Ipswitch, Inc.
www.ipswitch.com
1-678-287-0700


MessageWay Manager Maintenance Update

Maintenance Update Name:     mwclient-6.1.0-mr07-win32

Date:    December 21, 2018

Prerequisites:     MessageWay 6.1.0 mr08

Files:
This Maintenance Update contains the files listed below:

  Files changed in this Maintenance Update mwclient-6.1.0-mr07-win32:

    mwmanager.exe MessageWay Manager version 6.1.0.55
    mwmanager.chm MessageWay Manager Help File
    libeay32.dll OpenSSL crypto library
    ssleay32.dll OpenSSL ssl library
    mwclient-6.1.0-mr07-win32_readme.html This Readme file

Installing the Maintenance Update on any Windows computer that is running MessageWay Manager:

1) Download the Maintenance Release install package sent by Ipswitch and unzip.
2) Step 1 will automatically create a new subdirectory named after the Maintenance Release install package.
3) Logon as the user that currently "owns" the MessageWay Manager.
4) Stop the MessageWay Manager.
5) Locate and run the install program (mwclient-6.1.0-mr07-win32 .exe) in the subdirectory structure created in step 1 (...\messageway_mrs\manager\).
6) Answer the prompts as they appear.

The Maintenance Update is now installed on the Windows computer. A backup copy of every replaced object was saved in the \Program Files (x86)\MessageWay Client 6.1\bin\backups subdirectory.

When you install a MessageWay Manager Maintenance Update on a Windows 7 or later system, the system may display the following notice from the Program Compatibility Assistant: "This program might not have installed correctly." This is an erroneous notice generated by the Microsoft Program Compatibility Assistant. If you receive this message, click the option "This program installed correctly."

To verify that the Maintenance Update installed properly, view the \Program Files (x86)\MessageWay Client 6.1\updates\ChangeLog.txt file.  That file is updated whenever a Maintenance Update is installed.

This MessageWay Manager version 6.1.0.55 update is required to access the MessageWay 6.1 mr05, MessageWay 6.1 mr06 ,MessageWay 6.1 mr07 or MessageWay 6.1 mr08 maintenance releases, and cannot be used to access prior versions of MessageWay 6.1.  Logic has been added to MessageWay Manager version 6.1.0.55 restricting access to only MessageWay 6.1 mr05 and later releases.

To maintain access  to pre 6.1 mr05 MessageWay environments, your existing 6.1 MessageWay Manager binary has been renamed to mwmanager_prev.exe and a new shortcut installed in the All Programs\MessageWay Client\ group folder named MessageWay Manager Version 6.1.0.xx, where xx is the build number of your MessageWay Manager prior to running this maintenance release install.  This logic does not apply if you are upgrading from MessageWay 6.1 mr05 or MessageWay 6.1 mr06 to MessageWay 6.1 mr07 or MessageWay 6.1 mr08.  Additionally, this Maintenance Release Readme file is saved in the \Program Files (x86)\MessageWay Client 6.1\updates subdirectory for future reference.

( December 21, 2018 ) Issues closed in mwclient-6.1.0-mr07-win32

IMPORTANT NOTE about Security Updates for this release:
MessageWay now includes the OpenSSL 1.0.2p and FIPS 2.0.16 releases.

They address many vulnerabilities that can be found in the release notes on the OpenSSL.org site.

Specifically, see the following link for further details about this release of OpenSSL:
https://www.openssl.org/news/openssl-1.0.2-notes.html

Specifically, see the following link for further details about this release of FIPS:
https://www.openssl.org/docs/fips/SecurityPolicy-2.0.16.pdf

MessageWay Manager - Issue #3839, 4400 (Program changed: mwmanager.exe - version 6.1.0.55)

Issue 3839:
Pressing shift F5 in the Manager incorrectly resets message counts for all Adapters and Services to zero.  Changes: This problem has been fixed.  Also added a new drop down option "Refresh" (shift F5) to the View menu to refresh message counts in the system monitor.

Issue 4400: Manager generates a "Range Check Error" when you click on a message in a Receiving or Sending status and then right click the Message List Window and select columns Inbound or Outbound Transfer Time.  Changes: This problem has been fixed.

MessageWay Manager - Issue #4399 (Program changed: mwmanager.chm)

Issue 4399:
Added What's This? help and general user instructions for MWAWSS3 Adapter.

