Product Alerts & Advisories

InterSystems Product News, Alerts, and Advisories

We provide expert technical assistance to our customers 24 hours a day, every day.

Receive notifications on support alerts, critical issues, fixes, and product releases.

By submitting this form, you give consent to receive notifications concerning support alerts, critical issues, important updates, fixes, and product releases via email. In addition, you consent to your business contact information being entered into our CRM solution that is hosted in the United States, but maintained consistent with applicable data protection laws.
**By clicking here, you give consent to be contacted for news, updates and other marketing purposes related to existing and future InterSystems products, offerings, and events.

Filters

206 results

Clear Filters

May 06, 2015

Advisory: OpenVMS 8.4 Incompatibility
InterSystems has discovered that an update to OpenVMS 8.4 will cause functionality within InterSystems products to hang indefinitely. While we have not been able to confirm the specific update we know that the problem is present as of VMS84A_UPDATE-V0500.
Apr 28, 2015

Advisory: Mirroring Default QoS Value Considerations
InterSystems has determined that the default value of the mirroring Quality of Service Timeout (QoS) setting is too small for some environments. This can result in undesired mirror failovers and/or unnecessary alerts.
Mar 11, 2015

Alert: Write Image Journal failure
InterSystems has corrected a defect that may cause data integrity issues following a crash on systems with a certain unusual configuration. Specifically, the defect can cause application of the WIJ file to fail during startup.
Mar 04, 2015

Advisory: FREAK attack SSL/TLS Vulnerability
Yesterday an announcement was made of a new SSL/TLS vulnerability referred to as the “FREAK attack”. The issue is that the key length of the cipher used to encrypt data can be shortened in export libraries, weakening the encryption.
Feb 17, 2015

Advisory: “GHOST” Vulnerability
InterSystems products use the glib library on supported platforms in limited fashion, but the library is not shipped as part of any InterSystems product. According the recently announced “GHOST” security vulnerability the glib library is a security risk.
Dec 11, 2014

Advisory: TLS Exploit (a.k.a POODLE attack variant)
The SSL 3.0 vulnerability documented recently in Reference: CVE-2014-3566 was expanded on December 8, 2014 to identify some implementations of TLS as being vulnerable too (CVE-2014-8730).
Oct 28, 2014

Alert: CSP Session ID Reuse with IIS 7+
InterSystems has discovered and corrected a defect that can result in CSP session IDs being shared by two users. More specifically, there are situations where a new user for an application will be allocated a CSP session ID that has already been allocated to, and in use by, another user. The impact of this defect is application-dependent, but one possible consequence is the incorrect display of application data belonging to the session of another user.
Oct 28, 2014

HealthShare Alert: Potential Unauthorized Data Display
InterSystems has discovered and corrected a defect in our web application technology used by the HealthShare portal and the Clinical Viewer. In rare circumstances, this defect can result in sharing of data by separate user sessions. This could lead to (a) a user having a different set of privileges and being able to access patient records they are not permitted to view or (b) being presented with clinical data from a different patient in the Clinical Viewer.
Oct 17, 2014

Advisory: SSL 3.0 Exploit (a.k.a POODLE attack)
In response to the recently documented SSL 3.0 vulnerability (Reference: CVE-2014-3566), InterSystems advises customers to switch from using or requiring SSL 2.0 or SSL 3.0 and instead use only TLSv1.
Jul 16, 2014

Alert: Dejournaling Problem May Result in Missing Updates
InterSystems has corrected a defect that can impact data integrity. The defect is present in Caché, Ensemble, and HealthShare version 2013.1.0 and later.

InterSystems Product News, Alerts, and Advisories

Sign Up Today

Build data-intensive, mission critical applications with InterSystems IRIS. Start coding for free today.