Readme File
for IBM® Platform Symphony 7.1 Interim Fix 539348
Readme File for: IBM
Platform Symphony
Product Release: 7.1
Fix Pack 1
Update Name: Interim
Fix 539348
Fix ID: sym-7.1-build539348
Publication Date: February
17, 2020
This interim fix enables you to upgrade the IBM Java
Runtime Environment (JRE) in IBM Platform Symphony 7.1 to fix the following
security vulnerabilities in IBM Java SDK: CVE-2019-2989, CVE-2019-2958,
CVE-2019-2975, CVE-2019-2999, CVE-2019-2996, CVE-2019-2992, CVE-2019-2988,
CVE-2019-2983, CVE-2019-2981, CVE-2019-2978, CVE-2019-2973, CVE-2019-2962,
CVE-2019-2964, CVE-2019-2945, CVE-2019-2933, CVE-2019-17631, CVE-2020-2604,
CVE-2020-2593, CVE-2020-2659, CVE-2020-2583, CVE-2019-4732.
Contents
1. List of fixes
2. Download location
3. Product and components affected
4. Installation and configuration
5. Uninstallation
6. List of files
7. Product notifications
8. Copyright and
trademark information
1. List of fixes
APAR: P103402
2. Download location
Download interim fix 539348 from the
following location https://www.ibm.com/eserver/support/fixes/
3. Product and components affected
Component name, Platform, Fix ID:
JRE, Linux x86_64, Windows x86_64,
sym-7.1-build539348
4. Installation and configuration
Follow the
instructions in this section to download and install this interim fix in your
cluster.
System
requirements
o Linux x86_64
o
Windows x86_64
Installing on IBM
Platform Symphony Linux hosts
a.
Log on to the master host as the cluster administrator,
disable your applications, stop services, and shut down the cluster:
> source profile.platform
> egosh user logon -u Admin -x
Admin
> soamcontrol app disable all
> egosh service stop all
> egosh ego shutdown all
b.
Back up the existing JRE folder on all management hosts,
for example:
$EGO_TOP/jre/3.1/linux-x86_64/
c.
On each management host, replace your current JRE folder
with the files in this interim fix, for example:
> source profile.platform
> rm -rf $EGO_TOP/jre/3.1/linux-x86_64/*
> tar zxfo symSetup_jre8sr6fp5_linux-x64_build539348.tar.gz
-C $EGO_TOP/jre/3.1/linux-x86_64
d.
Delete all subdirectories and files in the GUI work
directory:
> rm -rf $EGO_TOP/gui/work/*
e.
Launch your browser and clear the browser cache.
f.
Run the java
-version
command to verify the installation, for example:
> $EGO_TOP/jre/3.1/linux-x86_64/bin/java -version
java version
"1.8.0_241"
Java(TM) SE
Runtime Environment (build 8.0.6.5 - pxa6480sr6fp5-20200111_02(SR6 FP5))
IBM J9 VM (build 2.9,
JRE 1.8.0 Linux amd64-64-Bit Compressed References 20200108_436782 (JIT
enabled, AOT enabled)
OpenJ9 - 7d1059c
OMR - d059105
IBM - c8aee39)
JCL - 20200110_01
based on Oracle jdk8u241-b07
g.
From the master host, start the cluster and enable your
applications:
> source profile.platform
> egosh
ego start all
> soamcontrol
app enable appName
Installing on IBM
Platform Symphony Developer Edition Linux hosts
a.
Log on to each IBM Platform Symphony Developer Edition host,
source the environment, disable all applications, and stop the agent:
> source profile.platform
> soamcontrol app disable all
> soamshutdown
b.
Back up the existing JRE folder, for example:
$SOAM_HOME/jre/linux-x86_64/
c.
Log on to each BM Platform Symphony Developer Edition host
as the administrator and replace your current JRE folder with the files in this
interim fix, for example:
> rm -rf $SOAM_HOME/jre/linux-x86_64/*
> tar zxfo symSetup_jre8sr6fp5_linux-x64_build539348.tar.gz -C $SOAM_HOME/jre/linux-x86_64
d.
Run the java
-version
command to verify the installation, for example:
> $SOAM_HOME/jre/linux-x86_64/bin/java -version
java version "1.8.0_241"
Java(TM) SE
Runtime Environment (build 8.0.6.5 - pxa6480sr6fp5-20200111_02(SR6 FP5))
IBM J9 VM (build 2.9,
JRE 1.8.0 Linux amd64-64-Bit Compressed References 20200108_436782 (JIT
enabled, AOT enabled)
OpenJ9 - 7d1059c
OMR - d059105
IBM -
c8aee39)
JCL - 20200110_01
based on Oracle jdk8u241-b07
e.
