Communications Server for Windows, Version 6.1.3 -- Latest Fixpack

Download Description

Contents:

1. Description
2. APARs fixed
3. New functions and enhancements
4. Legal statements
5. Prerequisites
6. Installation instructions
7. Download instructions

Description:
This package includes the latest IBM Communications Server component APAR maintenance since Version 6.1.3 availability. All of the APAR maintenance supersedes previous APAR maintenance since general availability of the product. By applying the latest Fixpack package, all the previous Fixpack APARs will be applied also.

APARs fixed by FIXPACK 5

Server
JR52431	CUMULATIVE APAR FOR 6.1.3.5 FOR CS/WIN
JR51690	DISABLE SSLV3 FOR CVE-2014-3566
JR52061	ENABLE STRICT PADDING FOR CVE-2014-8730
JR52406	TRCGUI FAILS TO START
JR52413	DLUR INTERNAL PU DOES NOT AUTO-ACTIVATE WHEN LU FROM POOL IS ACCESSED
JR52421	AUTOLOGON SUPPORT BIT IS LEFT ON WHEN REPLYING TO LOCATE
JR52422	CRASH IN SNA_V5ROUTER64 WHEN STOPPING SNA
JR52430	PCOM: SNA 3270 PRINTER SESSION DOES NOT RECOVER AFTER HOST APPLICATION RESTART
API Client
JR52432	CUMULATIVE APAR FOR 6.1.3.5 FOR CS/WIN SNA API CLIENT
Remote Admin
JR52433	CUMULATIVE APAR FOR 6.1.3.5 FOR CS/WIN REMOTE ADMIN

APARs after FIXPACK 4 (important enough to publish outside of a fixpack)

SERVER
JR52061	ENABLE STRICT PADDING FOR CVE-2014-8730
JR51690	DISABLE SSLV3 FOR CVE-2014-3566

APARs fixed by FIXPACK 4

Server
JR49670	CUMULATIVE APAR FOR 6.1.3.4 FOR CS/WIN SERVER
JR49659	CSWIN INCORRECTLY REPORTS PRINTER SESSIONS ONLINE TO HOST
JR49686	UNABLE TO READ FIRST COUNTER VALUE
JR49662	POSSIBLE HANG OR CRASH WHEN EXITING LUA APPLICATION
JR49688	HPR HANG DUE TO HOST GAP MESSAGE PACKET BEING DROPPED IN THE NETWORK
JR49665	VRN DELETED FROM TOPOLOGY AFTER 15 DAYS
JR49667	WTSQUERYUSERTOKEN FAILED
JR48672	REFIFO NOT ENABLED ON CPSVCMG PIPE
JR49449	SLI_OPEN/RUI_INIT REJECTED AFTER LU RESET
JR49602	CP-CP SESSIONS MAY NOT RECOVER AFTER OUTAGE
API Client
JR49680	CUMULATIVE APAR FOR 6.1.3.4 FOR CS/WIN SNA API CLIENT
Remote Admin
JR49683	CUMULATIVE APAR FOR 6.1.3.4 FOR CS/WIN REMOTE ADMIN

