IBM Support

IBM HTTP Server interim fix for PM00675

Download


Abstract

IBM HTTP Server interim fix for CVE-2009-3555: TLS/SSL protocol vulnerability

Download Description

This interim fix resolves the following:

USERS AFFECTED:
Users of IBM HTTP Server 6.0.2, 6.1, and 7.0 with SSL (SSLEnable directive) configured.

PROBLEM DESCRIPTION:
CVE-2009-3555: TLS/SSL protocol vulnerability

RECOMMENDATION:
Apply this fix if SSL is enabled.

PROBLEM CONCLUSION:
IBM HTTP Server is distributing an updated GSKit security library. This standalone GSKit update has been published to the IBM HTTP Server Fixes download site. No configuration is required once
GSKit is updated to 7.0.4.27

The GSKit downloads are located under the 'GSKit Version 7' section for your platform.

For IBM HTTP Server 6.x releases, download the GSKit 7.0.4.27 package and Readme under the section labeled 'PM00675 - IHS Version 6'

For IBM HTTP Server 7.0 releases, download the GSKit 7.0.4.27 package and Readme
under the section labeled 'PM00675 - IHS Version 7'

The GSKit update will be included in the following releases:
- 6.0.2.39
- 6.1.0.29
- 7.0.0.9

Prerequisites

None

Off
[{"DNLabel":"IBM HTTP Server Fixes","DNDate":"11/24/2009","DNLang":"US English","DNSize":"8926041","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=httpfix","DNURL_FTP":" ","DDURL":null}]
[{"Product":{"code":"SSEQTJ","label":"IBM HTTP Server"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Base Server","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"7.0;6.1;6.0.2","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}},{"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":" ","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"7.0;6.1;6.0.2","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
07 September 2022

UID

swg24025312