Readme File for IBM^® Spectrum Symphony 7.2.1 Interim Fix 600321

Readme File for: IBM Spectrum Symphony

Product Release: 7.2.1

Update Name: Interim Fix 600321

Fix ID: sym-7.2.1-build600321

Publication Date: April 9, 2021

This interim fix enables you to upgrade the IBM Java Runtime Environment (JRE) in IBM Spectrum Symphony 7.2.1 to fix the following security vulnerabilities in the IBM Java SDK: CVE-2020-14781, CVE-2020-14803, CVE-2020-27221, and CVE-2020-2773.

Contents

1. List of fixes

2. Download location

3. Product and components affected

4. Installation and configuration

5. Uninstallation

6. List of files

7.  Product notifications

8.  Copyright and trademark information

 

1.   List of fixes

APAR: P104158

2.   Download location

Download interim fix 600321 from the following location https://www.ibm.com/eserver/support/fixes/

3.   Product and components affected

Component name, Platform, Fix ID:

JRE, Linux x86_64/Windows x86_64, sym-7.2.1-build600321

4.   Installation and configuration

Follow the instructions in this section to download and install this interim fix to your cluster.

System requirements

o   Linux x86_64

o   Windows x86_64

Prerequisite

To install or uninstall the .rpm packages for IBM Spectrum Symphony 7.2.1, you must have root permission and RPM version 4.2.1 or later installed on the host.

Installing on IBM Spectrum Symphony Linux management hosts

a.     Log on to the primary host as the cluster administrator, disable your applications, stop services, and shut down the cluster:

> source profile.platform

> egosh user logon -u Admin -x Admin

> soamcontrol app disable all

> egosh service stop all

> egosh ego shutdown all

b.     Uninstall the existing JRE on all management hosts, for example:

> rpm -qa --dbpath /tmp/rpm | grep egojre

> rpm -e egojre-8.0.5.16-494167.x86_64 --dbpath /tmp/rpm --nodeps

c.      Log on to each management host as the cluster administrator and source the environment.

> source profile.platform

d.     On each management host, install this interim fix, use the same prefix and dbpath as used for the cluster installation, for example:

> rpm –ivh egojre-8.0.6.26.x86_64.rpm --prefix /opt/platform --dbpath /tmp/rpm

e.     Delete all subdirectories and files in the GUI work directory:

> rm -rf $EGO_TOP/gui/work/*

> rm -rf $EGO_TOP/gui/workarea/*

Note: If you configured the WLP_OUTPUT_DIR parameter and APPEND_HOSTNAME_TO_WLP_OUTPUT_DIR is set to true in the $EGO_CONFDIR/wlp.conf file, you must clean up the $WLP_OUTPUT_DIR/webgui_hostname/gui/workarea/ directory.

f.       Launch your browser and clear the browser cache.

g.     Run the rpm -qa command to verify the installation, for example:

> rpm -qa --dbpath /tmp/rpm | grep egojre

egojre-8.0.6.26-600321.x86_64

h.     From the primary host, start the cluster, and enable your applications:

> source profile.platform

> egosh ego start all

> soamcontrol app enable <appName>

Installing on IBM Spectrum Symphony Linux hosts with the multicluster feature

a.      Log on to the primary host as the cluster administrator and source the environment, stop services, and shut down the cluster:

> source profile.platform

> egosh service stop all

> egosh ego shutdown all

b.     Back up the existing JRE folder on all management hosts, for example:

$EGO_TOP/jre/3.7/linux-x86_64/

c.      On each management host, replace your current JRE folder with the files in this interim fix, for example:

> source profile.platform

> rm -rf $EGO_TOP/jre/3.7/linux-x86_64/*

> tar zxfo symSetup_jre8sr6fp26_linux-x64_build600321.tar.gz -C $EGO_TOP/jre/3.7/linux-x86_64

d.     Delete all subdirectories and files in the GUI work directory:

