Readme_BUILD600946

IBM Spectrum LSF 10.1 Fix 600946 Readme File

Abstract

P104515. This patch resolves the Log4J CVE-2021-44228 isssues in the LSF resource connector.

Description

Readme documentation for IBM® Spectrum LSF 10.1 Fix 600946 including installation-related instructions, prerequisites and co-requisites, and list of fixes.

This fix addresses the following issues:

This patch updates log4j to 2.17.1, which resolves the Log4J CVE-2021-44228 issues in the LSF resource connector.

NOTE: The CVE-2021-44228 issue affects LSF only if LSF resource connector is enabled.

Readme File for: IBM® Spectrum LSF

Product/Component Release: 10.1

Update Name: Fix 600946

Fix ID: LSF-10.1-build600946

Publication Date: January 15, 2022

Last Modified Date: January 15, 2022

Contents

1. List of Fixes

2. Download Location

3. Product or Components Affected

4. System Requirements

5. Installation and Configuration

6. List of Files

7. Product Notifications

8. Copyright and Trademark Information

1. List of Fixes

P104515

2. Download Locations

Download Fix 600946 from the following location: http://www.ibm.com/eserver/support/fixes/

3. Product or Components Affected

Affected product or components include:

resource_connector/aws/lib/aws-java-sdk-core-1.11.699.jar
resource_connector/aws/lib/aws-java-sdk-ec2-1.11.699.jar
resource_connector/aws/lib/jmespath-java-1.11.699.jar
resource_connector/aws/lib/jackson-annotations-2.12.4.jar
resource_connector/aws/lib/jackson-core-2.12.4.jar
resource_connector/aws/lib/jackson-databind-2.12.4.jar
resource_connector/aws/lib/jackson-dataformat-cbor-2.12.4.jar
resource_connector/aws/lib/commons-beanutils-1.9.4.jar
resource_connector/aws/lib/commons-codec-1.14.jar
resource_connector/aws/lib/commons-collections-3.2.2.jar
resource_connector/aws/lib/commons-lang-2.6.jar
resource_connector/aws/lib/commons-logging-1.2.jar
resource_connector/aws/lib/joda-time-2.9.9.jar
resource_connector/aws/lib/ezmorph-1.0.6.jar
resource_connector/aws/lib/json-lib-2.2.3-jdk15.jar
resource_connector/aws/lib/httpclient-4.5.13.jar
resource_connector/aws/lib/httpcore-4.4.13.jar
resource_connector/aws/lib/log4j-api-2.17.1.jar
resource_connector/aws/lib/log4j-core-2.17.1.jar
resource_connector/aws/lib/ion-java-1.0.2.jar
resource_connector/aws/lib/AwsTool.jar
resource_connector/azure/lib/jackson-annotations-2.12.4.jar
resource_connector/azure/lib/jackson-core-2.12.4.jar
resource_connector/azure/lib/jackson-databind-2.12.4.jar
resource_connector/azure/lib/jackson-datatype-joda-2.12.4.jar
resource_connector/azure/lib/gson-2.2.4.jar
resource_connector/azure/lib/guava-20.0.jar
resource_connector/azure/lib/adal4j-1.1.2.jar
resource_connector/azure/lib/azure-1.0.0.jar
resource_connector/azure/lib/azure-annotations-1.0.0.jar
resource_connector/azure/lib/azure-client-authentication-1.0.4.jar
resource_connector/azure/lib/azure-client-runtime-1.0.4.jar
resource_connector/azure/lib/azure-mgmt-appservice-1.0.0.jar
resource_connector/azure/lib/azure-mgmt-batch-1.0.0.jar
resource_connector/azure/lib/azure-mgmt-cdn-1.0.0.jar
resource_connector/azure/lib/azure-mgmt-compute-1.0.0.jar
resource_connector/azure/lib/azure-mgmt-dns-1.0.0.jar
resource_connector/azure/lib/azure-mgmt-graph-rbac-1.0.0.jar
resource_connector/azure/lib/azure-mgmt-keyvault-1.0.0.jar
resource_connector/azure/lib/azure-mgmt-network-1.0.0.jar
resource_connector/azure/lib/azure-mgmt-redis-1.0.0.jar
resource_connector/azure/lib/azure-mgmt-resources-1.0.0.jar
resource_connector/azure/lib/azure-mgmt-servicebus-1.0.0.jar
resource_connector/azure/lib/azure-mgmt-sql-1.0.0.jar
resource_connector/azure/lib/azure-mgmt-storage-1.0.0.jar
resource_connector/azure/lib/azure-mgmt-trafficmanager-1.0.0.jar
resource_connector/azure/lib/client-runtime-1.0.4.jar
resource_connector/azure/lib/lang-tag-1.4.jar
resource_connector/azure/lib/nimbus-jose-jwt-8.17.jar
resource_connector/azure/lib/oauth2-oidc-sdk-4.5.jar
resource_connector/azure/lib/logging-interceptor-3.14.9.jar
resource_connector/azure/lib/okhttp-3.14.9.jar
resource_connector/azure/lib/okhttp-urlconnection-3.14.9.jar
resource_connector/azure/lib/okio-1.17.2.jar
resource_connector/azure/lib/adapter-rxjava-2.1.0.jar
resource_connector/azure/lib/converter-jackson-2.1.0.jar
resource_connector/azure/lib/retrofit-2.9.0.jar
resource_connector/azure/lib/commons-beanutils-1.9.4.jar
resource_connector/azure/lib/commons-codec-1.14.jar
resource_connector/azure/lib/commons-collections-3.2.2.jar
resource_connector/azure/lib/commons-lang-2.6.jar
resource_connector/azure/lib/commons-logging-1.2.jar
resource_connector/azure/lib/rxjava-1.2.4.jar
resource_connector/azure/lib/activation-1.1.jar
resource_connector/azure/lib/mail-1.4.7.jar
resource_connector/azure/lib/joda-time-2.10.8.jar
resource_connector/azure/lib/jcip-annotations-1.0.jar
resource_connector/azure/lib/accessors-smart-1.2.jar
resource_connector/azure/lib/json-smart-2.3.jar
resource_connector/azure/lib/ezmorph-1.0.6.jar
resource_connector/azure/lib/json-lib-2.2.3-jdk15.jar
resource_connector/azure/lib/commons-lang3-3.4.jar
resource_connector/azure/lib/log4j-api-2.17.1.jar
resource_connector/azure/lib/log4j-core-2.17.1.jar
resource_connector/azure/lib/asm-5.0.4.jar
resource_connector/azure/lib/slf4j-api-1.7.22.jar
resource_connector/azure/lib/slf4j-simple-1.7.5.jar
