IBM Spectrum LSF Explorer V10.2.0.12 Fix 600931 Readme

Abstract

This fix resolves the log4j2 security issue CVE-2021-44832.

Description

Readme documentation for IBM Spectrum LSF Explorer V10.2.0 Fix including installation-related instructions, prerequisites and co-requisites, and list of fixes.

This fix resolves the following issues:
The log4j2 utility has security issue (CVE-2021-44832).

Readme file for: IBM® Spectrum LSF Explorer
Product/Component Release: 10.2.0.12
Update Name: Fix 600931
Fix ID: explorer-10.2.0.12-build600931
Publication date: Feb. 14 2022
Last modified date: Feb. 14 2022

Contents

List of fixes
Download location
Product notifications
Products or components affected
System requirements
Installation and configuration
Uninstallation
List of files
Copyright and trademark information

List of fixes

P104526
Download location
Download from the following location: http://www.ibm.com/eserver/support/fixes/
Product notifications:
To receive information about product solution and patch updates automatically, subscribe to product notifications on the My notifications page http://www.ibm.com/support/mynotifications/ on the IBM Support website (http://support.ibm.com). You can edit your subscription settings to choose the types of information you want to get notification about, for example, security bulletins, fixes, troubleshooting, and product enhancements or documentation changes.
Products or components affected
Explorer Server
Explorer Node
System requirements
- Linux-x86_64
- Linux-ppc64le
Installation and configuration
- The following steps assume that IBM Spectrum LSF Explorer is installed in /opt/ibm. Replace with your actual installation directory.
- 6.1 Before installation
  - Log on to each IBM Spectrum LSF Explorer Server/Node hosts as root.
  - Set your IBM Spectrum LSF Explorer environment.
    For csh or tcsh:
    % source /opt/ibm/lsfsuite/ext/cshrc.platform
    For sh, ksh, or bash:
    $ . /opt/ibm/lsfsuite/ext/profile.platform
  - Determine the location of your existing IBM Spectrum LSF Explorer installation.
    Server: #rpm -q --queryformat "%{INSTPREFIXES}\n" lsf-explorer-server
    Node: #rpm -q --queryformat "%{INSTPREFIXES}\n" lsf-perf
  - Stop all IBM Spectrum LSF Explorer services.
    Server: pmcadmin stop
    Node: perfadmin stop all
  - Back up your existing installation.
    For example:
    #cp -rfp /opt/ibm /opt/ibm.bak
- 6.2 Installation steps for IBM Spectrum LSF Explorer V10.2.0.
  Note: 1. This patch is only for LSF Explorer V10.2.0. If you are using other versions, you must first migrate to V10.2.0 before applying this patch.
  - Extract explorer10.2.0.12_server_linux-${ARCH}.tar.gz. Where ${ARCH} is x64 or ppc64le
    Server: tar -xzvf explorer10.2.0.12_server_linux-${ARCH}.tar.gz
    Node: tar -xzvf explorer10.2.0.12_node_linux-${ARCH}.tar.gz
  - As root, log on to each IBM Spectrum LSF Explorer Server/Node 10.2 host.
  - Set your IBM Spectrum LSF Explorer environment.
    For csh or tcsh:
    % source /opt/ibm/lsfsuite/ext/cshrc.platform
    For sh, ksh, or bash:
    $ . /opt/ibm/lsfsuite/ext/profile.platform
  - Configure the install.config file as the same when installing Spectrum LSF Explorer Server/Node 10.2.0.12.
  - Install the patch
    Server: ./ExplorerServerInstaller.sh -f install.config
    Node: ./ExplorerNodeInstaller.sh -f install.config
  - Optional, Restore Elasticsearch username and password if they were set before.
    Server: cp /opt/ibm.bak/lsfsuite/ext/explorer/server/config/config.json /opt/ibm/lsfsuite/ext/explorer/server/config/config.json
  - Optional, Restore Elasticsearch username and password if they were set before and RBAC was enabled.
    Server: cp /opt/ibm.bak/lsfsuite/ext/explorer/server/rbac/datasource.xml /opt/ibm/lsfsuite/ext/explorer/server/rbac/datasource.xml
  - Optional, Re-run enable_rbac.sh if RBAC was enabled.
    Server: sh /opt/ibm/lsfsuite/ext/explorer/server/rbac/enable_rbac.sh
  - Start IBM Spectrum LSF Explorer Server/Node.
    Server: pmcadmin start
    Node: perfadmin start all
Uninstallation
- 7.1 Before uninstallation
  
  Stop all IBM Spectrum LSF Explorer services:
  Server: pmcadmin start
  Node: perfadmin start all
- 7.2 Roll back the fix
  The following steps assume that IBM Spectrum LSF Explorer is installed in the /opt/ibm directory.
  Replace this with your actual installation directory.
  - Determine the location of your existing IBM Spectrum LSF Explorer installation.
    Server: #rpm -q --queryformat "%{INSTPREFIXES}\n" lsf-explorer-server
    Node: #rpm -q --queryformat "%{INSTPREFIXES}\n" lsf-perf
  - Re-install RPM file lsf-explorer-server-10.2.0.12-21072313.${ARCH}.rpm for Explorer Server. Where ${ARCH} is x86_64 or ppc64le.
  - Re-install RPM file lsf-perf-10.2.0.12-21072313.${ARCH}.rpm for Explorer Node. Where ${ARCH} is x86_64 or ppc64le.
  - Start IBM Spectrum LSF Explorer Server/Node
    Server: pmcadmin start
    Node: perfadmin start all
List of files

$PMC_TOP/gui/3.0/wlp/usr/servers/platform/apps/platform.war/WEB-INF/lib/log4j-1.2-api-2.17.1.jar
$PMC_TOP/gui/3.0/wlp/usr/servers/platform/apps/platform.war/WEB-INF/lib/log4j-api-2.17.1.jar
$PMC_TOP/gui/3.0/wlp/usr/servers/platform/apps/platform.war/WEB-INF/lib/log4j-core-2.17.1.jar
$PMC_TOP/gui/3.0/wlp/usr/servers/platform/apps/platform.war/WEB-INF/lib/log4j-slf4j-impl-2.17.1.jar
$PMC_TOP/perf/1.2/lib/log4j-1.2-api-2.17.1.jar
$PMC_TOP/perf/1.2/lib/log4j-api-2.17.1.jar
$PMC_TOP/perf/1.2/lib/log4j-core-2.17.1.jar
Copyright and trademark information
©Copyright IBM Corporation 2022

U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM®, the IBM logo and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at http://www.ibm.com/legal/copytrade.shtml