May 2006

ID: 00332
Ref: 327/2006
Date: 05 May 2006:13:47:48
Version: 1

---

Title: IBM Security Advisory: Multiple patches for IBM Tivoli Directory Server, Tivoli Identity Manager and Websphere Application Server
Abstract: Multiple patches for IBM Tivoli Directory Server, Tivoli Identity Manager and Websphere Application Server
Vendors affected: IBM
Operating systems affected: IBM
Applications affected: IBM

---

Title
=====

IBM Security Advisory: Multiple patches for IBM Tivoli Directory Server, Tivoli
Identity Manager and Websphere Application Server

Detail
======

Multiple patches for IBM Tivoli Directory Server, Tivoli
Identity Manager and Websphere Application Server


- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================


ESB-2006.0319 -- [Win][UNIX/Linux]
Multiple patches for IBM Tivoli Directory Server, Tivoli
Identity Manager and Websphere Application Server
5 May 2006

===========================================================================



Product: IBM Tivoli Directory Server
IBM Tivoli Identity Manager
Websphere Application Server
Publisher: IBM
Operating System: UNIX variants (UNIX, Linux, OSX)
Windows
Impact: Inappropriate Access
Reduced Security
Access: Remote/Unauthenticated

- - --------------------------BEGIN INCLUDED TEXT--------------------

IBM Tivoli Directory Server

Technotes

2006-04-27 Effective Filters for searches under the suffix cn=schema.
http://www.ibm.com/support/docview.wss?uid=swg21236364



****************


IBM Tivoli Identity Manager

Updates

2006-04-29 IBM Tivoli Identity Manager, ver 4.5.1, Interim Fix 4.5.1-TIV-TIM
-IF0067
http://www.ibm.com/support/docview.wss?uid=swg24012200

2006-04-29 IBM Tivoli Identity Manager, ver 4.6.0, Interim Fix 4.6.0-TIV-TIM
-IF0017
http://www.ibm.com/support/docview.wss?uid=swg24012199



****************


WebSphere Application Server

Updates

2006-04-29 PK23079; 6.0.2.9: one-way webservice receives wsws3400i
nullpointerexception wit
http://www.ibm.com/support/docview.wss?uid=swg24012185

2006-04-29 PK23706; 6.0.2.9: unable to authenticate user IDs or passwords
containing double
http://www.ibm.com/support/docview.wss?uid=swg24012189

2006-04-29 PK23895; 5.0.1: Require Interim Fix for versions 5.0 and 5.0.1
for latest sdk
http://www.ibm.com/support/docview.wss?uid=swg24012195

2006-04-28 PK23436; 6.0.2.9: deadlock in com.ibm.ws.cache.cache code after
PK14278
http://www.ibm.com/support/docview.wss?uid=swg24012176

2006-04-27 PK10057; 6.0.2: A possible security issue with web application's
welcome pages
http://www.ibm.com/support/docview.wss?uid=swg24010245

2006-04-27 PK23493; 5.1.1.10 and 6.0.2.9: plugin returns incorrect http
response for apache
http://www.ibm.com/support/docview.wss?uid=swg24012162

2006-04-27 PQ98460; 5.0.2.9, 5.1.1.2: Body content buffer too large
http://www.ibm.com/support/docview.wss?uid=swg24008769

2006-04-26 PK22899; 5.0.2.14: after applying PK12081 fragments are cached
twice
http://www.ibm.com/support/docview.wss?uid=swg24012160

2006-04-25 PK23354; 6.0.2.7: JSP compiler does not work against an
application
http://www.ibm.com/support/docview.wss?uid=swg24012095

2006-04-22 PK18921; 5.1.1.8 / 6.0.2.7: Add call to FragmentInfo allows
portal to set IGNORE
http://www.ibm.com/support/docview.wss?uid=swg24011799

2006-04-22 PK21144; 6.0.2.7: APAR PK19649 delivers bad plugin binaries to
Linux
http://www.ibm.com/support/docview.wss?uid=swg24011793

2006-04-22 PK23367; 6.0.2: Java sdk 1.4.2 sr3 contains dangling symlink to
was_home
http://www.ibm.com/support/docview.wss?uid=swg24012118



****************


WebSphere Extended Deployment

Updates

2006-04-29 PK21174; 5.1.0.3: Requests can get stuck in an ODR if there is a
timeout
http://www.ibm.com/support/docview.wss?uid=swg24012184

2006-04-26 PK23463; 6.0.1.1: delayed job submission fails with jclexception
http://www.ibm.com/support/docview.wss?uid=swg24012159

2006-04-25 PK17494; 6.0: no ddl scripts are available for setting up
database in z/OS
http://www.ibm.com/support/docview.wss?uid=swg24012153



****************

iQCVAwUBRFrZrSh9+71yA2DNAQIJHAQAkmfexWJu9SU4R026Vzvhbk+H2askGsNn
sgaMDWgDEkyeXUjuJk8uKAVCZbGS6pm2xXNh4PCPYZdqBCdw1HavWlrONModc8Vj
jWRyTScFb9yI6eSdTN2ILabOTCazPg0gaxqJEz4HlCvG02E95/pgZAY1sB/ZYW5c
go1/NdLU1ys=
=Guy8
- -----END PGP SIGNATURE-----