command while logged in as an "administrator" user on target computer:
        GUI mode - msiexec /Lv install.log /i setup.msi INSTALLSCOPE=machine
        SILENT mode - msiexec /Lv install.log /i setup.msi /qn INSTALLSCOPE=machine

        Note: When installing for a specific user, the installer can be run by a standard user or an administrator user on target system. When installing for all user accounts on one target computer, the installer must be run with elevated privileges by an administrator user on target system.

[{"Product":{"code":"SSKTXQ","label":"IBM Sametime"},"Business Unit":{"code":"BU003","label":"Collaboration Solutions"},"Component":"Sametime Proxy Server and Web Client","Platform":[{"code":"PF022","label":"OS X"},{"code":"PF033","label":"Windows"}],"Version":"9.0","Edition":"Communicate;Complete;Conference"}]

Document Information

Modified date:
21 June 2018

UID

swg21965630