APARs after FIXPACK 3

GSKit
JR49499	GSKIT CERTIFICATE CHAIN VULNERABILITY FIX

APARs fixed by FIXPACK 3

Server
JR40207	CUMULATIVE APAR FOR 6.1.3.3 FOR CS/WIN SERVER
JR36468	TN3270 SSL FUNCTION DOES NOT WORK WHEN CSWIN INSTALLED WITH "ALL USERS" INSTEAD OF "CLASSIC" OPTION
JR46209	PCS3001E PCS5501E STARTING TN3270 SERVER AFTER APPLYING IP FILTER TO RUNNING NODE.
JR46197	TIGHT LOOP DUE TO STACK OVERFLOW CONDITION
JR46211	UNABLE TO ESTABLISH NEW SESSION AFTER TAKEOVER / GIVEBACK TO APPL. RESIDING ON VTAM BEYOND DLUS/NNS.
JR37751	PCS3001E WITH SYSTEM ERROR 1813
JR46198	PCS5920E SEEN WHEN STARTING CSWIN FROM COMMAND LINE BUT NOT WHEN USING NODE OPS TOOL
JR41157	CSWIN - TRAP IN TN3270 SERVER
JR46201	CPIC API USES INCORRECT LU
JR46202	CSWIN: MEMORY LEAK IN TN3270 SERVER WHEN USING SSL
JR42892	CSWIN TN3270 SERVER HANGS WHEN A BIND WITH USER DATA IS RECEIVED
JR46205	PRINTER LOSES CONNECTION WHEN SSCP TAKEOVER OCCURS
JR44530	CRASH IN APPN.SYS
JR46208	ASSERT IN NRTPAPI.C LINE 144
JR46218	SENSE 0805000B RECEIVED WHEN LOGGING IN TO 3270 APPLICATION
JR46199	SLI_CLOSE AND SLI_BID ON API CLIENT PRODUCE WRONG RESULTS
API Client
JR40209	CUMULATIVE APAR FOR 6.1.3.3 FOR CS/WIN SNA API CLIENT
Remote Admin
JR40210	CUMULATIVE APAR FOR 6.1.3.3 FOR CS/WIN REMOTE ADMIN
GSKit
JR46473	GSKIT UPDATE FOR COMMUNICATIONS SERVER

APARs fixed by FIXPACK 2

JR36028	APAR TO DOCUMENT FIXPACK2 FOR IBM COMMUNICATIONS SERVER FOR WINDOWS V6.1.3.
JR34512	TRNSDT MISSING FILES
JR35280	FOLLOWING CICS RESET SOME TN3270 SESSION COULD NOT RE-ESTABLISH
JR35283	LUS HANG IN PSLUIO-P STATE
JR35775	SLI_OPEN HANG AFTER LINK OUTAGE AND RECOVERY
JR35284	SYSTEM CRASH PROCESSING A SNA STOP COMMAND
JR35285	ERROR WHEN ATTEMPTING TO CONFIGURE EICON CONNECTION
JR36021	CRASH IN SNA_V5ROUTER
JR36022	PROBLEM WITH DOWNSTREAM FIXED PACING WITH DLUR WHEN WINDOW SIZE 0
JR36025	MEMORY LEAK IN SNA KERNEL WHEN NBMVT ALERTS ARE QUEUED
JR36026	CS WIN CRASH WHILE PROCESSING APPC DATA WITH INCORRECT LENGTH

APARs fixed by FIXPACK 1

JR33675	APAR TO DOCUMENT FIXPACK1 FOR IBM COMMUNICATIONS SERVER FOR WINDOWS V6.1.3.
JR28327	CSWIN TN3270 SERVER MAY SEND TWO BID REQUESTS TO CLIENT
JR28547	TRAP IN MSGIO.DLL WHEN ISSUING CSSTOP
JR28562	MULTIPLE RTP PIPES WITH SAME COS BETWEEN 2 ADJACENT CONTROL POINTS
JR28756	TRAP IN CSRCMDS.EXE WHEN STOPPING THE CS NODE USING CSSTOP.EXE
JR28764	CSWIN RAPIPIPE ANONYMOUS ACCESS MAY BE SECURITY CONCERN
JR28819	CSWIN TRNSDT INCORRENT TRANSLATION OF CHARACTER E086
JR28884	PCOM: XIDS FLOOD THE NETWORK WHEN DUPLICATE CP NAME USED
JR29664	MEMORY LEAK IN APPNNODE.EXE WITH ALL INCOMING ATTACHES
JR29793	SNA NODE OPERATIONS UTILITY CAN HANG STARTING THE NODE OR WHEN REFRESHING A DISPLAY.
JR30350	TRAP IN CSRCMDS.EXE
JR32052	SDLC HANG CONDITION CAUSING ALL PROCESSING TO HALT
JR32262	TN3270 SERVER LU HUNG AFTER OPERATOR CYCLES LU
JR32589	INTERMITTENT TRAPS IN CSRCMDS WHEN ISSUING CSSTOP
JR33070	SLOW PERFORMANCE RUNNING LU62 TRANSACTIONS ON SNA API CLIENT

New function added in FixPack 3

No new function has been added.