> rm -rf $EGO_TOP/gui/work/*

> rm -rf $EGO_TOP/gui/workarea/*

Note: If you configured the WLP_OUTPUT_DIR parameter and APPEND_HOSTNAME_TO_WLP_OUTPUT_DIR is set to true in the $EGO_CONFDIR/wlp.conf file, you must clean up the $WLP_OUTPUT_DIR/webgui_hostname/gui/workarea/ directory.

e.     Launch your browser and clear the browser cache.

f.       Run the java -version command to verify the installation, for example:

> $EGO_TOP/jre/3.7/linux-x86_64/bin/java -version

java version "1.8.0_281"

Java(TM) SE Runtime Environment (build 8.0.6.26 - pxa6480sr6fp26-20210216_01(SR6 FP26))

IBM J9 VM (build 2.9, JRE 1.8.0 Linux amd64-64-Bit Compressed References 20210216_465732 (JIT enabled, AOT enabled)

OpenJ9   - e5f4f96

OMR      - 999051a

IBM      - 358762e)

JCL - 20210108_01 based on Oracle jdk8u281-b09

g.     From the primary host, source the environment and start the cluster:

> source profile.platform

> egosh ego start all

Installing on IBM Spectrum Symphony Developer Edition Linux hosts

a.      Log on to each IBM Spectrum Symphony Developer Edition host, source the environment, disable all applications, and stop the agent:

> source profile.platform

> soamcontrol app disable all

> soamshutdown

b.      Back up the existing JRE folder, for example:

$SOAM_HOME/jre/linux-x86_64/

c.      Log on to each IBM Spectrum Symphony Developer Edition host as the administrator and replace your current JRE folder with the files in this interim fix, for example:

> rm -rf $SOAM_HOME/jre/linux-x86_64/*

> tar zxfo symSetup_jre8sr6fp26_linux-x64_build600321.tar.gz -C $SOAM_HOME/jre/linux-x86_64

d.     Run the java -version command to verify the installation, for example:

> $SOAM_HOME/jre/linux-x86_64/bin/java -version

java version "1.8.0_281"

Java(TM) SE Runtime Environment (build 8.0.6.26 - pxa6480sr6fp26-20210216_01(SR6 FP26))

IBM J9 VM (build 2.9, JRE 1.8.0 Linux amd64-64-Bit Compressed References 20210216_465732 (JIT enabled, AOT enabled)

OpenJ9   - e5f4f96

OMR      - 999051a

IBM      - 358762e)

JCL - 20210108_01 based on Oracle jdk8u281-b09

e.      Start the agent and enable applications:

> soamstartup &

> soamcontrol app enable <appName>

Installing on IBM Spectrum Symphony Developer Edition Windows hosts

a.      Log on to each IBM Spectrum Symphony Developer Edition host, disable all applications, and stop the agent:

> soamcontrol app disable all

> echo .| soamshutdown

b.      Back up the existing JRE folder, for example:

%SOAM_HOME%\jre

c.      Log on to each  IBM Spectrum Symphony Developer Edition  host as the administrator and replace your current JRE folder with the files in this interim fix. For example, delete all files under %SOAM_HOME%\jre, and decompress the symSetup_jre8sr6fp26_win-x64_build600321.zip package under it.

d.     Run the java -version command to verify the installation, for example:

> %SOAM_HOME%\jre\bin\java -version

java version "1.8.0_281"

Java(TM) SE Runtime Environment (build 8.0.6.26 - pwa6480sr6fp26-20210216_01(SR6 FP26))

IBM J9 VM (build 2.9, JRE 1.8.0 Windows Server 2012 R2 amd64-64-Bit Compressed References 20210216_465732 (JIT enabled,

AOT enabled)

OpenJ9   - e5f4f96

OMR      - 999051a

IBM      - 358762e)

JCL - 20210108_01 based on Oracle jdk8u281-b09

e.     Start the agent and enable applications:

> echo .| soamstartup

> soamcontrol app enable <appName>

5.   Uninstallation

If required, follow the instructions in this section to uninstall this interim fix from your cluster:

