Readme File for IBM® Spectrum Symphony 7.2.0.2 Interim Fix 600944
Readme File for: IBM Spectrum Symphony
Product Release: 7.2.0.2
Update Name: Interim Fix 600944
Fix ID: sym-7.2.0.2-build600944
Publication Date: January 9, 2022
This interim fix upgrades log4j 2.x to version 2.17.1 to resolve security vulnerability issues CVE-2021-44228, CVE-2021-44832, CVE-2021-45046, and CVE-2021-45105 for IBM Spectrum Symphony 7.2.0.2 on Windows with the multicluster feature.
Contents
1. List of fixes
2. Download location
3. Product and components affected
4. Installation and configuration
5. Uninstallation
6. List of files
7. Product notifications
8. Copyright and trademark information
1. List of fixes
APAR: P104521
2. Download location
Download interim fix 600911 from the following location: https://www.ibm.com/eserver/support/fixes/
3. Product and components affected
Component name, Platform, Fix ID:
GUI, Windows x86_64, sym-7.2.0.2-build600944
4. Installation and configuration
Follow the instructions in this section to download and install this interim fix to your cluster.
System requirements
Windows x86_64
Installation
a. Log on to the primary host in the cluster as the cluster administrator and stop the WEBGUI service:
> egosh user logon -u Admin -x Admin
>
egosh service stop WEBGUI
b. Log on to each management host in the cluster,
copy the symmc-7.2.0.2_build600944.msp package, and complete one of the following
steps:
o To perform an interactive installation,
double-click the .msp package.
o To perform a silent installation from the
IBM Spectrum Symphony command line, enter the following command:
C:\> msiexec /update
C:\symmc-7.2.0.2_build600944.msp /l*v updateSym.log /norestart /quiet
REINSTALLMODE=omus
The command syntax is as
follows:
C:\>msiexec /update sym_package_name_path
/l*v sym_install_log /norestart /quiet REINSTALLMODE=omus
where:
o sym_package_name_path is the fully
qualified path to the .msp package.
o sym_install_log is the log file for the
fix.
c. Delete
all subdirectories and files from the following directory:
top_install_directory\gui\workarea\*
d. Clear
your browser cache.
e. From the primary host, start the WEBGUI
service:
>
egosh service start WEBGUI
5. Uninstallation
If required, follow the instructions in this section to uninstall this interim fix from your cluster.
a. Log on to the primary host in the cluster as the cluster administrator and stop the WEBGUI service:
> egosh user logon -u Admin -x Admin
>
egosh service stop WEBGUI
b. Roll back to the previous version of IBM
Spectrum Symphony either from the Windows Control Panel or from the IBM
Spectrum Symphony command line:
o To roll back from the Windows Control Panel, go to Control
Panel > Programs and Features > View installed updates, click Update
for Symphony 7.2.0 (build"600944") and click Uninstall.
o To roll back from the IBM Spectrum Symphony command line, enter
the following command:
C:\> msiexec /uninstall {7D4519BE-607F-47AF-BA02-D1DC1E39381B}
/package {CAB39F65-6F5A-4257-8BED-BF203ECE4D38} /norestart /quiet /l*v
sym_rollback.log
The command syntax is as
follows:
C:\>msiexec /uninstall interim_fix_code /package product_code /norestart /quiet
/l*v rollback_log
where:
o interim_fix_code is the identifier
of the .msp package for the interim fix; in this case, {7D4519BE-607F-47AF-BA02-D1DC1E39381B}.
o product_code is the identifier
of the .msi file in the product installation package; in this
case, {CAB39F65-6F5A-4257-8BED-BF203ECE4D38}.
o rollback_log is the name of the
log file to capture details of the interim fix rollback; in this case, sym_rollback.log.
c. Delete all subdirectories and files from the following directory:
Top_Installation_Dir\gui\workarea\*
d. Clear your browser cache.
e. From the primary host, start the WEBGUI service:
>
egosh service start WEBGUI
6. List of files
wlp\usr\servers\gui\apps\kc\1.5.1\kc\WEB-INF\lib\log4j-1.2-api-2.17.1.jar
wlp\usr\servers\gui\apps\kc\1.5.1\kc\WEB-INF\lib\log4j-api-2.17.1.jar
wlp\usr\servers\gui\apps\kc\1.5.1\kc\WEB-INF\lib\log4j-core-2.17.1.jar
wlp\usr\servers\gui\apps\kc\1.5.1\kc\WEB-INF\lib\log4j-slf4j-impl-2.17.1.jar
7. Product notification
To receive information about product solution and patch updates automatically, subscribe to product notifications on the My Notifications page www.ibm.com/support/mynotifications/ on the IBM Support website (http://support.ibm.com). You can edit your subscription settings to choose the types of information you want to get notification about, for example, security bulletins, fixes, troubleshooting, and product enhancements or documentation changes.
8. Copyright and trademark information
© Copyright IBM Corporation 2022
U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.
IBM®, the IBM logo, and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.