Interim Fix 526873 for IBM Spectrum Symphony 7.2.1

Readme File for IBM^® Spectrum Symphony 7.2.1 Interim Fix 526873

Readme file for: IBM Spectrum Symphony

Product/Component Release: 7.2.1

Update Name: Interim Fix 526873

Fix ID: sym-7.2.1-build526873

Publication date: August 23, 2019

This readme file provides guidance on upgrading Jackson Databind, Jackson Core, and Jackson Annotations to version 2.9.8 for OpenID client in IBM Spectrum Symphony 7.2.1. The upgraded software fixes security vulnerabilities CVE-2018-14719, CVE-2018-14718, CVE-2018-14720, and CVE-2018-14721.

Contents

1. List of fixes

2. Download location

3. Products or components affected

4. Installation and configuration

5. Uninstallation

6. Product notifications

7. Copyright and trademark information

1. List of fixes

APAR: P103019

2. Download location

Download interim fix 526873 from the following location: https://www.ibm.com/eserver/support/fixes/

3. Products or components affected

Component name, Platform, Fix ID:

OpenIdClient, Linux-x86_64, sym-7.2.1-build526873

4. Installation and configuration

Follow these instructions to download and install this interim fix on hosts in your cluster:

System requirements

Linux x86_64

Prerequisites

Your Linux host must include the “ed” Linux line-oriented text editor.

Installation

a. Log on to the master host as the cluster administrator and stop the OpenIdClient service:

> egosh user logon -u Admin -x Admin

> egosh service stop OpenIdClient

b. On each of management host, create a directory (for example, /symfixes) and download the soammgmt-7.2.1_noarch_build526873.tar.gz package to the directory.

c. Run the egoinstallfixes command to install the soammgmt-7.2.1_noarch_build526873.tar.gz package:

> egoinstallfixes /symfixes/soammgmt-7.2.1_noarch_build526873.tar.gz

NOTE: Running the egoinstallfixes command automatically backs up the current binary files to a fix backup directory for recovery purposes. Do not delete this backup directory; you will need it if you want to recover the original files. For more information on using this command, see the egoinstallfixes command reference.

d. Run the pversions command to verify the installation:

> pversions -b 526873

IBM Spectrum soammgmt 7.2.1.0

-----------------------------

binary type: noarch, Aug 02 2019, Build 526873

installed: Aug 21 2019

notes:

fixes:

files: /wlp/usr/servers/openid/SymOpenIdClient-7.2.1.0.war

e. From the master host, start the OpenIdClient service:

> egosh user logon -u Admin -x Admin

> egosh service start OpenIdClient

5. Uninstallation

If required, follow the instructions in this section to uninstall this interim fix from your cluster.

a. Log on to the master host as the cluster administrator and stop the OpenIdClient service:

> egosh user logon -u Admin -x Admin

> egosh service stop OpenIdClient

b. Log on to each management host in the cluster and roll back this interim fix:

· To uninstall with the build number, enter:

> egoinstallfixes -r 526873

· To uninstall by specifying the full path to the interim fix package, enter (for example):

> egoinstallfixes -r /symfixes/soammgmt-7.2.1_noarch_build526873.tar.gz

c. From the master host, start the OpenIdClient service:

> egosh service start OpenIdClient

6. List of fixes

wlp/usr/servers/openid/SymOpenIdClient-7.2.1.0.war

7. Product notifications

To receive information about product solution and patch updates automatically, subscribe to product notifications on the My Notifications page http://www.ibm.com/support/mynotifications/ on the IBM Support website (http://support.ibm.com). You can edit your subscription settings to choose the types of information you want to get notification about, for example, security bulletins, fixes, troubleshooting, and product enhancements or documentation changes.

8. Copyright and trademark information

U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM®, the IBM logo and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.