This fix resolves the log4j2 security issue CVE-2021-44832 with log4j 2.17.1.
Readme
documentation for IBM Spectrum LSF Suite V10.2.0 Fix including
installation-related instructions, prerequisites and co-requisites,
and list of fixes.
This
fix resolves the following issue:
The log4j2 utility has 3 security issues (CVE-2021-44228,
CVE-2021-45046, CVE-2021-44832).
Readme file for: IBM® Spectrum LSF Suite
Product/Component Release: 10.2.0.12
Update Name: Fix 600958
Fix ID: Suite-10.2.0.12-build600958
Publication date: Jan. 9, 2022
Last modified date: Jan. 9, 2022
P104528
Download from the following location: http://www.ibm.com/eserver/support/fixes/
To receive information about product solution and patch updates automatically, subscribe to product notifications on the My notifications page http://www.ibm.com/support/mynotifications/ on the IBM Support website (http://support.ibm.com). You can edit your subscription settings to choose the types of information you want to get notification about, for example, security bulletins, fixes, troubleshooting, and product enhancements or documentation changes.
Application Center Server
Explorer
Resource Connector
Note: 1. This patch is only for LSF Suite V10.2.0. If you are using other versions, you must first migrate to V10.2.0 before applying this patch.
Log on to the IBM Spectrum LSF Suite installer host as root.
lsf-gui.rpm
lsf-appcenter.rpm
lsf-perf.rpm
lsf-resource-connector.rpm
lsf-explorer-server.rpm
©Copyright IBM Corporation 2022
U.S. Government Users Restricted Rights - Use, duplication or
disclosure restricted by GSA ADP Schedule Contract with IBM Corp.
IBM®, the IBM logo and ibm.com® are trademarks of International
Business Machines Corp., registered in many jurisdictions
worldwide. Other product and service names might be trademarks of
IBM or other companies. A current list of IBM trademarks is
available on the Web at "Copyright and trademark information" at http://www.ibm.com/legal/copytrade.shtml