=============================================================
       Readme File for IBM i Access for Windows patch
          for APAR SE60990

   (c) Copyright IBM Corporation 1996, 2015.  All rights reserved.

=============================================================
  This document is provided "as is" without warranty of any kind.  IBM disclaims
  all warranties, whether expressed or implied, including without limitation, the
  implied warranties of fitness for a particular purpose and merchantability
  with respect to the information in this document. By furnishing this document,
  IBM grants no licenses to any patents or copyrights.


=============================================================

-------------------------------------------------------------------

TABLE OF CONTENTS

-------------------------------------------------------------------


1.0 INFORMATION FOR APAR SE60990
  1.1 Problem description

2.0 INSTALLATION NOTES
  2.1 Applying the patch
  2.2 Patch file versions
  2.3 Removing the patch

3.0 PERMANENT FIX DELIVERY

4.0 ATTRIBUTION



-------------------------------------------------------------------

1.0 INFORMATION FOR APAR SE60990

-------------------------------------------------------------------

1.1  Problem Description
------------------------------------------------

A fault may occur when Data Transfer processes a .dtf or .dtt file with certain
too-large fields.

-------------------------------------------------------------------

2.0 INSTALLATION NOTES

-------------------------------------------------------------------


2.1 Applying the patch
-----------------------------------------------------

    Perform the following steps on your PC.  On Vista, Windows 7, or later perform these steps as a fully-elevated Administrator.
    1) Ensure SI53809 is installed.
    2) Close Data Transfer and Excel if either are running.
    3) On a 64-bit PC
       -  Enter the System32 directory for 64-bit modules:  C:\Windows\System32
                (or %WINDIR%\System32 )
       -  Save the current 64-bit cwbtfutl.dll.
       -  Place cwbtfutl.dll.64bit in this directory, named as cwbtfutl.dll.
       -  Enter the SysWOW64 directory for 32-bit modules:  C:\Windows\SysWOW64
                (or %WINDIR%\SysWOW64)
       -  Save the current 32-bit cwbtfutl.dll.
       -  Place cwbtfutl.dll.32bit in this directory, named as cwbtfutl.dll.
    4) On a 32-bit PC
       -  Enter the System32 directory:  C:\Windows\System32
                (or %WINDIR%\System32)
       -  Save the current cwbtfutl.dll.
       -  Place cwbtfutl.dll.32bit in this directory, named as cwbtfutl.dll.
    5) The installation is complete.



2.2 Patch file versions
-----------------------------------------------------

    After installation of the test fix, verify the file versions:
    32-bit pc
    C:\Windows\System32\cwbtfutl.dll --> 13.0.11.1

    64-bit pc
    C:\Windows\System32\cwbtfutl.dll --> 13.64.11.1
    C:\Windows\SysWOW64\cwbtfutl.dll --> 13.0.11.1



2.3 Removing the patch
---------------------------
    Perform the following steps on your PC.  On Vista, Windows 7, or later perform these steps as a fully-elevated Administrator.
    1) Close Data Transfer and Excel if either are running.
    2) On a 64-bit PC
       -  Enter the System32 directory for 64-bit modules:  C:\Windows\System32
       -  Replace the cwbtfutl.dll with the original copy you previously saved.
       -  Enter the SysWOW64 directory for 32-bit modules:  C:\Windows\SysWOW64
       -  Replace the cwbtfutl.dll with the original copy you previously saved.
    3) On a 32-bit PC
       -  Enter the System32 directory:  C:\Windows\System32
       -  Replace the cwbtfutl.dll with the original copy you previously saved.

-------------------------------------------------------------------

3.0 PERMANENT FIX DELIVERY

-------------------------------------------------------------------

The permanent fix will be delivered in the next 7.1 Service Pack scheduled
for June 2015. No special action (beyond installing that service pack) will
be necessary for the user to acquire this fix.


-------------------------------------------------------------------

4.0 ATTRIBUTION

-------------------------------------------------------------------

Thanks to Fernando Muñoz, from NULL Group http://nullgroup.com/ for reporting this issue.
It is tracked as CVE-2014-8920.



[END OF DOCUMENT]