IBM Platform Cluster Manager 4.1.1.1 Fix 233196 Readme File
Abstract
Fix 233196 fixes the security vulnerability in the GnuTLS library that is used by xCAT genesis in Platform Cluster Manager.
Description
Readme documentation for IBM Platform Cluster Manager Fix 233196 including installation-related instructions.
Platform Cluster Manager uses xCAT genesis which has a security vulnerability in the GnuTLS library. Applying this fix will fix this security threat.
Readme file for: IBM Platform Cluster Manager
Product/Component Release: 4.1.1.1
Update Name: Fix 233196
Fix ID: pcmse-4.1.1.1-build233196
Publication date: 9 May 2014
Last modified date: 9 May 2014
Contents:
1. Download location
2. Products or components affected
3. System requirements
4. Installation and configuration
5. List of files
6. Copyright and trademark information
1. Download Location
Download Fix 233196 from the following location: http://www.ibm.com/eserver/support/fixes
2. Products or components affected
Affected components include: xCAT genesis
3. System requirements
3.1 Software requirements
Red Hat Enterprise Linux (RHEL) 6.4 x86 (64-bit)
SUSE Linux Enterprise Server (SLES) 11.3 x86 (64-bit)
3.2 Hardware requirements
x86-based hardware (AMD, Intel)
4. Installation and configuration
4.1 Installation steps
1. Extract the fix tar archive on the management node:
# tar -xvzf pcmse_4.1.1.1_233196_fix.tar.gz
2. Create a backup directory:
# mkdir backup
3. Backup the original genesis RPM:
# mv /install/kits/kit-pcm-4.1.1.1/core/xcat-dep/xCAT-genesis-base-x86_64-2.8-snap201302180752.noarch.rpm backup/
4. Copy the genesis RPM found in the Fix to the correct directory:
# cp ./xCAT-genesis-base-x86_64-2.8-snap201404032124.noarch.rpm /install/kits/kit-pcm-4.1.1.1/core/xcat-dep/
5. Create a symbolic link to the genesis RPM to the repository:
# ln -s /install/kits/kit-pcm-4.1.1.1/core/xcat-dep/xCAT-genesis-base-x86_64-2.8-snap201404032124.noarch.rpm /install/kits/kit-pcm-4.1.1.1/repos/kit-pcm-4.1.1.1-rhels-6-x86_64/xCAT-genesis-base-x86_64-2.8-snap201404032124.noarch.rpm
# ln -s /install/kits/kit-pcm-4.1.1.1/core/xcat-dep/xCAT-genesis-base-x86_64-2.8-snap201404032124.noarch.rpm /install/kits/kit-pcm-4.1.1.1/repos/kit-pcm-4.1.1.1-sles-11-x86_64/xCAT-genesis-base-x86_64-2.8-snap201404032124.noarch.rpm
6. Refresh the repository:
# rm -f /install/kits/kit-pcm-4.1.1.1/repos/kit-pcm-4.1.1.1-rhels-6-x86_64/xCAT-genesis-base-x86_64-2.8-snap201302180752.noarch.rpm
# rm -f /install/kits/kit-pcm-4.1.1.1/repos/kit-pcm-4.1.1.1-sles-11-x86_64/xCAT-genesis-base-x86_64-2.8-snap201302180752.noarch.rpm
# createrepo /install/kits/kit-pcm-4.1.1.1/repos/kit-pcm-4.1.1.1-rhels-6-x86_64/
# createrepo /install/kits/kit-pcm-4.1.1.1/repos/kit-pcm-4.1.1.1-sles-11-x86_64/
7. Recreate the genesis image:
For RHEL:
# yum update
# mknb x86_64
For SLES:
# rpm -e xCAT-genesis-base-x86_64-2.8-snap201302180752 --nodeps
# rpm -ivh /install/kits/kit-pcm-4.1.1.1/core/xcat-dep/xCAT-genesis-base-x86_64-2.8-snap201404032124.noarch.rpm
# mknb x86_64
4.2 Uninstallation
1. Remove the genesis RPM that came with the Fix:
# rm -f /install/kits/kit-pcm-4.1.1.1/core/xcat-dep/xCAT-genesis-base-x86_64-2.8-snap201404032124.noarch.rpm
2. Copy the original genesis RPM back to the same location:
# cp ./backup/xCAT-genesis-base-x86_64-2.8-snap201302180752.noarch.rpm /install/kits/kit-pcm-4.1.1.1/core/xcat-dep/
3. Create a symbolic link of the original genesis RPM to the repository:
# ln -s /install/kits/kit-pcm-4.1.1.1/core/xcat-dep/xCAT-genesis-base-x86_64-2.8-snap201302180752.noarch.rpm /install/kits/kit-pcm-4.1.1.1/repos/kit-pcm-4.1.1.1-rhels-6-x86_64/xCAT-genesis-base-x86_64-2.8-snap201302180752.noarch.rpm
# ln -s /install/kits/kit-pcm-4.1.1.1/core/xcat-dep/xCAT-genesis-base-x86_64-2.8-snap201302180752.noarch.rpm /install/kits/kit-pcm-4.1.1.1/repos/kit-pcm-4.1.1.1-sles-11-x86_64/xCAT-genesis-base-x86_64-2.8-snap201302180752.noarch.rpm
4. Refresh the repository:
# rm -f /install/kits/kit-pcm-4.1.1.1/repos/kit-pcm-4.1.1.1-rhels-6-x86_64/xCAT-genesis-base-x86_64-2.8-snap201404032124.noarch.rpm
# rm -f /install/kits/kit-pcm-4.1.1.1/repos/kit-pcm-4.1.1.1-sles-11-x86_64/xCAT-genesis-base-x86_64-2.8-snap201404032124.noarch.rpm
# createrepo /install/kits/kit-pcm-4.1.1.1/repos/kit-pcm-4.1.1.1-rhels-6-x86_64/
# createrepo /install/kits/kit-pcm-4.1.1.1/repos/kit-pcm-4.1.1.1-sles-11-x86_64/
5. Downgrade genesis RPM and recreate the genesis image:
# rpm -e xCAT-genesis-base-x86_64-2.8-snap201404032124.noarch --nodeps
# rpm -ivh /install/kits/kit-pcm-4.1.1.1/core/xcat-dep/xCAT-genesis-base-x86_64-2.8-snap201302180752.noarch.rpm
# mknb x86_64
5. List of files
|--xCAT-genesis-base-x86_64-2.8-snap201404032124.noarch.rpm
6. Copyright and trademark information
© Copyright IBM Corporation 2014
U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.
IBM®, the IBM logo and ibm.com®are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.