MessageWay Manager - Issue #4118 (Program changed: libeay32.dll)

Issue 4118:
See Important Note about Security Updates for this release above.

MessageWay Manager - Issue #4118 (Program changed: ssleay32.dll)

Issue 4118:
See Important Note about Security Updates for this release above.

( March 31, 2018 ) Issues closed in mwclient-6.1.0-mr06-win32

IMPORTANT NOTE about Security Updates for this release:
MessageWay now includes the OpenSSL 1.0.2n and FIPS 2.0.16 releases.

They address many vulnerabilities that can be found in the release notes on the OpenSSL.org site.

Specifically, see the following link for further details about this release of OpenSSL:
https://www.openssl.org/news/openssl-1.0.2-notes.html

Specifically, see the following link for further details about this release of FIPS:
https://www.openssl.org/docs/fips/SecurityPolicy-2.0.16.pdf

MessageWay Manager - Issue #4222, 4319 (Program changed: mwmanager.exe - version 6.1.0.54)

Issue 4222:
Various issues when viewing large messages in the Manager. Changes: This problem has been fixed.

Issue 4319: Manager generates access violation exception when using Rules Builder with empty (NULL) ClassID.  Changes: This problem has been fixed.

MessageWay Manager - Issue #4330, 4342 (Program changed: mwmanager.chm)

Issue 4330, 4342:
The Find Locations, Find Rules and Find Users options do not have a maximum rows returned value, resulting in unacceptable performance and/or the Manager becoming unresponsive when tens of thousands of rows are returned in the resulting query.  Changes: The maximum rows returned value for the Find Locations, Find Rules and Find Users options has been hard coded to 10,000.

MessageWay Manager - Issue #4118 (Program changed: libeay32.dll)

Issue 4118:
See Important Note about Security Updates for this release above.

MessageWay Manager - Issue #4118 (Program changed: ssleay32.dll)

Issue 4118:
See Important Note about Security Updates for this release above.

( May 26, 2017 ) Issues closed in mwclient-6.1.0-mr05-win32

IMPORTANT NOTE about Security Updates for this release:
MessageWay now includes the OpenSSL 1.0.2j and FIPS 2.0.12 releases.

They address many vulnerabilities that can be found in the release notes on the OpenSSL.org site.

Specifically, see the following link for further details about this release of OpenSSL:
https://www.openssl.org/news/openssl-1.0.2-notes.html

Specifically, see the following link for further details about this release of FIPS:
https://www.openssl.org/docs/fips/SecurityPolicy-2.0.12.pdf

MessageWay Manager - Issue #4222 (Program changed: mwmanager.exe - version 6.1.0.52)

Issue 4222:
Various issues when viewing large messages in the Manager. Changes: This problem has been fixed.

MessageWay Manager - Issue #4076, 4259, 4262, 4290 (Program changed: mwmanager.chm)

Issue 4076:
Add ability to select which signing algorithm is used for MDN on AS2 Adapter location.  Changes: The field 'Sign Algorithm' has been added to the AS2 tab of the AS2 Adapter location, which allows you to select the signing algorithm to be used on the MDN.  Valid signing algorithms include sha1, md5, sha-256, sha-384, sha-512, or sha-224NOTE: Although this new signing algorithm for MDN in the AS2 Adapter location requires the next release of our AS2 Servlets to be fully functional, it is still compatible with our current AS2 Servlet release.

Issue 4259: When a distribution list location is configured to reference a subsequent distribution list location, the location status of the subsequent distribution list location is ignored.  For example, if the subsequent distribution list location status is 'On Hold' or 'Closed', these statuses are ignored.  Changes: A 'Non Recursive' check box has been added to the Distribution List tab of the MWDistList service to fix this problem.  The default behavior is still 'Recursive'.  NOTE: When checking or unchecking the 'Non Recursive' check box, the MWDistList service must be restarted for the change to take affect.

Issue 4262: Regarding FTP Adapter/location, force IP Address returned by a PASV response to be used for the data channel connection.  Changes: A new field named 'PASV IP' has been added to adapter/location to force IP Address returned by a PASV response to be used for the data channel connection.

Issue 4290: MDTM (modtime) command not implemented.  Changes: The MDTM (modtime) command was added to MWFTPD Server, and documentation was updated to include this new command.

