The IBM Cloud Manager with Openstack 4.2.0.2 cmwo 4.2.0.2 interim fix 4 Readme

Readme file for:IBM Cloud Manager with OpenStack 4.2 interim fix 4 for fix pack 2
Product/Component Release:4.2.0.2
Update Name:cmwo 4.2.0.2 interim fix 4
Fix ID:4.2.0.2-IBM-CMWO-IF004
Publication Date:2015-06-22
Last modified date:2015-06-22

Online version of the readme file:http://www-01.ibm.com/support/docview.wss?rs=0&uid=isg400002199
Important: The most current version of the readme file can always be found online.

Contents

Download location
Prerequisites and co-requisites
Known issues
Known limitations

Installation information
   Installing

List of fixes
Copyright and trademark information



Download location

Download updates for IBM Cloud Manager with OpenStack 4.2 from the following location:
http://www.ibm.com/eserver/support/fixes/

Below is a list of components, platforms, and file names that apply to this Readme file.

Fix Download for Linux
Product/Component Name:Platform:Fix:
IBM Cloud Manager with OpenstackLinux 64-bit,x86_64 Linux 64-bit,x86_64
Linux 64-bit,pSeries Linux 64-bit,pSeries
cmwo_fixpack_4.2.0.2.4.tar.gz





Prerequisites and co-requisites

None.



Known issues

No known issues have been identified.

Known limitations

No known limitations have been identified.

Installation information

This file contains directions for installing the fix pack on the IBM Cloud Manager with OpenStack deployment server and additional information not available in the IBM Cloud Manager with OpenStack Knowledge Center.

If you have already deployed a topology, you will need to update your deployed topology after following the directions in this file. If the special instructions in this file do not apply to your environment, you still must update your deployed topology to apply other fixes contained in this fix pack.

Directions for updating deployed topologies can be found in the IBM Cloud Manager with OpenStack Knowledge Center.


Before installing

Be aware that updating a deployed topology will stop IBM Cloud Manager with OpenStack services on the deployed nodes. Deploying updates should not affect active virtual machines deployed using the IBM Cloud Manager with OpenStack self-service portal or OpenStack.

Installing

To install the IBM Cloud Manager with OpenStack fix pack, do the following:
  1. Download the fix pack archive (e.g. cmwo_fixpack_4.2.0.2.4.tar.gz) to a temporary directory on the deployment server.
  2. Change to that directory and expand the archive:

    # tar -zxf cmwo_fixpack_4.2.0.2.4.tar.gz

  3. Run the fix pack installer:

    # ./install_cmwo_fixpack.sh

  4. If the fix pack installed successfully you will see this message:

       Installation of fix pack completed successfully.

    Otherwise, you will this message:

       ERROR: Installation of fix pack failed. See log files for details.

    Additional messages will tell you where the log files are stored.


After installing

After installing the fixpack, review the following sections to determine if there are additional actions that must be performed:

Automated environment updates

IBM Cloud Manager with OpenStack includes a tool that can be used to automatically perform certain environment updates:

To update an environment named 'my-environment' stored in the chef server use this command:
  knife os manage update environment my-environment

To update a JSON environment file named 'my-environment.json' use this command:
  knife os manage update environment my-environment.json

The file name must end with the '.json' extension. If the file refers to an existing chef environment, the file will also be uploaded to the chef server.

Manual environment updates

If the fix pack requires other environment changes, you can edit the environment(s) used for your topologies using the following procedure.

Installing the fix pack updates the example environments:
  example-ibm-os-allinone
  example-ibm-os-single-controller-n-compute
  example-ibm-sce

If you have created an environment for your topology, or have created an environment file, these must be updated manually. If you do not do this, future deploys or updates will continue to use the original cookbook.

1. Change to the directory where you have created your topology files.

2. If you do not have your environment file, you can download the current environment from the chef server:
  # knife environment list
  _default
  example-ibm-os-allinone
  example-ibm-os-single-controller-n-compute
  example-ibm-sce
  test-environment

Identify the environment to change, e.g. test-environment and download it:
  # knife environment show test-environment -d -F json > test-environment.json

3. Edit the environment file and modify it as required.

4. Save the file.

5. Upload the modified environment to the chef server:
  # knife environment from file test-environment.json
  Updated Environment test-environment

Update cookbook versions

This fix pack contains cookbook updates which require updates to the chef environment(s) for your topologies.

If any of the following conditions are true, no action is required to update cookbook versions, and you should continue with the next section of this README file.

Use the 'knife os manage update environment' command as described in 'Automated environment updates' to update your environment or environment file.

This table lists the updated cookbook versions and the fix pack that includes them.

Fix pack Cookbook Current version
======== ======== ========
4.2.0.2 ibm-openstack-powervc-driver 10.1.3
4.2.0.2 openstack-network 10.1.1
4.2.0.2 ibm-openstack-common 10.1.11
4.2.0.2 ibm-sce 10.1.5
4.2.0.2 ibm-openstack-zvm-appliance 10.0.0
Update the deployed topology

After making the changes described above, update your deployed topology to apply the fixes contained in this fix pack.

If you did not deploy a topology prior to installing this fix pack, no further action is required.

The IBM Cloud Manager with OpenStack Knowledge Center has more information on updating a deployed topology.


Uninstalling

IBM Cloud Manager with OpenStack fix packs cannot be uninstalled.


List of fixes

Update log (6/23/2015):
IBM Cloud Manager with OpenStack 4.2 ifix 4.2.0.2.4 includes:
Resolve security issue: CVE-2014-9494 CVE-2015-0203 CVE-2015-0223 CVE-2015-0224 CVE-2014-9130 CVE-2015-0491 CVE-2015-0459 CVE-2015-0469 CVE-2015-0458 CVE-2015-0460 CVE-2015-0480 CVE-2015-0486 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477 CVE-2015-0470 CVE-2015-2808 CVE-2015-1916 CVE-2015-1914 CVE-2015-0192 CVE-2015-0204

Update log (6/10/2015):
IBM Cloud Manager with OpenStack 4.2 ifix 4.2.0.2.3 includes:
Resolve security issue: CVE-2015-0207,CVE-2015-0290,CVE-2015-0286,CVE-2015-0208,CVE-2015-0287,CVE-2015-0289,CVE-2015-0292,CVE-2015-0293,CVE-2015-1787,CVE-2015-0285,CVE-2015-0209,CVE-2015-0288

Update log (4/22/2015):
IBM Cloud Manager with OpenStack 4.2 ifix 4.2.0.2.1 includes:
- rtc-198430 - "RC4 Bar Mitzvah Attack for SSL/TLS" (CVE-2015-2808)


4.2.0.2.4:

Contents of Fix/Service Pack build:



Copyright and trademark information

This fix is subject to the terms of the license agreement which accompanied, or was contained in, the Program for which you are obtaining the fix. You are not authorized to install or use the fix except as part of a Program for which you have a valid Proof of Entitlement.

SUBJECT TO ANY WARRANTIES WHICH CAN NOT BE EXCLUDED OR EXCEPT AS EXPLICITLY AGREED TO IN THE APPLICABLE LICENSE AGREEMENT OR AN APPLICABLE SUPPORT AGREEMENT, IBM MAKES NO WARRANTIES OR CONDITIONS EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OR CONDITIONS OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON INFRINGEMENT, REGARDING THE PTF.

By furnishing this document, IBM grants no licenses to any related patents or copyrights.

The applicable license agreement may have been provided to you in printed form and/or may be viewed at http://www-03.ibm.com/software/sla/sladb.nsf/viewbla/.

Copyright © IBM Corporation 2014