Start the agent and enable applications:
> soamstartup
&
> soamcontrol
app enable <appName>
Installing on IBM
Platform Symphony Developer Edition Windows hosts
a.
Log on to each BM Platform Symphony Developer Edition host,
disable all applications, and stop the agent:
> soamcontrol app disable all
> soamshutdown
b.
Back up the existing JRE folder, for example:
%SOAM_HOME%\jre
c.
Log on to each BM Platform Symphony Developer Edition host
as the administrator and replace your current JRE folder with the files in this
interim fix. For example, delete all files under %SOAM_HOME%\jre, and decompress the symSetup_jre8sr6fp5_win-x64_build539348.zip package under it.
d.
Run the java
-version
command to verify the installation, for example:
> %SOAM_HOME%\jre\bin\java -version
java version "1.8.0_241"
Java(TM)
SE Runtime Environment (build 8.0.6.5 - pwa6480sr6fp5-20200111_02(SR6 FP5))
IBM J9 VM (build 2.9, JRE 1.8.0 Windows Server 2012 R2
amd64-64-Bit Compressed References 20200108_436782 (JIT enabled, AOT enabled)
OpenJ9 - 7d1059c
OMR - d059105
IBM - c8aee39)
JCL - 20200110_01 based on Oracle jdk8u241-b07
e.
Start the agent and enable applications:
> soamstartup
> soamcontrol
app enable <appName>
5.
Uninstallation
If required, follow the
instructions in this section to uninstall this interim fix from your
cluster:
Uninstalling from
IBM Platform Symphony Linux hosts
a.
Log on to each management host as the cluster
administrator, disable your applications, stop services, and shut down the
cluster:
> source profile.platform
> soamcontrol app disable all
> egosh service stop all
> egosh ego shutdown all
b.
Log on to each management host as the cluster administrator
and restore the JRE folder from your backup, for example:
$EGO_TOP/jre/3.1/linux-x86_64/
c.
Delete all subdirectories and files in the GUI work
directory:
> rm -rf $EGO_TOP/gui/work/*
d.
Launch your browser and clear the browser cache.
e.
From the master host, start the cluster and enable your
applications:
> source profile.platform
> egosh
ego start all
> soamcontrol
app enable appName
Uninstalling from
IBM Platform Symphony Developer Edition Linux hosts
a.
Log on to each BM Platform Symphony Developer Edition host
as the administrator, source the environment, disable all applications, and
stop the agent:
> source profile.platform
> soamcontrol app disable all
> soamshutdown
b.
Restore the JRE folder from your backup, for example:
$SOAM_HOME/jre/linux-x86_64/
c.
Start the agent and enable applications:
> soamstartup
&
> soamcontrol
app enable appName
Uninstalling from
IBM Platform Symphony Developer Edition Windows hosts
a.
Log on to each BM Platform Symphony Developer Edition host
as the administrator, disable all applications, and stop the agent:
> soamcontrol
app disable all
> soamshutdown
b.
Restore the JRE folder from your backup, for example:
%SOAM_HOME%\jre.
c.
Start the agent and enable applications:
> soamstartup
> soamcontrol
app enable appName
6. List of files
symSetup_jre8sr6fp5_linux-x64_build539348.tar.gz
symSetup_jre8sr6fp5_win-x64_build539348.zip
7. Product notifications
To receive information about product
solution and patch updates automatically, subscribe to product notifications on
the My Notifications page http://www.ibm.com/support/mynotifications/
on the IBM Support website (http://support.ibm.com). You can edit your
subscription settings to choose the types of information you want to get
notification about, for example, security bulletins, fixes, troubleshooting,
and product enhancements or documentation changes.
8. Copyright and trademark information
© Copyright IBM Corporation 2020
U.S. Government Users Restricted Rights - Use, duplication or disclosure
restricted by GSA ADP Schedule Contract with IBM Corp.
IBM®, the IBM logo, and ibm.com® are trademarks of International
Business Machines Corp., registered in many jurisdictions worldwide. Other
product and service names might be trademarks of IBM or other companies. A
current list of IBM trademarks is available on the Web at "Copyright and
trademark information" at www.ibm.com/legal/copytrade.shtml.