Readme File for IBM^® Platform Symphony, IBM Spectrum Symphony Interim Fix 464645

Readme File for: IBM Platform Symphony, IBM Spectrum Symphony

Product Release: 6.1.1, 7.1 Fix Pack 1, 7.1.1, 7.1.2, and 7.2

Update Name: Interim Fix 464645

Fix ID: sym-build464645

Publication Date: September 25, 2017

This interim fix enables you to upgrade the IBM Java Runtime Environment (JRE) in IBM Platform Symphony / IBM Spectrum Symphony to fix a security vulnerability in IBM Java SDK that affects multiple product releases.

Contents

1. List of fixes

2. Download location

3. Installation

4. List of files

5. Copyright and trademark information

1.    List of fixes

APAR: P102330

2.    Download location

Download interim fix 464645 from the following location: https://www.ibm.com/eserver/support/fixes/

3.    Installation

System requirements

Linux x86_64

Packages

Download the JRE package that applies to your product version:

Product version	Package to download	Package description	CVE
IBM Spectrum Symphony 7.2	egojre-8.0.4.10.x86_64.rpm	Package for JRE 8 SR4 FP10	CVE-2017-10110 CVE-2017-10107 CVE-2017-10101 CVE-2017-10096 CVE-2017-10090 CVE-2017-10089 CVE-2017-10087 CVE-2017-10102 CVE-2017-10116 CVE-2017-10074 CVE-2017-10078 CVE-2017-10115 CVE-2017-10067 CVE-2017-10125 CVE-2017-10243 CVE-2017-10109 CVE-2017-10108 CVE-2017-10053 CVE-2017-10105 CVE-2017-1376
IBM Spectrum Symphony 7.1.2	egojre-1.8.0.410.x86_64.rpm	Package for JRE 8 SR4 FP10	Same as above
Platform Symphony 7.1.1	symSetup_jre8sr4fp10_linux-64_build464645.tar.gz	Package for JRE 8 SR4 FP10	Same as above
Platform Symphony 7.1 Fix Pack 1	symSetup_jre7sr10fp10_linux-64_build464645.tar.gz	Package for JRE 7 SR10 FP10	CVE-2017-10110 CVE-2017-10107 CVE-2017-10101 CVE-2017-10096 CVE-2017-10090 CVE-2017-10089 CVE-2017-10087 CVE-2017-10102 CVE-2017-10116 CVE-2017-10074 CVE-2017-10115 CVE-2017-10067 CVE-2017-10125 CVE-2017-10243 CVE-2017-10109 CVE-2017-10108 CVE-2017-10053 CVE-2017-10105 CVE-2017-1376
Platform Symphony 6.1.1	symSetup_jre6sr16fp50_linux-64_build464645.tar.gz	Package for JRE 6 SR16 FP50	CVE-2017-10110 CVE-2017-10107 CVE-2017-10101 CVE-2017-10096 CVE-2017-10089 CVE-2017-10087 CVE-2017-10102 CVE-2017-10116 CVE-2017-10074 CVE-2017-10115 CVE-2017-10067 CVE-2017-10125 CVE-2017-10243 CVE-2017-10109 CVE-2017-10108 CVE-2017-10053 CVE-2017-10105 CVE-2017-1376

Before installation

a.     Log on to the master host as the cluster administrator.

b.     Disable your applications, stop services, and shut down the cluster:

> soamcontrol app disable all

> egosh service stop all

> egosh ego shutdown all

c.     For 6.1.1, 7.1 Fix Pack 1, and 7.1.1 clusters, log on to each host and back up the JRE folder under $EGO_TOP/jre/<EGO_version>/linux-x86_64/.

For example, in the 7.1.1 cluster, back up the JRE folder at $EGO_TOP/jre/3.3/linux-x86_64/.

d.     For 7.1.2 and 7.2 clusters, log on to each host and uninstall the existing JRE.

NOTE: To uninstall the RPM package, you must have root permission and RPM version 4.2.1 or later must be installed on the host.

Query the existing JRE package and uninstall it from the dbpath location, for example:

   > rpm -qa --dbpath /tmp/rpm |grep egojre

     egojre-1.8.0.3-408454.x86_64

   > rpm -e egojre-1.8.0.3-408454.x86_64 --dbpath /tmp/rpm –nodeps

For IBM Spectrum Symphony 7.2, remove the link under the jre folder, for example:

     > rm -rf $EGO_TOP/jre/8.0.3.21

Installation

a.      Log on to each host as the cluster administrator and replace your current JRE folder with the files in this interim fix.

NOTE: To install the RPM package, you must have root permission and RPM version 4.2.1 or later must be installed on the host.

For 6.1.1, 7.1 Fix Pack 1 and 7.1.1 cluster, remove the files in the existing JRE folder and extract the interim fix package to the JRE folder on each host.