New function added in FixPack 2

ENHANCE CSDISPLAY COMMAND:

The csdisplay command now supports the ALU parameter to display Active Dependent LUs used by TN3270 Server and LUA applications. See the README file for details.

Example output of the csdisplay ALU" as follows:

a) When there is one LUA SSCP-LU and one LUA LU-LU Session active.

csdisplay ALU

LU Name        LUNAME05
PU Name        PUNAME
NAU Address    5
Session Type   LU-LU

LU Name        LUNAME09
PU Name        PUNAME
NAU Address    9
Session Type   SSCP-LU

Configured LUs 15
Active LUs     9
LUA(SSCP)      1
LUA(LU-LU)     1
TN3270(SSCP)   0
TN3270(LU-LU)  0

b) When there is one SSCP-LU TN3270 and one LU-LU TN3270 Session type.

csdisplay ALU

LU Name        BASELU02
PU Name        PUNAME
NAU Address    2
Session Type   TN3270E SSCP-LU, 9.122.19.106

LU Name        BASELU03
PU Name        PUNAME
NAU Address    3
Session Type   TN3270E LU-LU, 9.122.19.106

Configured LUs 15
Active LUs     9
LUA(SSCP)      0
LUA(LU-LU)     0
TN3270(SSCP)   1
TN3270(LU-LU)  1

c) When there are no SSCP Connected LUs or active LUA Application Sessions or active TN3270 Session.

csdisplay ALU

Configured LUs 15
Active LUs     9
LUA(SSCP)      0
LUA(LU-LU)     0
TN3270(SSCP)   0
TN3270(LU-LU)  0

-----------------------------------------------------------------

SUPPORT FOR APAR JR36023, GSKIT TLS RENEGOTIATION WEAK SECURITY:

Along with this release, the GSKIT package used for handling SSL secure sessions has a vulnerability update included in the refresh image. If the CS/Windows product is using TN3270 Server with SSL support enabled, then the GSKIT APAR, JR36023, should be applied after the install of CS Windows Fixpack2.

After installing CS/Windows 6.1.3.2 and gskbas-7.0.4.27, you can override the new default by setting appropriate value to the RENEGOTIATION key in the TN3270_PORT_DEF section in the config file.
        
              RENEGOTIATION takes the value NONE(default),ABBREVIATED, FULL.
              There are 3 possible functions of the gskit library.
                (a) NONE                  : No renegotiation permitted
                (b) ABBREVIATED : Abbreviated renegotiation permitted
                (c) FULL                    : Full (or abbreviated) renegotiation permitted.
                The default is NONE.

                Example:

TN3270_PORT_DEF=(
                                                            PORT=800
                                                            SECURITY=1
                                                            CLIENT_AUTHENTICATION=1
                                                            SECURITY_LEVEL=HIGH
                                                            RENEGOTIATION=NONE
                                                    )

 Communications Server for Windows provides secure encryption and authentication for TN3270 Server clients by using Secure Socket Layer(SSL). The SSL support is provided by the GSKIT common component from IBM (package name gskta). Refer to the document, JR36023_TLS_SSLv3_Update_CS.pdf, provided with the APAR JR36023 package on Fix Central or on the CS/Windows media provided through Fix Central or Passport Advantage. The JR36023 APAR can be found on the Communications Server for Windows product under the brand "WebSphere" on Fix Central at:

http://www.ibm.com/support/docview.wss?rs=2262&uid=swg1JR36023.

New function added in FixPack 1

No new function has been added.


IBM COPYRIGHT INFORMATION:

International Business Machines Corporation 1997, 2008, 2009, 2013
Licensed program - Property of IBM . All rights reserved.
IBM and WebSphere are trademarks of International Business
Machines Corporation in the United States and/or other countries.
Java is a trademark of Sun Microsystems, Incorporated.
U.S. Government Users Restricted Rights - Use, duplication, or
disclosure restricted by GSA ADP. Schedule Contract with IBM Corp.

LIMIT OF LIABILITY:

License to the contained APAR fixes is conditioned upon the recipient
holding a license to the prerequisite product. The license terms
and conditions of the APAR fixes are the same as those for the
prerequisite product. Please see the product license for specifics.