MessageWay Manager - Issue #4246 (Program changed: libeay32.dll)

Issue 4246:
See Important Note about Security Updates for this release above.

MessageWay Manager - Issue #4246 (Program changed: ssleay32.dll)

Issue 4246:
See Important Note about Security Updates for this release above.

( August 19, 2016 ) Issues closed in mwclient-6.1.0-mr04-win32

IMPORTANT NOTE about Security Updates for this release:
MessageWay now includes the OpenSSL 1.0.2h and FIPS 2.0.12 releases.

They address many vulnerabilities that can be found in the release notes on the Openssl.org site.

Specifically, see the following link for further details about this release of OpenSSL:
https://www.openssl.org/news/openssl-1.0.2-notes.html

Specifically, see the following link for further details about this release of FIPS:
https://www.openssl.org/docs/fips/SecurityPolicy-2.0.12.pdf

MessageWay Manager - Issue #680, 4203 (Program changed: mwmanager.exe - version 6.1.0.47)

Issue 680:
Add 'Find Archive Messages', 'Retrieve from Archive' and 'Archive Directory Maintenance' functionality to MessageWay.  Changes: This functionality has been added.

Issue 4203: Expand the 'Perform Message Actions' right to represent each action the current right controls.  Changes: The 'Perform Message Actions' right has been replaced with ''Resubmit Messages', 'Redirect Messages', 'Release Messages', 'Restart Receive' and 'Cancel Messages' rights.  Also, 'View Logs' right has been added to control access to Audit Logs, Event Logs and Trace Logs.

MessageWay Manager - Issue #680, 4191, 4203 (Program changed: mwmanager.chm)

Issue 680:
Add 'Find Archive Messages', 'Retrieve from Archive' and 'Archive Directory Maintenance' functionality to MessageWay.  Changes: This functionality has been added.

Issue 4191: Add 'Overwrite file' functionality to disk output.  Changes: Added checkbox '[x] Overwrite file' in the 'Disk Output' tab to allow an output file to be overwritten if it already exists on disk.

Issue 4203: Expand the 'Perform Message Actions' right to represent each action the current right controls.  Changes: The 'Perform Message Actions' right has been replaced with ''Resubmit Messages', 'Redirect Messages', 'Release Messages', 'Restart Receive' and 'Cancel Messages' rights.  Also, 'View Logs' right has been added to control access to Audit Logs, Event Logs and Trace Logs.

( April 13, 2016 ) Issues closed in mwclient-6.1.0-mr03-win32

IMPORTANT NOTE about Security Updates for this release (Issue-4025, 4144):
MessageWay now includes the OpenSSL 1.0.1r and FIPS 2.0.11 releases.

They address many vulnerabilities that can be found in the release notes on the Openssl.org site.

Specifically, see the following link for further details about this release of OpenSSL:
https://www.openssl.org/news/openssl-1.0.1-notes.html

Specifically, see the following link for further details about this release of FIPS:
https://www.openssl.org/docs/fips/SecurityPolicy-2.0.11.pdf

MessageWay Manager - Issue #4153 (Program changed: mwmanager.exe - version 6.1.0.40)

Issue 4153
:
Allow Email Adapter to support secure POP3 and/or SMTP connection to an email server.  Changes: Added checkbox '[x] Secure' in the 'POP3' and 'SMTP' tabs to configure a secure connection to an email server.

MessageWay Manager - Issue #4153 (Program changed: mwmanager.chm)

Issue 4153:
Allow Email Adapter to support secure POP3 and/or SMTP connection to an email server.  Changes: Added checkbox '[x] Secure' in the 'POP3' and 'SMTP' tabs to configure a secure connection to an email server.

MessageWay Manager - Issue #4025, 4144 (Program changed: libeay32.dll)

Issue 4025, 4144:
See Important Note about Security Updates for this issue above.

MessageWay Manager - Issue #4025, 4144 (Program changed: ssleay32.dll)

Issue 4025, 4144:
See Important Note about Security Updates for this issue above.

( May 15, 2015 ) Issues closed in mwclient-6.1.0-mr02-win32

IMPORTANT NOTE about Security Updates for this release (Issue-3975):
MessageWay now includes the OpenSSL 0.9.8ze and FIPS 1.2.2 releases.

They address the following higher profile vulnerabilities and many others that can be found in the release notes on the Openssl.org site.

