Description: TIBCO Runtime Agent 5.9.0 Hotfix 07 is available.
You can download this HotFix from the TIBCO Product Support ftp server, mft.tibco.com. You will need to provide your TSC (TIBCO Support Central) credentials. You username is your email address to access the server.
Please note you should use an FTP or SFTP client or command-line FTP. TIBCO employees must use a secure protocol.
Server name: mft.tibco.com
Credentials: use your TSC (TIBCO Support Central website) login.
Browser: https://mft.tibco.com
FTP: port 21
SFTP: port 22
Once you have successfully logged into the server, go to /AvailableDownloads/TRA_Designer/5.9.0/hotfix-07/ to download the fix.
NOTE: If you are using TIBCO ActiveMatrix BusinessWorks 5.12 then you have to install BW 5.12 HF-05 , refer LBN 44692 for more details.
================================================================================
Introduction
Hotfixes are cumulative. This hotfix includes all previous generally available
hotfixes for TIBCO Runtime Agent 5.9.0.
================================================================================
Installation
All Platforms:
1. Shut down all running TIBCO applications.
2. Back up the contents in the {TIBCO_HOME}\tra\5.9\hotfix\lib directory.
Note: To install hotfix on AIX platform, you need to either restart the machine
or move the [TIBCO_HOME}\tibcojre directory to any temporary location.
3. Unzip the hotfix zip file to a temporary directory.
For example, c:\tibco\trahotfix.
4. Get the TIBCOUniversalInstaller version 3.4.1 V9 from TIBCO Support
FTP server https://mft.tibco.com and copy it to the directory
from where the hotfix is extracted.
5. Launch the TIBCOUniversalInstaller{.exe,bin} executable from this
temporary directory and install the hotfix into the {TIBCO_HOME}
of the base product.
6. Restart the TIBCO applications.
================================================================================
Uninstallation
1. Navigate to the <TIBCO_HOME>\tools\universal_installer.
2. Run the TIBCO Universal Installer and uninstall the hotfix using the wizard.
Note: The uninstallation does not revert the updates made within
the {TIBCO_HOME}\tibcojre folder.
For more details, contact TIBCO Support.
================================================================================
Affected Files for 5.9.0_HF-007
The following files are installed by this hotfix. Note that some
files are platform-specific and are installed only on that platform.
All Platforms:
-------------
{TIBCO_HOME}\release_notes directory:
- TIB_TRA_5.9.0_HF-007_readme.txt
{TIBCO_HOME}\tra\5.9\hotfix\lib directory:
- TIBCrypt.jar
- TIBCOrt.jar
- TIBCOSecurityTomcat.jar
- antlr-3.1.3.jar
{TIBCO_HOME}\tra\5.9\hotfix\lib\entrust directory:
- enttoolkit.jar
{TIBCO_HOME}\tpcl\5.9\tomcat\7 directory:
- all the files in this directory
{TIBCO_HOME}\tibcojre\1.7.0 directory:
- all the files in this directory
{TIBCO_HOME}\tpcl\5.9\lib directory:
- commons-beanutils.jar
- commons-collections.jar
- commons-dbcp.jar
- commons-digester.jar
- commons-fileupload-1.0.jar
- commons-logging-api.jar
- jaas.jar
- jakarta-regexp-1.2.jar
- jdbc2_0-stdext.jar
- jndi.jar
- jta.jar
- naming-common.jar
- servlet.jar
- servlets-common.jar
- servlets-manager.jar
- tomcat-http11.jar
- tomcat-jk.jar
- tomcat-jk2.jar
- tomcat-warp.jar
Linux Platform only:
-------------------
All files within the {TIBCO_HOME}\tools\wrapper directory
================================================================================
Closed Issues in 5.9.0_HF-007 (This Release)
TRA-3874
TIBCO Runtime Agent 5.9.0 bundled the TIBCrypt 2.18.100.
TRA-3869
Oracle JRE 7 has been upgraded with patch u85.
TRA-3863
Apache Tomcat has been upgraded to version 7.0.62.
================================================================================
Closed Issues in 5.9.0_HF-006
TRA-3744
Security in the TIBCO Administrator search functions has been improved.
================================================================================
Closed Issues in 5.9.0_HF-005
TCRT-59
The client-side fix for the SSLv3 vulnerability (CVE-2014-3566) issue was
incomplete for the non-default j2se provider; SSL client did not support
TLS versions higher than 1.0 (j2se/ibm provider only).
================================================================================
Closed Issues in 5.9.0_HF-004
TCRT-56
To protect from the POODLE SSLv3 vulnerability (CVE-2014-3566), the SSLv3
protocol is no longer supported for TLS/SSL connections. Only version 1.0
or higher of TLS is supported.
For backward compatibility with software that supports only SSLv3, you can
enable the SSLv3 protocol by setting the following system-wide properties
for client-side and server-side connections in the .tra file:
java.property.com.tibco.security.ssl.client.EnableSSLv3=true
java.property.com.tibco.security.ssl.server.EnableSSLv3=true
================================================================================
Closed Issues in 5.9.0_HF-003
TRA-3508
Domain data increased with each revision of the EAR file even when the
max revision history was enabled.
TCRT-53
For Entrust, CertChainVerifier confused self-issued certificates for
self-signed ones.
================================================================================
Closed Issues in 5.9.0_HF-002
TRA-3525
(Linux) When a C or C++ application was started, the wrapper caused the
application to generate a core dump.
================================================================================
Closed Issues in 5.9.0_HF-001
TCRT-49
On IBM JRE the CertPath API behaved differently in the call chain_validate_jdk.
IBM JRE threw 'InvalidAlgorithmParameterException'error.
TCRT-51
Implemented 'setAllowedProtocolVersions', for SSLClient non-entrust providers.
TCRT-52
BC can now validate certificate chains containing self-issued certificates.
================================================================================
TIBCO Product Support
- For an overview of TIBCO Support Services, and information about
getting started with TIBCO Product Support, visit this site:
http://www.tibco.com/services/support
- If you already have a valid maintenance or support contract,
visit the TIBCO Product Support site: https://support.tibco.com
Entry to this site requires a username and password. If you do
not have a username, you can request for one.
- Check the TIBCO Product Support site "Late Breaking News" page
for product information that was not available at release time.
================================================================================
Copyright
Copyright (C) 1997-2015 TIBCO Software Inc. ALL RIGHTS RESERVED.
TIBCO Software Inc. Confidential Information.