Uninstalling from IBM Spectrum Symphony Linux management hosts

a.     Log on to the primary host as the cluster administrator, disable your applications, stop services and shut down the cluster:

> source profile.platform

> soamcontrol app disable all

> egosh service stop all

> egosh ego shutdown all

b.     Log on to each management host as the cluster administrator and reinstall the old JRE package, use the same prefix and dbpath as used for the cluster installation, for example:

> rpm -e egojre-8.0.6.26-600321.x86_64 --dbpath /tmp/rpm/ --nodeps

> sym-7.2.1.0_x86_64.bin --extract /opt/extract

> rpm -ivh /opt/extract/egojre-8.0.5.16.x86_64.rpm --prefix /opt/platform --dbpath /tmp/rpm

c.      Delete all subdirectories and files in the GUI work directory:

> rm -rf $EGO_TOP/gui/work/*

> rm -rf $EGO_TOP/gui/workarea/*

Note: If you configured the WLP_OUTPUT_DIR parameter and APPEND_HOSTNAME_TO_WLP_OUTPUT_DIR is set to true in the $EGO_CONFDIR/wlp.conf file, you must clean up the $WLP_OUTPUT_DIR/webgui_hostname/gui/workarea/ directory.

d.     Launch your browser and clear the browser cache.

e.     From the primary host, start the cluster and enable your applications:

> source profile.platform

> egosh ego start all

> soamcontrol app enable <appName>

Uninstalling from IBM Spectrum Symphony Linux hosts with the multicluster feature

a.      Log on to the primary host as the cluster administrator, stop services, and shut down the cluster:

> source profile.platform

> egosh service stop all

> egosh ego shutdown all

b.     Log on to each management host as the cluster administrator and restore the JRE folder from your backup, for example:

$EGO_TOP/jre/3.7/linux-x86_64/

c.      Delete all subdirectories and files in the GUI work directory:

> rm -rf $EGO_TOP/gui/work/*

> rm -rf $EGO_TOP/gui/workarea/*

Note: If you configured the WLP_OUTPUT_DIR parameter and APPEND_HOSTNAME_TO_WLP_OUTPUT_DIR is set to true in the $EGO_CONFDIR/wlp.conf file, you must clean up the $WLP_OUTPUT_DIR/webgui_hostname/gui/workarea/ directory.

d.      Launch your browser and clear the browser cache.

e.      From the primary host, source the environment and start the cluster:

> source profile.platform

> egosh ego start all

Uninstalling from IBM Spectrum Symphony Developer Edition Linux hosts

a.      Log on to each IBM Spectrum Symphony Developer Edition host as the administrator and stop the agent:

> source profile.platform

> soamcontrol app disable all

> soamshutdown

b.      Restore the JRE folder from your backup, for example:

$SOAM_HOME/jre/linux-x86_64/

c.      Start the agent and enable applications:

> soamstartup &

> soamcontrol app enable <appName>

Uninstalling from IBM Spectrum Symphony Developer Edition Windows hosts

a.      Log on to each IBM Spectrum Symphony Developer Edition host as the administrator, disable all applications, and stop the agent:

> soamcontrol app disable all

> echo .| soamshutdown

b.      Restore the JRE folder from your backup, for example:

%SOAM_HOME%\jre

c.      Start the agent and enable applications:

> echo .| soamstartup

> soamcontrol app enable <appName>

6.   List of files

symSetup_jre8sr6fp26_linux-x64_build600321.tar.gz

symSetup_jre8sr6fp26_win-x64_build600321.zip

egojre-8.0.6.26.x86_64.rpm

7.   Product notifications

To receive information about product solution and patch updates automatically, subscribe to product notifications on the My Notifications page http://www.ibm.com/support/mynotifications/ on the IBM Support website (http://support.ibm.com). You can edit your subscription settings to choose the types of information you want to get notification about, for example, security bulletins, fixes, troubleshooting, and product enhancements or documentation changes.

8.   Copyright and trademark information

© Copyright IBM Corporation 2021

U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM®, the IBM logo, and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.