resource_connector/azure/lib/AzureTool.jar
resource_connector/cyclecloud/lib/jackson-annotations-2.12.4.jar
resource_connector/cyclecloud/lib/jackson-core-2.12.4.jar
resource_connector/cyclecloud/lib/jackson-databind-2.12.4.jar
resource_connector/cyclecloud/lib/okhttp-3.14.1.jar
resource_connector/cyclecloud/lib/okio-1.17.2.jar
resource_connector/cyclecloud/lib/commons-collections-3.2.2.jar
resource_connector/cyclecloud/lib/commons-io-2.11.0.jar
resource_connector/cyclecloud/lib/commons-lang-2.6.jar
resource_connector/cyclecloud/lib/log4j-api-2.17.1.jar
resource_connector/cyclecloud/lib/log4j-core-2.17.1.jar
resource_connector/cyclecloud/lib/CycleCloudTool.jar
resource_connector/google/lib/jackson-annotations-2.12.4.jar
resource_connector/google/lib/jackson-core-2.12.4.jar
resource_connector/google/lib/jackson-databind-2.12.4.jar
resource_connector/google/lib/google-api-client-1.31.1.jar
resource_connector/google/lib/google-api-services-compute-v1-rev20210301-1.31.0.jar
resource_connector/google/lib/google-auth-library-credentials-0.22.1.jar
resource_connector/google/lib/google-auth-library-oauth2-http-0.22.1.jar
resource_connector/google/lib/auto-value-annotations-1.7.4.jar
resource_connector/google/lib/jsr305-3.0.2.jar
resource_connector/google/lib/error_prone_annotations-2.3.4.jar
resource_connector/google/lib/failureaccess-1.0.1.jar
resource_connector/google/lib/guava-30.0-android.jar
resource_connector/google/lib/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar
resource_connector/google/lib/google-http-client-1.38.0.jar
resource_connector/google/lib/google-http-client-apache-v2-1.38.0.jar
resource_connector/google/lib/google-http-client-jackson2-1.38.0.jar
resource_connector/google/lib/j2objc-annotations-1.3.jar
resource_connector/google/lib/google-oauth-client-1.31.2.jar
resource_connector/google/lib/commons-beanutils-1.9.4.jar
resource_connector/google/lib/commons-codec-1.14.jar
resource_connector/google/lib/commons-collections-3.2.2.jar
resource_connector/google/lib/commons-lang-2.6.jar
resource_connector/google/lib/commons-logging-1.2.jar
resource_connector/google/lib/grpc-context-1.22.1.jar
resource_connector/google/lib/opencensus-api-0.24.0.jar
resource_connector/google/lib/opencensus-contrib-http-util-0.24.0.jar
resource_connector/google/lib/ezmorph-1.0.6.jar
resource_connector/google/lib/json-lib-2.2.3-jdk15.jar
resource_connector/google/lib/httpclient-4.5.13.jar
resource_connector/google/lib/httpcore-4.4.13.jar
resource_connector/google/lib/log4j-api-2.17.1.jar
resource_connector/google/lib/log4j-core-2.17.1.jar
resource_connector/google/lib/checker-compat-qual-2.5.5.jar
resource_connector/google/lib/GcloudTool.jar
resource_connector/openshift/lib/jackson-annotations-2.12.4.jar
resource_connector/openshift/lib/jackson-core-2.12.4.jar
resource_connector/openshift/lib/jackson-databind-2.12.4.jar
resource_connector/openshift/lib/jsr305-3.0.2.jar
resource_connector/openshift/lib/gson-2.8.0.jar
resource_connector/openshift/lib/error_prone_annotations-2.1.3.jar
resource_connector/openshift/lib/guava-25.1-jre.jar
resource_connector/openshift/lib/j2objc-annotations-1.1.jar
resource_connector/openshift/lib/protobuf-java-3.4.0.jar
resource_connector/openshift/lib/logging-interceptor-3.14.3.jar
resource_connector/openshift/lib/okhttp-3.14.3.jar
resource_connector/openshift/lib/okio-1.17.2.jar
resource_connector/openshift/lib/commons-beanutils-1.9.4.jar
resource_connector/openshift/lib/commons-codec-1.14.jar
resource_connector/openshift/lib/commons-collections-3.2.2.jar
resource_connector/openshift/lib/commons-lang-2.6.jar
resource_connector/openshift/lib/commons-logging-1.2.jar
resource_connector/openshift/lib/gson-fire-1.8.3.jar
resource_connector/openshift/lib/client-java-8.0.0.jar
resource_connector/openshift/lib/client-java-api-8.0.0.jar
resource_connector/openshift/lib/client-java-proto-8.0.0.jar
resource_connector/openshift/lib/builder-annotations-0.21.0.jar
resource_connector/openshift/lib/resourcecify-annotations-0.21.0.jar
resource_connector/openshift/lib/sundr-codegen-0.21.0.jar
resource_connector/openshift/lib/sundr-core-0.21.0.jar
resource_connector/openshift/lib/swagger-annotations-1.5.22.jar
resource_connector/openshift/lib/javax.annotation-api-1.3.2.jar
resource_connector/openshift/lib/joda-time-2.9.3.jar
resource_connector/openshift/lib/ezmorph-1.0.6.jar
resource_connector/openshift/lib/json-lib-2.2.3-jdk15.jar
resource_connector/openshift/lib/commons-collections4-4.1.jar
resource_connector/openshift/lib/commons-compress-1.19.jar
resource_connector/openshift/lib/commons-lang3-3.7.jar
resource_connector/openshift/lib/log4j-api-2.17.1.jar
resource_connector/openshift/lib/log4j-core-2.17.1.jar
resource_connector/openshift/lib/log4j-slf4j-impl-2.17.1.jar
resource_connector/openshift/lib/jose4j-0.7.0.jar
resource_connector/openshift/lib/bcpkix-jdk15on-1.61.jar
resource_connector/openshift/lib/bcprov-ext-jdk15on-1.61.jar
resource_connector/openshift/lib/bcprov-jdk15on-1.61.jar
resource_connector/openshift/lib/checker-qual-2.0.0.jar
resource_connector/openshift/lib/animal-sniffer-annotations-1.14.jar
resource_connector/openshift/lib/joda-convert-1.2.jar
resource_connector/openshift/lib/slf4j-api-1.7.25.jar
resource_connector/openshift/lib/snakeyaml-1.25.jar
resource_connector/openshift/lib/ocTool.jar

