D-09727

Windows

UAGSRV

Prevent a situation that could result in a deadlock when executing several concurrent FTP file monitors on Windows.

D-09682

All

UAGSRV

Fix a situation in which the Agent agent may get stuck in a reconnect loop, issuing several UNV6260E messages.

NOTE: This was also delivered in the UA 6.7.0

.1 maintenance release.

D-09695

Windows

UAGSRV

Prevent a situation where cancelling a Windows task instance may cause other active Windows task instances to transition to Failed status.

D-09721

All

UAGSRV

Prevent the error “UNV0143E Error in event management system: XECheckSockets, select, 10038, Socket operation on non socket” which may cause OMS Server to shut down with exit code 2.

NOTE:  This was resolved by changes delivered for D-09682.

D-09754

Windows

UAGSRV

Fix a memory leak discovered during execution of a Windows file monitor task.

B-10723

Unix
Windows

UAGSRV

Increase the size of stdout/stderr the agent may return to Universal Controller to 6 MB.

B-10724

All

UAGSRV
UCMDSRV
UCTLSRV
UDMSRV
UEMSRV

Add “inherit” as a supported value for the Server components’ “security” configuration option.  This value behaves the same as “none”, which will eventually be deprecated.

B-11137

Unix
Windows

UAGSRV

Do not issue a UAG8016E message when no agent.log file exists at startup.

B-11143

Linux

UAGSRV

Add ability to configure an agent as transient, which will remove its definition from Universal Controller when the agent stops.

B-11220

All

OMSSRV
UAGCMD
UAGSRV
UBROKER
UCMD
UCMSRV
UCTL
UDM
UDMSRV
UFTP
UEM

Change the default value of the min_ssl_protocol option to TLS1_2.

B-11245

Unix
Windows

UAGSRV
UBROKER

Add ability to override UAG Server configuration options when starting the Universal Broker.

  Overrides for the UAG Server netname, oms_servers, agent_clusters, and enable_ssl options are provided.

B-11265

All

UAGSRV

Add the ability to refresh SSL certificate information  – including CA certificates, certificate revocation lists, and client certificates – without restarting UAG Server.

B-11425

Unix

UAGSRV

Do not write messages to agent.log when running Universal Broker in console mode.

B-11486

All

UAGSRV

Allow enable_ssl, ssl_client_auth, and ssl_server_auth configuration options to be refreshed without requiring a UAG Server restart.

B-1030809365

WindowsAll

UACSRVUBROKER

Provide a 64-bit implementation of Universal Agent for SOA and upgrade bundled Tomcat and Derby distributions.

B-10313

Windows

UACSRV

Replace Oracle JRE with Open JRE 8.

B-10357

Linux

UACSRV

Replace Oracle JRE with Open JRE 8 in the Universal Agent for SOA RPM and Debian packages.

Add a require_ssl option that to control whether the Broker will accept connection requests from clients that have disabled SSL on their control sessions or that only support the legacy UNVv2 protocol.

B-09464

All

UBROKER

Add the ability to refresh SSL certificate information – including CA certificates, certificate revocation lists, and client certificates -- without restarting the Universal Broker.

B-11151

Unix
Windows

UBROKER

Allow component startup to be controlled via UBROKER environment variables and command line options.

B-11220

All

OMSSRV
UAGCMD
UAGSRV
UBROKER
UCMD
UCMSRV
UCTL
UDM
UDMSRV
UFTP
UEM

Change the default value of the min_ssl_protocol option to TLS1_2.

B-11245

Unix

Windows

UAGSRV

UBROKER

Add ability to override UAG Server configuration options when starting the Universal Broker.

  Overrides for the UAG Server netname, oms_servers, agent_clusters, and enable_ssl options are provided.

B-11385

Linux

UBROKER

Allow UAG Server’s new “transient” configuration option to be overridden by the Universal Broker at startup.

B-1038310724

Unix All





Windows

All

Update 3rd party support for encryption and resolve documented TLS/SSL vulnerabilities with upgrade to OpenSSL 1.1.1b.
Remove support for the vulnerable DES-CBC-SHA cipher.
Note: HP-UX and zLinux agents still use OpenSSL 1.0.2f

UAGSRV
UCMDSRV
UCTLSRV
UDMSRV
UEMSRV

UCFGMGR

Add “inherit” as a supported value for the Server components’ “security” configuration option.  This value behaves the same as “none”, which will eventually be deprecated.

B-11220

All

OMSSRV
UAGCMD
UAGSRV
UBROKER
UCMD
UCMSRV
UCTL
UDM
UDMSRV
UFTP
UEM

Change the default value of the min_ssl_protocol option to TLS1_2.

B-1080110724

All





Windows

UAGSRV
UCMDSRV
UCTLSRV
UDMSRV
UEMSRV

UCFGMGR

Provide a 64-bit version of the Universal Configuration Manager Control Panel Applet.

Add “inherit” as a supported value for the Server components’ “security” configuration option.  This value behaves the same as “none”, which will eventually be deprecated.

