Readme File for IBM® Platform Symphony 7.1.1 Interim Fix 545444

Readme File for: IBM Platform Symphony

Product Release: 7.1.1

Update Name: Interim Fix 545444

Fix ID: sym-7.1.1-build545444

Publication Date: April 24, 2020

This interim fix enables you to upgrade the IBM WebSphere Liberty Profile in IBM Platform Symphony 7.1.1 to version 20.0.0.3 in order to fix security vulnerability CVE-2019-4720.

Contents

1. List of fixes

2. Download location

3. Product and components affected

4. Installation and configuration

5. Uninstallation

6. List of files

7.  Product notifications

8.  Copyright and trademark information

 

1.   List of fixes

APAR: P103508

2.   Download location

Download interim fix 545444 from the following location https://www.ibm.com/eserver/support/fixes/

3.   Product and components affected

Component name, Platform, Fix ID:

GUI/REST, Linux x86_64, sym-7.1.1-build545444

4.   Installation and configuration

Follow the instructions in this section to download and install this interim fix in your cluster.

System requirements

Linux x86_64

Installing

a.     Log on to the master host as the cluster administrator and stop the WEBGUI and REST services:

> egosh user logon -u Admin -x Admin

> egosh service stop WEBGUI REST

b.     On each management host, replace your current WebSphere Liberty Profile with the files in this interim fix, for example:

> mkdir $EGO_TOP/wlp/20.0.0.3

> tar zxfo pssasetup2015_linux-x86_64_build545444.tar.gz -C $EGO_TOP/wlp/20.0.0.3/

c.      Set WLP_VERSION=20.0.0.3 in the $EGO_CONFDIR/wsm.conf and wsm_rest.conf files.

d.     Back up the existing WebSphere Liberty Profile 8.5.5.5 on all management hosts, for example:

> mkdir /tmp/backup_wlp

> mv $EGO_TOP/wlp/8.5.5.5 /tmp/backup_wlp/

e.     Delete all subdirectories and files from the /rest/workarea, /gui/work and gui/workarea directories:

> rm -rf $EGO_TOP/kernel/rest/workarea/*

> rm -rf $EGO_TOP/gui/work/*

> rm -rf $EGO_TOP/gui/workarea/*

f.       Launch your browser and clear the browser cache.

g.     From the master host, source the environment and start the WEBGUI and REST services:

> source profile.platform

> egosh service start WEBGUI REST

5.   Uninstallation

If required, follow the instructions in this section to uninstall this interim fix from your cluster:

a.     Log on to each management host as the cluster administrator and stop the WEBGUI and REST services:

> source profile.platform

> egosh service stop WEBGUI REST

b.     Log on to each management host as the cluster administrator and restore the WebSphere Liberty Profile 8.5.5.5 from your backup, for example:

> mv /tmp/backup_wlp/8.5.5.5 $EGO_TOP/wlp/

c.      Set WLP_VERSION=8.5.5.5 in the $EGO_CONFDIR/wsm.conf and wsm_rest.conf files.

d.     Delete all subdirectories and files from the /rest/workarea, /gui/work, and gui/workarea directories:

> rm -rf $EGO_TOP/kernel/rest/workarea/*

> rm -rf $EGO_TOP/gui/work/*

> rm -rf $EGO_TOP/gui/workarea/*

e.     Launch your browser and clear the browser cache.

f.       From the master host, source the environment and start the WEBGUI and REST services:

> source profile.platform

> egosh service start WEBGUI REST

6.   List of files

pssasetup2015_linux-x86_64_build545444.tar.gz

7.   Product notifications

To receive information about product solution and patch updates automatically, subscribe to product notifications on the My Notifications page http://www.ibm.com/support/mynotifications/ on the IBM Support website (http://support.ibm.com). You can edit your subscription settings to choose the types of information you want to get notification about, for example, security bulletins, fixes, troubleshooting, and product enhancements or documentation changes.

8.   Copyright and trademark information

© Copyright IBM Corporation 2020

U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM®, the IBM logo, and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.