IBM Support

Latest Interim Fixes for Domino 8.5.2 Fix Pack 4

Fix readme


This technote contains download information and Fix Lists for the latest Interim Fixes for version 8.5.2 Fix Pack 4 of Domino. Note that Interim Fixes are cumulative and contain all of the fixes from previous versions. The latest Interim Fix for Domino 8.5.2 Fix Pack 4 is Interim Fix 3 (December 2014).


Interim Fix 3 for Domino 8.5.2 Fix Pack 4 (released December 2014)
  • Fix List
    KLYH9RMJGL TLS Padding Vulnerability affects IBM Domino (CVE-2014-8730) (technote 1693142)
    KLYH9QXMQE Disable SSL 3 ini
    XXLI9GR8KV Domino console output can not list all information of the embedded JVM maintenance release (such as JVM SR15FP1)
    JWAE8NAPW7 Extra AIX shared memory created by Domino JVMs. Domino 8.5.2 shipped with Java 6 SR 7 and on AIX the Java heap is allocated with 64K pages by default, instead of 4K pages as in previous JVM releases. This change caused the JVM to use a shared memory segment and can caused Domino to crash. This fix switches the default value back to 4K pages on Domino 32bit running on AIX. (AIX only) (technote 1572118)

Interim Fix 2 for Domino 8.5.2 Fix Pack 4 (released November 2014)
  • Fix List
    ITDL9PWMFU CVE-2014-3566 - SSLv3 POODLE (Padding Oracle On Downgraded Legacy Encryption) (technote 1687167)
    KLYH9Q3L4V Add support for TLS 1.0 inbound
    KLYH9Q4KQ5 Add HTTP support for TLS 1.0
    DKEN9N8T3M Remove weak SSL/TLS CipherSpecs
    GFAL9PVDN8 SSLv2 not disabled for IMAP
    YDEN8RNH22 Enhancement Request: Support for TLS specifically For SMTP

Interim Fix 1 for Domino 8.5.2 Fix Pack 4 (released March 2012)
Interim Fix 1 for Domino 8.5.2 Fix Pack 4 removes a fix for SPR# JACE8EL9N5 (details below), which in turn fixes the following two SPRs:
  • RSWG8QNBBR - CPU spikes on Router task after upgrade to Domino 8.5.2 Fix Pack 4 (technote #1579097)
  • TKAA8PP9B3 - Japanese characters are broken in the attached file name from iNotes.

Additional SPRs addressed in this Interim Fix are listed below:
  • HIKA8QLUL7 - Japanese attachment names get corrupted when sent as MIME mail
  • GHAN8ERU9L - addresses a crash that could occur when collecting platform statistics in AIX and AIX 64.
Fix Central ID
File Name
W32 DominoServer_852FP4IF1_W32 852FP4HF60_W32.exe
W64 DominoServer_852FP4IF1_W64 852FP4HF61_W64.exe
AIX DominoServer_852FP4IF1_AIX 852FP4HF65-aix.tar
AIX64 DominoServer_852FP4IF1_AIX64 852FP4HF66-aix64.tar
Linux DominoServer_852FP4IF1_Linux 852FP4HF63-linux.tar
Solaris DominoServer_852FP4IF1_Sol 852FP4HF64-sol.tar
OS/400 V5R4 DominoServer_852FP4IF1_IBMi_5.4 QL503856.SAVF
OS/400 V6R1 DominoServer_852FP4IF1_IBMi_6.1_7.1 QL603855.SAVF
zLinux DominoServer_852FP4IF1_zSeries ZX852FP4IF1.tar.gz

Details about SPR JACE8EL9N5:
Code changes introduced in 8.5.2 Fix Pack 4 for SPR# JACE8EL9N5 fixed the iNotes issue where a Japanese file name was saved as ?? when UTF-8 Output is enabled with default charset as Korean. However, those code changes could potentially lead to a server crash (as well as other issues), and thus those changes have been removed in Interim Fix 1 for Domino 8.5.2 Fix Pack 4 (852FP4IF1).

Please note with the In AIX and AIX64 platforms, SPR #GHAN8ERU9L was also added to address a crash when collecting platform statistics.

Related information

A simplified Chinese translation is available

Document information

More support for: IBM Domino

Software version:

Operating system(s): AIX, IBM i, Linux, Solaris, Windows, z/OS

Reference #: 1589583

Modified date: 07 January 2015