This fix resolves the CVE-2019-0230 issue.

Readme documentation for IBM Spectrum LSF Suite V10.2.0 Fix including installation-related instructions, prerequisites and co-requisites, and list of fixes.
This fix resolves the following issue:
An issue is detected on web GUI components. For more details, refer to CVE-2019-0230.

Readme file for: IBM® Spectrum LSF Suite
Product/Component Release: 10.2.0.9
Update Name: Fix 600726
Fix ID: Suite-10.2.0.9-build600726
Publication date: Oct. 12, 2021
Last modified date: Oct. 12, 2021

• List of fixes
• Download location
• Product notifications
• Products or components affected
• System requirements
• Installation and configuration
• Uninstallation
• List of files
• Copyright and trademark information

• List of fixes
  

  P104384

• Download location

  Download from the following location: http://www.ibm.com/eserver/support/fixes/

• Product notifications:

  To receive information about product solution and patch updates automatically, subscribe to product notifications on the My notifications page http://www.ibm.com/support/mynotifications/ on the IBM Support website (http://support.ibm.com). You can edit your subscription settings to choose the types of information you want to get notification about, for example, security bulletins, fixes, troubleshooting, and product enhancements or documentation changes.

• Products or components affected

  Application Center Server

• System requirements
  • Linux-x86_64
  • PPC64LE
• Installation and configuration
  • The following steps assume that IBM Spectrum LSF Suite is installed in /opt/ibm. Replace with your actual installation directory.
    
  • 6.1  Before installation
    • Log on to the IBM Spectrum LSF Application Center Server host as root.
      
    • Set your IBM Spectrum LSF Application Center environment.
      For csh or tcsh:
      % source /opt/ibm/lsfsuite/ext/cshrc.platform
      For sh, ksh, or bash:
      $ . /opt/ibm/lsfsuite/ext/profile.platform
    • Determine the location of your existing IBM Spectrum LSF Application Center installation.
      #rpm -q --queryformat "%{INSTPREFIXES}\n" lsf-appcenter
    • Stop all IBM Spectrum LSF Application Center services.
      pmcadmin stop;perfadmin stop all
      
    • Back up your existing installation.
      For example:
      #cp -rfp /opt/ibm /opt/ibm.bak
  • 6.2  Installation steps for IBM Spectrum LSF Suite V10.2.0.
    

    Note: 1. This patch is only for LSF Suite V10.2.0. If you are using other versions, you must first migrate to V10.2.0 before applying this patch. 2. User should install this patch on every IBM Spectrum LSF Application Center Servers.
    

    • As root, log on to your IBM Spectrum LSF Suite 10.2 host.
    • Run suite10.2.0.9-build600726-${ARCH}.bin. Where ${ARCH} is x86_64 or ppc64le
      ./suite10.2.0.9-build600726-${ARCH}.bin
    • Follow the instructions to install the patch.
• Uninstallation
  • 7.1  Before uninstallation

    Stop all IBM Spectrum LSF Application Center Server services:

    pmcadmin stop;perfadmin stop all
    
  • 7.2  Roll back the fix

    The following steps assume that IBM Spectrum LSF Suite is installed in the /opt/ibm directory.
    Replace this with your actual installation directory.

    • Determine the location of your existing IBM Spectrum LSF Application Center Server installation.
      #rpm -q --queryformat "%{INSTPREFIXES}\n" lsf-appcenter
      
    • Reinstall /var/www/html/lsf_suite_pkgs/${ARCH}/lsf-appcenter-10.2.0.9-19111812.${ARCH}.rpm on IBM Spectrum LSF Application Center Server host.
    • Start IBM Spectrum LSF Application Center Server
      perfadmin start all;pmcadmin start
    • Clear your browser cache before logging into IBM Spectrum LSF Suite.
      This is required on every browser that will access IBM Spectrum LSF Suite. Otherwise, IBM Spectrum LSF Suite will not work properly.
• List of files
  

  $PMC_TOP/gui/3.0/wlp/usr/servers/platform/apps/platform.war/WEB-INF/lib/struts2-core-2.5.26.jar

  $PMC_TOP/gui/3.0/wlp/usr/servers/platform/apps/platform.war/WEB-INF/lib/struts2-json-plugin-2.5.26.jar

  $PMC_TOP/gui/3.0/wlp/usr/servers/platform/apps/platform.war/WEB-INF/lib/struts2-spring-plugin-2.5.26.jar

• Copyright and trademark information

  ©Copyright IBM Corporation 2021
  
  U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.
  
  IBM®, the IBM logo and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at http://www.ibm.com/legal/copytrade.shtml