TIBCO Runtime Agent 5.9.0 Hotfix 05 is available.
You can download this HotFix from the TIBCO Product Support ftp server, mft.tibco.com. You will need to provide your TSC (TIBCO Support Central) credentials. You username is your email address to access the server.
Please note you should use an FTP or SFTP client or command-line FTP. TIBCO employees must use a secure protocol.
Credentials: use your TSC (TIBCO Support Central website) login.
Once you have successfully logged into the server, go to /AvailableDownloads/TRA_Designer/5.9.0/hotfix-05/ to download the fix.
================================================================================
Installation
All Platforms:
1. Shut down all running TIBCO applications.
2. Back up the contents in the {TIBCO_HOME}\tra\5.9\hotfix\lib directory.
3. Unzip the hotfix zip file to a temporary directory.
For example, c:\tibco\trahotfix.
4. Get the TIBCOUniversalInstaller version 3.3.0 V4 from TIBCO Support
FTP server https://mft.tibco.com and copy it to the directory
from where the hotfix is extracted.
5. Launch the TIBCOUniversalInstaller{.exe,bin} executable from this
temporary directory and install the hotfix into the {TIBCO_HOME}
of the base product.
6. Restart the TIBCO applications.
================================================================================
Uninstallation
1. Navigate to the <TIBCO_HOME>\tools\universal_installer.
2. Run the TIBCO Universal Installer and uninstall the hotfix using the wizard.
For more details, contact TIBCO Support.
================================================================================
Affected Files for 5.9.0_HF-005
The following files are installed by this hotfix. Note that some
files are platform-specific and are installed only on that platform.
All Platforms:
-------------
{TIBCO_HOME}\release_notes directory:
- TIB_TRA_5.9.0_HF-005_readme.txt
{TIBCO_HOME}\tra\5.9\hotfix\lib directory:
- TIBCrypt.jar
- TIBCOrt.jar
Linux Platform only:
-------------------
All files within {TIBCO_HOME}\tools\wrapper directory
================================================================================
Closed Issues in 5.9.0_HF-005 (This Release)
TCRT-59
The client-side fix for the SSLv3 vulnerability (CVE-2014-3566) issue was
incomplete for the non-default j2se provider; SSL client did not support
TLS versions higher than 1.0 (j2se/ibm provider only).
================================================================================
Closed Issues in 5.9.0_HF-004
TCRT-56
To protect from the POODLE SSLv3 vulnerability (CVE-2014-3566), the SSLv3
protocol is no longer supported for TLS/SSL connections. Only version 1.0
or higher of TLS is supported.
For backward compatibility with software that supports only SSLv3, you can
enable the SSLv3 protocol by setting the following system-wide properties
for client-side and server-side connections in the .tra file:
java.property.com.tibco.security.ssl.client.EnableSSLv3=true
java.property.com.tibco.security.ssl.server.EnableSSLv3=true
================================================================================
Closed Issues in 5.9.0_HF-003
TRA-3508
Domain data increased with each revision of the EAR file even when the
max revision history was enabled.
TCRT-53
For Entrust, CertChainVerifier confused self-issued certificates for
self-signed ones.
================================================================================
Closed Issues in 5.9.0_HF-002
TRA-3525
(Linux) When a C or C++ application was started, the wrapper caused the
application to generate a core dump.
================================================================================
Closed Issues in 5.9.0_HF-001
TCRT-49
On IBM JRE the CertPath API behaved differently in the call chain_validate_jdk.
IBM JRE threw 'InvalidAlgorithmParameterException'error.
TCRT-51
Implemented 'setAllowedProtocolVersions', for SSLClient non-entrust providers.
TCRT-52
BC can now validate certificate chains containing self-issued certificates.
================================================================================
TIBCO Product Support
- For an overview of TIBCO Support Services, and information about
getting started with TIBCO Product Support, visit this site:
http://www.tibco.com/services/support
- If you already have a valid maintenance or support contract,
visit the TIBCO Product Support site: https://support.tibco.com
Entry to this site requires a username and password. If you do
not have a username, you can request for one.
- Check the TIBCO Product Support site "Late Breaking News" page
for product information that was not available at release time.
================================================================================
Copyright
Copyright (C) 1997-2015 TIBCO Software Inc. ALL RIGHTS RESERVED.
TIBCO Software Inc. Confidential Information.