4. System Requirements

linux2.6-glibc2.3-x86_64

linux3.10-glibc2.17-x86_64

linux3.10-glibc2.17-ppc64le

5. Installation and Configuration

5.1 Before installation

(LSF_TOP=Full path to the top-level installation directory of LSF.)

1) Log on to the LSF master host as root

2) Set the LSF cluster environment:

- For csh or tcsh: % source LSF_TOP/conf/cshrc.lsf

- For sh, ksh, or bash: $ . LSF_TOP/conf/profile.lsf

5.2 Installation steps

1) Go to the LSF_TOP/10.1/resource_connector/ directory

2) Optional. Delete the softlayer directory

3) Back up each provider lib directory (aws, azure, google, cyclecloud, openshift): mv <provider>/lib <provider.backup.dir>/lib

4) Go to the patch install directory: cd $LSF_ENVDIR/../10.1/install/

5) Copy the patch file to the install directory $LSF_ENVDIR/../10.1/install/

6) Run patchinstall: ./patchinstall <patch>

5.3 After installation

1) Log on to the LSF master host as the LSF cluster administrator

2) Run badmin mbdrestart

5.4 Uninstallation

1) Log on to the LSF master host as root and set the LSF cluster environment

2) Go to the patch install directory: cd $LSF_ENVDIR/../10.1/install/

3) Run ./patchinstall -r <patch>

4) Go to the LSF_TOP/10.1/resource_connector/ directory

5) Restore each provider lib directory (aws, azure, google, cyclecloud, openshift): mv <provider.backup.dir>/lib <provider>/lib .

6) Log on to the LSF master host as the LSF cluster administrator

7) Run badmin mbdrestart

6. List of Files

7. Product Notifications

To receive information about product solution and patch updates automatically, subscribe to product notifications on the My notifications page ( www.ibm.com/support/mynotifications) on the IBM Support website (support.ibm.com). You can edit your subscription settings to choose the types of information you want to get notification about, for example, security bulletins, fixes, troubleshooting, and product enhancements or documentation changes.

8. Copyright and Trademark Information

U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM®, the IBM logo, and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.