B-1068710724

Linux
Windows

UPPS

Ensure UPPS webservice calls to the PeopleSoft system are network fault tolerantAll





Windows

UAGSRV
UCMDSRV
UCTLSRV
UDMSRV
UEMSRV

UCFGMGR

Add “inherit” as a supported value for the Server components’ “security” configuration option.  This value behaves the same as “none”, which will eventually be deprecated.

B-11220

All

OMSSRV
UAGCMD
UAGSRV
UBROKER
UCMD
UCMSRV
UCTL
UDM
UDMSRV
UFTP
UEM

Change the default value of the min_ssl_protocol option to TLS1_2.

B-10724

All





Windows

UAGSRV
UCMDSRV
UCTLSRV
UDMSRV
UEMSRV

UCFGMGR

Add “inherit” as a supported value for the Server components’ “security” configuration option.  This value behaves the same as “none”, which will eventually be deprecated.

B-0668411220

All

OMSSRV
UAGCMD
UAGSRV
UBROKER
UCMD
UCMSRV
UCTL
UDM
UDMSRV Add threshold to prevent UDM from consuming all available memory when ACK_WINDOW is used.

B-08874

z/OS

UDM
UDMSRV

Implement memory management efficiencies to reduce CPU consumption.

B-10383

Unix
Windows

All

Update 3rd party support for encryption and resolve documented TLS/SSL vulnerabilities with upgrade to OpenSSL 1.1.1b.
Remove support for the vulnerable DES-CBC-SHA cipher.
Note: HP-UX and zLinux agents still use OpenSSL 1.0.2f.

B-10701

Windows

UAGSRV
UDM
UDMSRV
UFTP

Upgrade 3rd party support for regular expression handling.

B-10383

Unix
Windows

All

Update 3rd party support for encryption and resolve documented TLS/SSL vulnerabilities with upgrade to OpenSSL 1.1.1b.
Remove support for the vulnerable DES-CBC-SHA cipher.
Note: HP-UX and zLinux agents still use OpenSSL 1.0.2f.

B-10701

Windows

UAGSRV
UDM
UDMSRV
UFTP

Upgrade 3rd party support for regular expression handling
UFTP
UEM

Change the default value of the min_ssl_protocol option to TLS1_2.

D-07396

All

UDM
UDMSRV

Improve handling of files that contain UTF-8 characters.

B-09364

All

UDM
UDMSRV

Add a min_ssl_protocol option to the “open” statement to set the minimum allowed SSL protocol for the session, regardless of UDM’s configured value.

D-09634

zOS

UDM
UDMSRV

Improve detection of and handling for accounts with BPX.SUPERUSER access.

B-10724

All





Windows

UAGSRV
UCMDSRV
UCTLSRV
UDMSRV
UEMSRV

UCFGMGR

Add “inherit” as a supported value for the Server components’ “security” configuration option.  This value behaves the same as “none”, which will eventually be deprecated.

B-11220

All

OMSSRV
UAGCMD
UAGSRV
UBROKER
UCMD
UCMSRV
UCTL
UDM
UDMSRV
UFTP
UEM

Change the default value of the min_ssl_protocol option to TLS1_2.

B-11220

All

OMSSRV
UAGCMD
UAGSRV
UBROKER
UCMD
UCMSRV
UCTL
UDM
UDMSRV
UFTP
UEM

Change the default value of the min_ssl_protocol option to TLS1_2.

B-09682UNIX,11220

All

OMSSRV
UAGCMD
UAGSRV
UBROKER
UCMD
UCMSRV
UCTL
UDM
UDMSRV
UFTP
UEM

Change the default value of the min_ssl_protocol option to TLS1_2.

B-10788

Unix
Windows

OMSSRV

Allow OMS peer authentication to bypass client hostname validation.

B-11264

Unix
Windows

OMSSRV

Fix a situation in which the Agent may get stuck in a reconnect loop, issuing several UNV6260E messages.

Add the ability to refresh SSL certificate information – including CA certificates, certificate revocation lists, and client certificates – without restarting OMS Server.

B-0736306187

AllUnix

OMSSRV

Add option to require SSL connections to OMS ServerInstall

Allow “security” configuration for Server components to be set at install time.

B-10383

Unix
Windows

All

Update 3rd party support for encryption and resolve documented TLS/SSL vulnerabilities with upgrade to OpenSSL 1.1.1b.
Remove support for the vulnerable DES-CBC-SHA cipher.
Note: HP-UX and zLinux agents still use OpenSSL 1.0.2f.

D-09608

Unix
Windows

OMSSRV

Prevent OMS Server crashes when duplicate connections are detected.

D-09631

All

UAGSRV
OMSSRV
UAGCMD

Restrict request IDs generated by OMS clients to the range 1 through 214748364710367

Windows

Install

Enable command line support for the user mode install.

B-11187

Linux

Install

Update system requirements for new Linux Intel RPM package.

B-11269

Unix

Python

Update the supplied Python distribution to version from 3.6.5 to 3.7.6.

NOTE: The HP-UX agent install does not provide a Python distribution.

B-11270

Windows

Python

Update the supplied Python distribution to version from 3.6.5 to 3.7.6.