Hello,
I have two queries in Sametime.
1. Is there IF2 available for Sametime Community? because I was told that IF2 has the fix to address the JDK VA point in the Community.
VA subject:
156888 (1) - Oracle Java SE 1.7.0_331 / 1.8.0_321 / 1.11.0_14 / 1.17.0_2 Multiple
Description:
The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is affected by
multiple vulnerabilities as referenced in the January 2022 CPU advisory:
-
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE
(component: 2D).
-
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE
156888 (1) - Oracle Java SE 1.7.0_331 / 1.8.0_321 / 1.11.0_14 / 1.17.0_2 Multiple Vulnerabilities (Unix January 2022 CPU) 50
See Also
https://www.oracle.com/a/tech/docs/cpujan2022cvrf.xml
https://www.oracle.com/security-alerts/cpujan2022.html#AppendixJAVA
Solution
Apply the appropriate patch according to the January 2022 Oracle Critical Patch Update advisory.
Risk Factor
Medium
156888 (1) - Oracle Java SE 1.7.0_331 / 1.8.0_321 / 1.11.0_14 / 1.17.0_2 Multiple Vulnerabilities (Unix January 2022 CPU) 51
XREF IAVA:2022-A-0031
The following vulnerable instance of Java is installed on the
remote host :
Path : /opt/hcl/domino/notes/11000100/linux/jvm
Installed version : 1.8.0_302
Fixed version : 1.7.0_331 / 1.8.0_321 / 1.11.0_14 / 1.17.0_2
2. Is the multiple files uploading feature available on Sametime chat v11.6? if so how to enable it?
Thank you.
- Elango
@Elango Gopal
with regards to your questions
Is there IF2 available for Sametime Community?NO.
what we have released is
11.6 which is the community server
11.6IF1 contains fixes for the meeting server
11.6IF2 contains fixes for the proxy server
there has not been any releases of interim fixes for the community server.
you pointed out
The following vulnerable instance of Java is installed on the
remote host :
Path : /opt/hcl/domino/notes/11000100/linux/jvm
Installed version : 1.8.0_302
this would be java installed with Domino and I reference you to
Security Bulletin: Multiple Java SDK and Java Runtime vulnerabilities affect HCL Domino
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084794
with regards to your second question
Is the multiple files uploading feature available on Sametime chat v11.6?no.
but you can enable
the number of users that can a single file in one file transfer.
this is done in sametime policies
Polices.user.xml file
maxNumberUsersToReceiveSingleFileInOneFileTransferSession
I believe this is enabled by default with a setting of 10
Please let me know if this was helpful and if you have any additional questions
@Jose Olivares Thank you so much for your response.
@Daniel Oliveira I have already updated the Domino fix pack 11.0.1 FP4 on the ST Community server. Domino FP4 has the Java SDK version 1.8.0_321 or above. Can you please confirm it. Thank you.
The following vulnerable instance of Java is installed on the
remote host :
Path : /opt/hcl/domino/notes/11000100/linux/jvm
Installed version : 1.8.0_302
Fixed version : 1.7.0_331 / 1.8.0_321 / 1.11.0_14 / 1.17.0_2
@Elango Gopal
Domino 11FP4 has Java runtime version 1.8.0_302-b08
Domino 11.FP5 has Java runtime version 1.8.0_312-b07
I checked the documentation for
and I did not see any information with regards to Java SDK version 1.8.0_321
on the domino console
you can execute the command show jvm
and it will show you the version of java currently installed on the domino server.
Please let me know if this information was helpful
Thank you so much for the clarifications.