CVE-2014-0160, Heartbleed vulnerability, the OpenSSL 0.9.8.ze is not vulnerable to the issue outlined in this CVE report.
CVE-2014-0224, SSL/TLS MITM vulnerability, the OpenSSL 0.9.8.ze version contains the updates to address this vulnerability.
CVE-2014-3566, POODLE vulnerability, MessageWay no longer supports the SSLv3 protocol for secure sessions.
CVE-2015-0204, FREAK vulnerability, the OpenSSL 0.9.8.ze version contains the updates to address this vulnerability.

MessageWay Manager - Issue #622, 2113, 3915, 3918, 3920, 3928, 3971, 3972, 3983, 3992, 4001, 4004, 4016, 4046 (Program changed: mwmanager.exe - version 6.1.0.38)

Issue 622
:
The copy count name of Holiday Schedules does not go over 10 once the character limit hits 32 and characters of the Holiday Schedule name go missing.  Changes: This problem has been fixed.

Issue 2113:
There is a typo when attempting to delete a Receipt Schedule that has the same name as an existing location.  A confirmation dialog box appears that reads "There is a lcoation of the same name, do you want to delete the location as well?"  Changes: This problem has been fixed.

Issue 3915: The time displayed for IB Transfer Time and OB Transfer/Process Time in Message Properties is incorrect if the transfer spans more than one day.  For example, a transfer taking 2 days 6 hours would be reported as 6 hours.  Changes: This problem has been fixed.

Issue 3918: Provide a configurable option to disable the F6 function key (displays SQL statements) in the MessageWay Manager.  Changes: New parameter DisableF6 has been added to mwuser.conf.  Valid values are true or false, with false being the default.

Issue 3920: No Audit Log entry is written when performing a Release Messages on a location (take it off Hold).  Changes: This problem has been fixed.

Issue 3928: The table of actions that can be selected for a Trigger Schedule incorrectly states that the Execute Now and Input Now actions override closed schedules and locations on hold.  Changes: This problem has been fixed.

Issue 3971: Allow SFTP Adapter to always accept new Server Key with each new session.  Currently SFTP Adapter only allows a new server key to be accepted once, then it needs to be manually reset to accept the next new key.  Changes: Added checkbox '[x] Always' in the 'SFTP Auth' tab to always accept a new server key.

Issue 3972: When selecting 'Cancel Message' on a message ID in an out-of-focus window (I.E. a window in the back ground), the following error dialogue box is displayed: Invalid class typecast.  Changes: This problem has been fixed.

Issue 3983: Performing a ‘Find Messages’ search for messages based on ‘size’ and choosing a size over 2.5 GB (2500000000) fails and displays a negative value for size and percent in the ‘Message Query Details’.  Changes: This problem has been fixed.

Issue 3992: Not able to Cancel a message with a status of Receive Error.  Changes: The Manager has been changed to allow a message in Receive Error to be Cancelled

Issue 4001: While using the Manager in multi-system mode, if the MessageWay currently being accessed goes down, the Manager is not able to access other working MessageWays until the MessageWay with the problem is resolved.  Changes: This issue was resolved by adding several connection and response timeout values so that the Manager will no longer wait indefinitely for responses from MessageWay.

Issue 4004: Deleting a Location with a Schedule after changing status of Location from ON_HOLD to RELEASE reports “Access Denied”.  Changes: This problem has been fixed.

Issue 4016: While using the Manager in multi-system mode and attempting to logon to a MessageWay which is currently down, a “connection timeout exceeded” dialogue box is displayed.  Attempting to logon a second time causes the Manager to be in a hung state.  Changes: This problem has been fixed.

Issue 4046: When a Manager logon remains idle for too long, the Manager session is terminated and an idle timeout dialogue box is displayed.  But until 'OK' is selected on the dialogue box, a connection to MessageWay still exists, using up valuable system resources on the application server.  This becomes problematic over time if dozens of Managers are left in this state.  Changes: The idle timeout dialogue box has been removed, thus freeing up valuable system resources on the application server without any manual intervention (I.E. selecting 'OK' on the idle timeout dialogue box).

MessageWay Manager - Issue #3922, 3928, 3971, 3974, 3991, 4044, 4074 (Program changed: mwmanager.chm)

Issue 3922: Update documentation to reflect that Ipswitch has verified our AS2 package running with apache-tomcat-7.0.56.  Changes: This problem has been fixed.