For example, in the 7.1.1 cluster, enter the following commands:

   > rm -rf $EGO_TOP/jre/3.3/linux-x86_64/*

   > tar zxfo symSetup_jre8sr4fp5_linux-64_build464645.tar.gz -C $EGO_TOP/jre/3.3/linux-x86_64

For 7.1.2 and 7.2, use the same dbpath and prefix, for example:

   > rpm –ivh --dbpath /tmp/rpm --prefix /opt/platform egojre-1.8.0.410.x86_64.rpm

b.      Delete all subdirectories and files in the GUI work directory:

> rm -rf $EGO_TOP/gui/work/*

c.       Launch your browser and clear the browser cache.

d.      Start the cluster and enable your applications:

> egosh ego start all

> soamcontrol app enable <appName>

Verify the installation

For Platform Symphony 6.1.1, run the java -version command to verify the installation. For example:

> java -version

  java version "1.6.0"

  Java(TM) SE Runtime Environment (build pxa6460sr16fp50-20170814_01(SR16 FP50))

  IBM J9 VM (build 2.4, JRE 1.6.0 IBM J9 2.4 Linux amd64-64 jvmxa6460sr16fp50-20170718_356955 (JIT enabled, AOT enabled)

  J9VM - 20170718_356955

  JIT  - r9_20170718_356955

  GC   - GA24_Java6_SR16_20170718_0955_B356955)

  JCL  - 20170812_01

For Platform Symphony 7.1 Fix Pack 1, run the java -version command to verify the installation. For example:

> java -version

  java version "1.7.0"

  Java(TM) SE Runtime Environment (build pxa6470sr10fp10-20170726_05(SR10 FP10))

  IBM J9 VM (build 2.6, JRE 1.7.0 Linux amd64-64 Compressed References 20170718_357001 (JIT enabled, AOT enabled)

  J9VM - R26_Java726_SR10_20170718_1208_B357001

  JIT  - r11_20170718_357001

  GC   - R26_Java726_SR10_20170718_1208_B357001_CMPRSS

  J9CL - 20170718_357001)

  JCL - 20170725_01 based on Oracle jdk7u151-b14

For Platform Symphony 7.1.1, run the java -version command to verify the installation. For example:

        > java -version

      java version "1.8.0"

  Java(TM) SE Runtime Environment (build pxa6480sr4fp10-20170727_01(SR4 FP10))

  IBM J9 VM (build 2.8, JRE 1.8.0 Linux amd64-64 Compressed References 20170722_357405 (JIT enabled, AOT enabled)

  J9VM - R28_20170722_0201_B357405

  JIT  - tr.r14.java_20170722_357405

  GC   - R28_20170722_0201_B357405_CMPRSS

  J9CL - 20170722_357405)

  JCL - 20170726_01 based on Oracle jdk8u144-b01

For IBM Spectrum Symphony 7.1.2, run the rpm -qa command to verify the installation. For example:

> rpm -qa --dbpath /tmp/rpm |grep egojre

  egojre-1.8.0.410-464645.x86_64

For IBM Spectrum Symphony 7.2, run the rpm -qa command to verify the installation. For example:

> rpm -qa --dbpath /tmp/rpm |grep egojre

  egojre-8.0.4.10-464645.x86_64

Uninstallation (if required)

a.     Log on to the master host as the cluster administrator.

b.     Disable your applications, stop services, and shut down the cluster:

> soamcontrol app disable all

> egosh service stop all

> egosh ego shutdown all

c.     Log on to all hosts in the cluster as cluster administrator and restore the JRE folder from your backup.

For 6.1.1, 7.1 Fix Pack 1, and 7.1.1 cluster, restore the $EGO_TOP/jre/<EGO_version>/linux-x86_64/ folder from your backup.

For example, in the 7.1.1 cluster, restore the $EGO_TOP/jre/3.3/linux-x86_64/ folder.

For 7.1.2 and 7.2 cluster, uninstall the existing JRE, then install the old one:

NOTE: To uninstall the RPM package, you must have root permission and RPM version 4.2.1 or later must be installed on the host.

a)     Uninstall the JRE fix, for example:

> rpm -e egojre-1.8.0.410-464645.x86_64 --dbpath /tmp/rpm/ --nodeps

        For the 7.2 cluster, remove the link under the jre folder, for example:

> rm -rf $EGO_TOP/jre/8.0.4.10

b)     Extract the egojre RPM package from the BIN installation package for IBM Spectrum Symphony 7.1.2, for example:

> sym-7.1.2.0_x86_64.bin --extract /opt/extract

c)     Reinstall the old JRE package; use the same dbpath and prefix, for example:

> rpm -ivh --dbpath /tmp/rpm --prefix /opt/extract/egojre-1.8.0.3.x86_64.rpm

d.     Delete all subdirectories and files in the GUI work directory:

> rm -rf $EGO_TOP/gui/work/*

e.     Launch your browser and clear the browser cache.

f.      Start the cluster and enable your applications:

> egosh ego start all

> soamcontrol app enable <appName>

4.     List of files

egojre-8.0.4.10.x86_64.rpm

egojre-1.8.0.410.x86_64.rpm

symSetup_jre6sr16fp50_linux-64_build464645.tar.gz

symSetup_jre7sr10fp10_linux-64_build464645.tar.gz

symSetup_jre8sr4fp10_linux-64_build464645.tar.gz

5.     Copyright and trademark information

© Copyright IBM Corporation 2017

U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM®, the IBM logo, and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.