PK96790: MOD_DEFLATE INPUT FILTER NOT REMOVING CONTENT-ENCODING

6.1.0.31: Java SDK 1.5 SR11 FP1 Cumulative Fix for WebSphere Application Server
6.1.0.33: Java SDK 1.5 SR12 FP1 Cumulative Fix for WebSphere
6.1.0.35: Java SDK 1.5 SR12 FP2 Cumulative Fix for WebSphere
6.1.0.37: Java SDK 1.5 SR12 FP3 Cumulative Fix for WebSphere
6.1.0.47: WebSphere Application Server V6.1 Fix Pack 47
6.1.0.39: Java SDK 1.5 SR12 FP4 Cumulative Fix for WebSphere Application Server
6.1.0.41: Java SDK 1.5 SR12 FP5 Cumulative Fix for WebSphere Application Server
6.1.0.43: Java SDK 1.5 SR13 Cumulative Fix for WebSphere Application Server
6.1.0.45: Java SDK 1.5 SR14 Cumulative Fix for WebSphere Application Server
6.1.0.47: Java SDK 1.5 SR16 Cumulative Fix for WebSphere Application Server

APAR status

• Closed as program error.

Error description

• mod_deflate input filter not removing Content-Encoding
  

Local fix

• Backport of Apache fix PR23287 on IHS 6.1.x
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  IBM HTTP Server V6.0 and V6.1 users who     *
  *                  use mod_deflate for uncompressing           *
  *                  requests. This is uncommon and most         *
  *                  users should not be affected.               *
  ****************************************************************
  * PROBLEM DESCRIPTION: Input from clients sending compressed   *
  *                      requests could be corrupted.            *
  ****************************************************************
  * RECOMMENDATION:  Fix should be applied if using IBM HTTP     *
  *                  Server 6.0 or 6.1 with mod_deflate          *
  *                  configured to uncompress incoming           *
  *                  requests.                                   *
  ****************************************************************
  mod_deflate can be used to uncompress incoming requests that
  are encoded using gzip.  After uncompressing requests,
  mod_deflate was not removing the Content-Encoding: gzip header
  from the request, which could confuse backend handlers into
  thinking the request was still compressed.
  

Problem conclusion

• Fix was backported from Apache PR 23287.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM HTTP SERVER

• Fixed component ID

  5724J0801

Applicable component levels

• R60A PSY

     UP

• R60H PSY

     UP

• R60I PSY

     UP

• R60P PSY

     UP

• R60S PSY

     UP

• R60W PSY

     UP

• R60Z PSY

     UP

• R61A PSY

     UP

• R61H PSY

     UP

• R61I PSY

     UP

• R61P PSY

     UP

• R61S PSY

     UP

• R61W PSY

     UP

• R61Z PSY

     UP