Novell released :
GroupWise 7 SP3 Hot Patch 1 Linux Client US and MULTI.
GroupWise 7 SP3 Hot Patch 1 Linux Client US and MULTI
GroupWise 7 SP3 Hot Patch 1 Mac Client US and MULTI
GroupWise 7 SP3 Hot Patch 1 Full for Windows and NLM US and MULTI
GroupWise 7 SP3 Hot Patch 1 Windows Client US and MULTI
GroupWise 7 SP3 Hot Patch 1 Linux Full US and MULTI Security Alert

abstract

There are security fixes included included in the full release of the Hot Patch for a Webaccess issue. Please view the security section of the full Hot Patch release for additional information on the area addressed.

details

Installation instructions can be found here. The filenames given in the README for SP3 are different than those of the Hot Patch. The filenames for the Hot Patch are:

gw703HP1_client_lnx_multi.tar.gz - GroupWise 7.03 Hot Patch 1 Multilingual Linux Client
gw703HP1_client_lnx_us.tar.gz - GroupWise 7.03 Hot Patch 1 US Linux Client
gw703HP1_client_mac_intel_multi.dmg - GroupWise 7.03 Hot Patch 1 Multilingual Mac Intel Platform Client
gw703HP1_client_mac_intel_us.dmg - GroupWise 7.03 Hot Patch 1 US Mac Intel Platform Client
gw703HP1_client_mac_ppc_multi.dmg - GroupWise 7.03 Hot Patch 1 Multilingual Power PC Platform Client
gw703HP1_client_mac_ppc_us.dmg - GroupWise 7.03 Hot Patch 1 US Mac Power PC Platform Client
gw703HP1_client_win_multi.exe - GroupWise 7.03 Hot Patch 1 Multilingual Windows Client
gw703HP1_client_win_us.exe - GroupWise 7.03 Hot Patch 1 US Windows Client
gw703HP1_full_lnx_multi.tar.gz - GroupWise 7.03 Hot Patch 1 Multilingual Linux Client and Agents
gw703HP1_full_lnx_us.tar.gz - GroupWise 7.03 Hot Patch 1 US Linux Client and Agents
gw703HP1_full_nlmwin_multi.exe - GroupWise 7.03 Hot Patch 1 Multlingual Windows and NLM Client and Agents
gw703HP1_full_nlmwin_us.exe - GroupWise 7.03 Hot Patch 1 US Windows and NLM Client and Agents

security fixes

A Cross-site scripting (XSS) vulnerability has been reported with the GroupWise 7.0.x WebAccess simple interface (the standard WebAccess UI is not affected) that could potentially allow users to be redirected to a malicious web site. (Bug 390013)

change log

Admin - 1 bug

372125 - POA objects cannot be deleted from ConsoleOne or NWAdmin - invalid attribute

Client Linux - 1 bug

399313 - GWIA sending UPD on reply

Client Windows - 11 bugs

363084 - Corrupt archive not repairable With 7.0.3 GWCheck.
375942 - Sending to routing recipient of Excel spreadsheet results in error
377078 - Problems with attachment from plain-text mail
377631 - Users can access documents without rights
378544 - Crash when viewing an HTML message
382446 - Email with Arabic font (Arabic-1256) isn't encoded correctly on GW Client 7.0.3 build 976
385782 - After installing the GroupWise client with Word and Excel integrated in the SETUP.CFG when launching the GroupWise Client, they are not integrated.
385858 - GroupWise Client Crashes while saving a mail with a long subject
388719 - GroupWise crashes when sending email when "Start in" is set to Home Folder
390968 - Exporting a calendar to an .ics file puts all of the END: VEVENT tags at the bottom of the file
397593 - Default print size is different than 6.5

Engine - 3 bugs

372432 - Memory leak when handling some rules
385733 - Move user breaks forward rules by adding a message id to the lin record.
393321 - Abend gwenn 5 access esi across a page boundary

GroupWise Internet Agent (GWIA) - 6 bugs

293010 - Extended Characters in "Where" field are garbage receiving appointment through iCal
359135 - GWIA abends the server
383673 - GWIA terminates abnormally
388264 - Abend: Free detected a corrupt trailing redzone, GWIA RecvConvert
394606 - /FROA switch causes the contents of the mail to be deleted
396551 - GWIA is taking messages sent from a Mac and marking them as BAD

GWCheck - 3 bugs

374763 - GWCheck: The tzchangefolder support option creates a search folder with the wrong dates
382796 - ConsoleOne snapins does not re-read opt config file properly.
382966 - Gwcheck deldupe folders does not work

iCAL - 2 bugs

363817 - iCal appointments accepted/declined from IBM QuickR generate a second appointment with out a "from" value
381973 - Cancellation of Recurring Appts causes that many canceled messages to be generated by the POA

Install - 4 bugs

283274 - WebAccess Agent Configuration - the eDir browse button doesn't work when using SSL connection to the LDAP server
369478 - Configure Admin brings up and error saying 7.0.3 Administration is not installed
379711 - GW703 MSI still reports version as 702
397624 - Install script for Linux client contains two versions of the rpm

Message Transfer Agent (MTA) - 1 bug

375527 - MTA Web Console XML error

Post Office Agent (POA) - 5 bugs

363036 - POA Memory Leak
372565 - Turn rules tracking to verbose from diagnostic
382961 - POA crashe
394152 - Addressed memory leak on NetWare
397280 - Enable a POA to break into debugger using environment variable

Protocol - 5 bugs

377017 - Issue setting Task priority issue with SOAP
381565 - SOAP: Getting items not functioning in all cases
390211 - Can't read an item with more than 5000 recipients
392651 - Exception on the return of removeItemsResponse because of missing name space
393086 - Memory leak streaming attachments

SDK - 5 bugs

367500 - Unable to load 'GWMXL1UK.DLL' language resource file.....Contact your system
378836 - POA Crash
386842 - Problems adding contacts to a shared folder
387467 - Problems when the Work In Progress folder contains many messages
393925 - Can't get a html message body > 2K

WebAccess - 4 bugs

179113 - Groupwise proxy users do not work in GW Webaccess portlet
366649 - Master GWDVA process crashes when viewing a document
382659 - Wrong / name changed of the GMT Time Zone name showing in WebAccess client.
390013 - Reported XSS vulnerability in 7.03 WebAccess simple interface