Readme for IBM® Spectrum Conductor with Spark 2.2.1 Interim Fix 535958

Readme file for: IBM Spectrum Conductor with Spark
Product/Component Release: 2.2.1
Update Name: Interim Fix 535958

Fix ID: cws-2.2.1-build535958
Publication date: January 17, 2020

This interim fix enables you to upgrade the IBM Java Runtime Environment (JRE) in IBM Spectrum Conductor with Spark 2.2.1 to JRE 8 SR6 in order to fix the following security vulnerabilities in IBM Java SDK: CVE-2019-2989, CVE-2019-2958, CVE-2019-2975, CVE-2019-2999, CVE-2019-2996, CVE-2019-2992, CVE-2019-2988, CVE-2019-2983, CVE-2019-2981, CVE-2019-2978, CVE-2019-2973, CVE-2019-2962, CVE-2019-2964, CVE-2019-2945, and CVE-2019-2933.

Contents

1.         List of fixes

2.         Download location

3.         Installation and configuration

4.         Uninstallation

5.         List of files

6.         Product notifications

7.         Copyright and trademark information

1.   List of fixes

N/A

2.   Download location

Download interim fix 535958 from the following location: http://www.ibm.com/eserver/support/fixes/

3.   Installation and configuration

Follow the instructions in this section to download and install this interim fix in your cluster.

System requirements

Linux x86_64 or Linux ppc64le

Installation

a.         Log in to the cluster management console as the cluster administrator and stop all Spark instance groups.

b.         Log on to the master host as the cluster administrator:

> egosh user logon -u Admin -x Admin

c.         Stop all services and shut down the cluster:

> egosh service stop all

> egosh ego shutdown all

d.         Log on to each host in your cluster (root or sudo-to-root permission).

e.         Define the CLUSTERADMIN environment variable and set it to any valid operating user account, which then owns all installation files, for example:

> export CLUSTERADMIN=egoadmin

f.          Upgrade the JRE by using the RPM in this interim fix (note that RPM version 4.2.1 or later must be installed on the host):

> mkdir -p /tmp/cws221build535958

> tar zxof cws-2.2.1.0_os_type_build535958.tgz -C /tmp/cws221build535958

> rpm -ivh --replacefiles --prefix $EGO_TOP --dbpath dbpath_location /tmp/cws221build535958/egojre-8.0.6.0.os_type.rpm

    where $EGO_TOP specifies the path to where the cluster is installed, os_type is either x86_64 or pcc64le, and dbpath_location specifies the path to your database.

g.         Optional: In $EGO_TOP/integration/elk/1.4/scripts/common.inc, set JAVA_HOME to the new JRE location, for example:

JAVA_HOME=$EGO_TOP/jre/8.0.6.0/linux-os_type

where os_type is either x86_64 or pcc64le.

h.         Source the cluster profile again and start the cluster:

> egosh ego start all

The cshrc.jre and profile.jre files are updated to the current JRE version. If you made copies of these files, ensure that you update the copied files with the new JRE version.

i.           Log in to the cluster management console as the cluster administrator and start the required Spark instance groups.

j.           Run the rpm –qa command to verify the installation:

> rpm -qa --dbpath dbpath_location | grep egojre

egojre-8.0.6.0-535958.os_type

where os_type is either x86_64 or pcc64le.

4.   Uninstallation

If required, follow the instructions in this section to uninstall this interim fix in your cluster.

a.      Log in to the cluster management console as the cluster administrator and stop all Spark instance groups.

b.      Log on to the master host as the cluster administrator:

> egosh user logon -u Admin -x Admin

c.      Stop services and shut down the cluster:

> egosh service stop all

> egosh ego shutdown all

d.      Log on to each host in your cluster (root or sudo-to-root permission).

e.      Define the CLUSTERADMIN environment variable and set it to any valid operating user account, which then owns all installation files, for example:

> export CLUSTERADMIN=egoadmin

f.       Uninstall the existing JRE and install the old JRE (note that RPM version 4.2.1 or later must be installed on the host):

> rpm -e egojre-8.0.6.0-535958.os_type --dbpath dbpath_location --nodeps

    where os_type is either x86_64 or pcc64le and dbpath_location specifies the path to your database.

> rpm -qa --dbpath dbpath_location | grep egojre

For each previous egojre rpm, run:

> rpm -e egojre_name --dbpath dbpath_location --nodeps

Then, install the old JRE:

> mkdir -p /tmp/extract221

> cws-2.2.1.0_os_type.bin --extract /tmp/extract221

> rpm -ivh --prefix $EGO_TOP --dbpath dbpath_location /tmp/extract221/egojre-*.rpm

    where $EGO_TOP specifies the path to where the cluster is installed, os_type is either x86_64 or pcc64le, and dbpath_location specifies the path to your database.

g.      Optional: In $EGO_TOP/integration/elk/1.4/scripts/common.inc, restore JAVA_HOME to the previous JRE location, for example:

JAVA_HOME= $EGO_TOP/jre/8.0.5.37/linux-os_type

where os_type is either x86_64 or pcc64le.

h.      Source the cluster profile again and start the cluster:

> egosh ego start all

i.        Log in to the cluster management console as the cluster administrator and start the required Spark instance groups.

5.   List of files

egojre-8.0.6.0.x86_64.rpm

egojre-8.0.6.0.ppc64le.rpm

6.   Product notifications

To receive information about product solution and patch updates automatically, subscribe to product notifications on the My Notifications page http://www.ibm.com/support/mynotifications/ on the IBM Support website (http://support.ibm.com). You can edit your subscription settings to choose the types of information you want to get notification about, for example, security bulletins, fixes, troubleshooting, and product enhancements or documentation changes.

7.   Copyright and trademark information

© Copyright IBM Corporation 2020

U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM®, the IBM logo and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.