Interim Fix 556785 for IBM Spectrum Symphony 7.2.1

Readme File for IBM^® Spectrum Symphony 7.2.1 Interim Fix 556785

Readme file for: IBM Spectrum Symphony

Product Release: 7.2.1

Update Name: Interim Fix 556785

Fix ID: sym-7.2.1-build556785

Publication date: September 8, 2020

This interim fix provides instructions on upgrading Apache Ant to 1.10.8 in IBM Spectrum Symphony 7.2.1 to address security vulnerability CVE-2020-1945.

Contents

1. List of fixes

2. Download location

3. Product and components affected

4. Installation and configuration

5. Uninstallation

6. List of files

7. Product notifications

8. Copyright and trademark information

1. List of fixes

APAR: P103838

2. Download location

Download interim fix 556785 from the following location: http://www.ibm.com/eserver/support/fixes/

3. Product and components affected

Component name, Platform, Fix ID:

PMC/PERF/REST, Linux x86_64, sym-7.2.1-build556785

4. Installation and configuration

Follow the instructions in this section to download and install this interim fix to your cluster.

System requirements

Linux x86_64

Your Linux host must include the “ed” Linux line-oriented text editor.

Installation

a. Log on to the primary host as the cluster administrator and stop the WEBGUI, REST, purger, and plc services:

> source profile.platform

> egosh user logon -u Admin -x Admin

> egosh service stop WEBGUI REST purger plc

b. On each management host (or just one host if you are using a shared file system), download the egomgmt-3.7.0_noarch_build556785.tar.gz and egorest-3.7.0_noarch_build556785.tar.gz packages to, for example, the /symfixes directory.

c. On each management host (or just one host if you are using a shared file system), run the egoinstallfixes command to install the egomgmt-3.7.0_noarch_build556785.tar.gz and egorest-3.7.0_noarch_build556785.tar.gz packages:

> egoinstallfixes /symfixes/egomgmt-3.7.0_noarch_build556785.tar.gz

> egoinstallfixes /symfixes/egorest-3.7.0_noarch_build556785.tar.gz

Note: The egoinstallfixes command automatically backs up the current binary files to a fix backup directory for recovery purposes. Do not delete this backup directory; you will need it if you want to recover the original files. For more information on using this command, see the egoinstallfixes command reference.

d. Delete all subdirectories and files in the following directories:

> rm -rf $EGO_TOP/gui/work/*

> rm -rf $EGO_TOP/gui/workarea/*

> rm -rf $EGO_TOP/kernel/rest/workarea/*

Note: If you configured the WLP_OUTPUT_DIR parameter and APPEND_HOSTNAME_TO_WLP_OUTPUT_DIR is set to true in the $EGO_CONFDIR/conf/wlp.conf file, you must clean up the $WLP_OUTPUT_DIR/webgui_hostname/gui/workarea/ directory.

e. Launch your browser and clear the browser cache.

f. Run the pversions command to verify the installation:

> pversions -b 556785

IBM Spectrum egorest 3.7.0.0

----------------------------

binary type: noarch, Aug 27 2020, Build 556785

installed: Sep 03 2020

notes:

fixes: P103838

files: /wlp/usr/servers/rest/apps/3.7/deploymentrest/WEB-INF/lib/ant-1.10.8.jar

IBM Spectrum egomgmt 3.7.0.0

----------------------------

binary type: noarch, Aug 27 2020, Build 556785

installed: Sep 03 2020

notes:

fixes: P103838

files: /perf/3.7/lib/ant-1.10.8.jar

g. From the primary host, start the WEBGUI, REST, purger, and plc services:

> source profile.platform

> egosh service start WEBGUI REST purger plc

5. Uninstallation

If required, follow the instructions in this section to uninstall this interim fix from your cluster:

a. Log on to the primary host as the cluster administrator and stop the WEBGUI, REST, purger, and plc services:

> source profile.platform

> egosh user logon -u Admin -x Admin

> egosh service stop WEBGUI REST purger plc

b. On each management host (or just one host if you are using a shared file system), roll back this interim fix:

> egoinstallfixes -r 556785

c. Delete all subdirectories and files in the following directories:

> rm -rf $EGO_TOP/gui/work/*

> rm -rf $EGO_TOP/gui/workarea/*

> rm -rf $EGO_TOP/kernel/rest/workarea/*

d. Launch your browser and clear the browser cache.

e. From the primary host, start the WEBGUI, REST, purger, and plc services:

> source profile.platform

> egosh service start WEBGUI REST purger plc

6. List of files

4492182f592ad9779a5de60e3f0ea3c4 perf/3.7/lib/ant-1.10.8.jar

4492182f592ad9779a5de60e3f0ea3c4 wlp/usr/servers/rest/apps/3.7/deploymentrest/WEB-INF/lib/ant-1.10.8.jar

7. Product notifications

To receive information about product solution and patch updates automatically, subscribe to product notifications on the My Notifications page http://www.ibm.com/support/mynotifications/ on the IBM Support website (http://support.ibm.com). You can edit your subscription settings to choose the types of information you want to get notification about, for example, security bulletins, fixes, troubleshooting, and product enhancements or documentation changes.

8. Copyright and trademark information

U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM®, the IBM logo, and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.