Issue 3928:
The table of actions that can be selected for a Trigger Schedule incorrectly states that the Execute Now and Input Now actions override closed schedules and locations on hold.  Changes: This problem has been fixed.

Issue 3971:
Allow SFTP Adapter to always accept new Server Key with each new session.  Currently SFTP Adapter only allows a new server key to be accepted once, then it needs to be manually reset to accept the next new key.  Changes: Added checkbox '[x] Always' in the 'SFTP Auth' tab to always accept a new server key.

Issue 3974: Update documentation to reflect that the SFTP Server is now based on OpenSSH_6.6.  Changes: This problem has been fixed.

Issue 3991: Regarding EventLog record retention, update "What's This" help and "MessageWay Users Guide and Reference" to state that the Audit File retention settings also control the EventLog record retention settings.  Changes: This problem has been fixed.

Issue 4044: Update copyright to 2015 in documentation.  Also remove all references to SSLv3 from documentation.  Changes: This problem has been fixed.

Issue 4074: Update documentation to reflect that Ipswitch has verified MessageWay will run on Windows Server 2012 R2 with Windows SQL Server 2012.  Changes: MessageWay now supports Windows Server 2012 R2 Standard 64 Bit along with Windows SQL Server 2012 Enterprise Edition sp2, 64 Bit database using the 32 Bit DSN.

MessageWay Manager - Issue #3975 (Program changed: libeay32.dll)

Issue 3975:
See Important Note about Security Updates for this issue above.

MessageWay Manager - Issue #3975 (Program changed: ssleay32.dll)

Issue 3975:
See Important Note about Security Updates for this issue above.

( October 24, 2013 ) Issues closed in mwclient-6.1.0-hf01-win32

MessageWay Manager - Issue #3838, 3840, 3844, 3896 (Program changed: mwmanager.exe - version 6.1.0.30)

Issue 3838:
The Delete on Complete option did not apply to messages marked Canceled, which meant that messages addressed to a file system mailbox were never eligible for delete on complete.  Changes: The Delete on Complete option was enhanced to apply to Canceled messages as well.

Issue 3840: After using Find Rules to obtain a list of profiles, the Show In Explorer option is not available for each profile in the list. It's necessary if the user wants to copy or delete the profile, since neither of these options is available from the list.  Changes: This problem has been fixed.

Issue 3844: In the MessageWay User's Guide and Reference and Manager online help, the description of the URL for FTP and SFTP input was incorrect. The manual stated that the URL for an input site was [protocol prefix] host [/location] [/filemask]. However, you must always specify a directory name before the filemask, even for the home directory.  Changes: This problem has been fixed.

Issue 3896: Users could not create arrival notifications for the system mailbox {Unknown}.  Changes: This problem has been fixed.

MessageWay Manager - Issue #3097, 3820, 3873 (Program changed: various)

The following issues are listed here, because the results are visible in Manager, but the actual fixes were made in other MessageWay components. Please refer to the MessageWay Readme for more information.

Issue 3097: MessageWay Manager displayed file sizes greater than 2GB as negative numbers with an Oracle database. This does not occur with MySQL databases.  Changes: This problem has been fixed.

Issue 3820: In MessageWay Manager, system monitor counts did not include messages in the Schedule Wait state.  Changes: This problem has been fixed.

Issue 3873: In MessageWay Manager, invalid rights were applied when moving or copying an object from one folder to another. For example, when copying a folder to another path that had inherit permissions enabled, the newly copied folder retained its original rights, including those inherited from parent folders, and had the new rights applied as well.  Changes: Behavior is different depending on whether you do a copy and paste or a cut and paste/move.  When you copy and paste an existing object (location, rules profile or key), MessageWay will remove all access rights that have been inherited from the objects current parent folder and update all inherited access rights from the objects new parent folder. When you cut and paste/move an existing object (folder, location, rules profile or key), MessageWay will retain all access rights that have been inherited from the objects current parent folder. To update the inherited access rights to those of the objects new parent folder, for each user and group on the list, you must first clear the Inherit new users/groups box and then recheck the box. After moving a folder, the access rights must be correctly updated for the folder itself and for all of its offspring (sub-folders, locations, rules profiles and keys).

 

Ipswitch, Inc. | 1-678-287-0700