IBM FileNet P8 Content Search Services 5.5.10.0-P8CSS-IF001 Interim Fix Readme
© Copyright IBM Corporation 2023.

Readme file for: IBM® FileNet® P8 Content Search Services
Update name: 5.5.10.0-P8CSS
Fix ID: 5.5.10.0-P8CSS-IF001
Publication date: 29 February 2023
Last modified date: 29 February 2023

Contents

About this Interim Fix
New in this Interim Fix
Prerequisites
Known problems, restrictions, and solutions
Download location
Installing this Interim Fix
Shutdown Content Search Services server
Installing library files
Installing the Content Search Services (CSS) Microsoft Redistributable files
Installing Oracle Outside In Technology (OIT)
Installing Java updates
Start Content Search Services server
Removing this Interim Fix
Fix list (APARs)
Notices
Trademarks
Document change history

About this Interim Fix

This Interim Fix updates the whitney_core.jar, Oracle Outside In Technology (OIT), and third party jars.

New in Interim Fix 5.5.10.0-P8CSS-IF001

The following items are included in interim fix 5.5.10.0-P8CSS-IF001:


Prerequisites

This Interim Fix requires:


Known problems, restrictions, and solutions

This interim fix has the following known problems and restrictions that might be continuing, and the solutions are provided where applicable:


Download location

Click the following link to access the files for this interim fix server update: 5.5.10.0-P8CSS-IF001. You need an IBM login and password to access this download location.

To verify that the FileNet Content Manager files were not altered, see the signature verification technical note 6416109.


Installing this Interim Fix

Tip When copying files from Windows to Linux, make sure the copy program used does not modify CR/LF

Installation of this interim fix consists of the following tasks:

Repeat the following steps on each Content Search Services server.


Shutdown Content Search Services server

  1. Stop the Content Search Services server:

    On AIX, Linux (all supported versions)
    Run the script: /css_install_location/server_name/bin/shutdown.sh

    On Windows (64 bit)
    If started from the script to stop, run the script: \css_install_location\server_name\bin\shutdown.bat, or stop the Content Search Services Windows service, if Content Search Services is configured as a Windows Service.


Installing library files

  1. Taka a backup of the existing copies of the following files into a temporary folder, and then copy the new versions of the files from this Interim Fix into the original directory.

    On AIX, Linux (all supported versions)

    On Windows (64 bit)


Installing the Microsoft 2013 & 2015-2019 Redistributable files

Only required on Windows systems where Content Search Services (CSS) indexing and searching or Thumbnails are configured for Oracle Outside In Technology (OIT) v8.5.3 and higher.

Note: If the Microsoft 2013 & 2015-2019 Redistributable files are currently installed, you do not need to re-install them. Both 2013 & 2015-2019 versions are required.

    On Windows

    Installing the Microsoft 2013 Redistributable files

  1. Open Windows Control Panel > Programs and look for Microsoft Visual C++ 2013 Redistributable (x64)", and if present, no need to re-install.
  2. Download Microsoft Visual C++ Redistributable 2013 Package for Visual Studio 2013 package vcredist_x64.exe
  3. Install following Microsoft installation instructions.

  4. Installing the Microsoft 2015-2019 Redistributable files

  5. Open Windows Control Panel > Programs and look for Microsoft Visual C++ 2015-2019 Redistributable (x64)", and if present, no need to re-install.
  6. Download Microsoft Visual C++ Redistributable 2015-2019 Package for Visual Studio 2015-2019 package vcredist_x64.exe
  7. Install following Microsoft installation instructions.

Installing Oracle Outside In Technology (OIT)

  1. Take a backup of the following existing folder.
    Then extract the stellent* zip file (that was extracted from the fix (see previous step)) into the corresponding stellent folder in your install location and extract it there (This action overwrites the existing copy.)
  2. Navigate to the stellent folder and further extract the new outsidein_sx_hx.zip which is found there, overwriting existing files in the stellent folder.
  3. Content Search Services server Oracle Outside In Technology (OIT) directory name by operating system
    Operating system
    Oracle Outside In Technology (OIT) directory
    AIX
    stellent.aix64
    Linux 64-bit
    stellent.linux64
    Windows 64-bit
    stellent.windows64
    zLinux 64-bit
    stellent.zlinux64

  4. For Unix platforms, go to the stellent.platform folder and set executable permission to the textExtractor file:

    For example

    cd stellent.linux64
    $ chmod +x textExtractor

Installing the Java updates

As the Java software used by FileNet Content Manager v5.5.10 and higher is now solely supplied by the customer, please be sure to check for updates to the versions you are using in the three instances we have use for Java: within your Application Server, check for JRE/SDK updates; in Content Search Services (CSS), check your vendor for updates; and for your private Java installations which may be used by our Content Platform Engine (CPE) stand-alone tools, also check your vendor for updates.


Start Content Search Services server

  1. Start the Content Search Services server:

    On AIX, Linux (all supported versions)
    Run the following script:

    /css_installation_location/server_name/bin/startup.sh

    On Windows (64 bit)
    Start the Content Search Services Windows service, or run the following script:

    css_installation_location\server_name\bin\startup.bat

  2. Validate that the fix was applied successfully. After you restart the Content Search Services server, check the Content Search Services Server /log directory trace0.log file for the expected build version:

    Jar manifest version = 5.5.10.0-IF1, 8, 2023/03/06 16:42:16.170


Removing this Interim Fix

This Interim fix does not have an uninstall option.

