InterSystems Product News, Alerts, and Advisories

InterSystems has corrected a defect with the Caché database defragmentation utility. The defect has been observed to cause access violations in the defragmentation process, leading to a hung environment. Other impacts are possible though have not been reported. These include database degradation (which may occur without warning message) and process failures.

InterSystems has corrected a security vulnerability in Caché and therefore also in Ensemble, HealthShare and TrakCare. While this vulnerability was only recently discovered, it impacts versions of Caché beginning with 2007.1 and all versions of Ensemble and HealthShare. All customers who are running these versions are vulnerable.

InterSystems has corrected a defect that causes errors when executing a data transformation of an HL7, X12, ASTM, or EDIFACT message that includes a call to a segment-level sub-transformation.

This is an update regarding InterSystems prior advisory from May 6:

InterSystems has corrected a defect that causes the Caché ObjectScript JOB command to fail.

InterSystems has corrected a defect that causes errors when updating segmented virtual documents such as HL7, X12, ASTM and EDIFACT. The error is triggered by a specific sequence of operations, namely:

InterSystems has discovered that an update to OpenVMS 8.4 will cause functionality within InterSystems products to hang indefinitely. While we have not been able to confirm the specific update we know that the problem is present as of VMS84A_UPDATE-V0500.

InterSystems has determined that the default value of the mirroring Quality of Service Timeout (QoS) setting is too small for some environments. This can result in undesired mirror failovers and/or unnecessary alerts.

InterSystems has corrected a defect that may cause data integrity issues following a crash on systems with a certain unusual configuration. Specifically, the defect can cause application of the WIJ file to fail during startup.

Yesterday an announcement was made of a new SSL/TLS vulnerability referred to as the “FREAK attack”. The issue is that the key length of the cipher used to encrypt data can be shortened in export libraries, weakening the encryption.