You can return to the prior release level by manually restoring the backed up files.


Fix list (APARs)

The following tables list the product fixes in this Interim Fix.

Deployment type: T=Traditional application server, C=Containerized, A=All deployment types

5.5.10.0-P8CSS-IF001
APAR
Deployment
Description
PJ46975
A
PSIRT ADV0064923 (CVE-2022-40151) PSIRT ADV0074682 (CVE-2022-41966): ThoughtWorks XStream: Denial of Service attacks (DoS) Security Vulnerabilities, affected, not vulnerable. See CVE-2022-40151 security bulletin 6852831 and CVE-2022-41966 security bulletin 6852835.
PJ46996
A
PSIRT ADV0076206 (CVE-2022-27404, CVE-2022-37434, CVE-2022-43680, CVE-2022-1122): Oracle Outside In Technology (OIT) security vulnerabilities. See security bulletin 6857861. Fixed in Oracle Outside In Technology (OIT) v8.5.6 BP#4 p34881262 (January 2023).
PJ47011
A
Content Search Services (CSS) configTool logging failure and exception thrown for unset logFolder system property.
PJ47023
A
Content Search Services (CSS) Content Based Retrieval (CBR) indexing error: IQQP0009W The parser cannot parse the document docType "Unknown (ANSI 8)".

Notices

This information was developed for products and services offered in the U.S.A.

IBM may not offer the products, services, or features discussed in this document in other countries. Consult your local IBM representative for information on the products and services currently available in your area. Any reference to an IBM product, program, or service is not intended to state or imply that only that IBM product, program, or service may be used. Any functionally equivalent product, program, or service that does not infringe any IBM intellectual property right may be used instead. However, it is the user's responsibility to evaluate and verify the operation of any non-IBM product, program, or service.

IBM may have patents or pending patent applications covering subject matter described in this document. The furnishing of this document does not grant you any license to these patents. You can send license inquiries, in writing, to:

IBM Director of Licensing
IBM Corporation
J74/G4
555 Bailey Avenue
San Jose, CA 95141
U.S.A. 

For license inquiries regarding double-byte (DBCS) information, contact the IBM Intellectual Property Department in your country or send inquiries, in writing, to:

Intellectual Property Licensing
Legal and Intellectual Property Law
IBM Japan, Ltd.
19-21, Nihonbashi-Hakozakicho, Chuo-ku
Tokyo 103-8510, Japan 

The following paragraph does not apply to the United Kingdom or any other country where such provisions are inconsistent with local law: INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some states do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you.

This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice.

Any references in this information to non-IBM Web sites are provided for convenience only and do not in any manner serve as an endorsement of those Web sites. The materials at those Web sites are not part of the materials for this IBM product and use of those Web sites is at your own risk.

IBM may use or distribute any of the information you supply in any way it believes appropriate without incurring any obligation to you.

Licensees of this program who wish to have information about it for the purpose of enabling: (i) the exchange of information between independently created programs and other programs (including this one) and (ii) the mutual use of the information which has been exchanged, should contact:

IBM Corporation
J46A/G4
555 Bailey Avenue
San Jose, CA  95141-1003
U.S.A. 

Such information may be available, subject to appropriate terms and conditions, including in some cases, payment of a fee.

The licensed program described in this document and all licensed material available for it are provided by IBM under terms of the IBM Customer Agreement, IBM International Program License Agreement or any equivalent agreement between us.

Any performance data contained herein was determined in a controlled environment. Therefore, the results obtained in other operating environments may vary significantly. Some measurements may have been made on development-level systems and there is no guarantee that these measurements will be the same on generally available systems. Furthermore, some measurements may have been estimated through extrapolation. Actual results may vary. Users of this document should verify the applicable data for their specific environment.

Information concerning non-IBM products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products and cannot confirm the accuracy of performance, compatibility or any other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products.

All statements regarding IBM's future direction or intent are subject to change or withdrawal without notice, and represent goals and objectives only.

This information contains examples of data and reports used in daily business operations. To illustrate them as completely as possible, the examples include the names of individuals, companies, brands, and products. All of these names are fictitious and any similarity to the names and addresses used by an actual business enterprise is entirely coincidental.

COPYRIGHT LICENSE:

This information contains sample application programs in source language, which illustrate programming techniques on various operating platforms. You may copy, modify, and distribute these sample programs in any form without payment to IBM, for the purposes of developing, using, marketing or distributing application programs conforming to the application programming interface for the operating platform for which the sample programs are written. These examples have not been thoroughly tested under all conditions. IBM, therefore, cannot guarantee or imply reliability, serviceability, or function of these programs. The sample programs are provided "AS IS", without warranty of any kind. IBM shall not be liable for any damages arising out of your use of the sample programs.

Trademarks

IBM, the IBM logo, and ibm.com are trademarks or registered trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.

Microsoft, Windows, Windows NT, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both.

Other product and service names might be trademarks of IBM or other companies.

Document change history



Date
Description
29 February 2023
Initial release of this interim fix.