Readme File for IBM® Spectrum Conductor 2.5.0 Interim Fix 601167
Readme file for: IBM Spectrum Conductor
Product release: 2.5.0
Fix ID: sc-2.5-build601167
Publication date: June 2, 2022
This interim fix upgrades Spring Framework to version 5.2.20 to resolve security vulnerability CVE-2022-22965 for IBM Spectrum Conductor 2.5.0.
1. List of fixes
2. Download location
3. Product or components affected
4. Installation and configuration
5. Uninstallation
6. List of files
7. Product notifications
8. Copyright and trademark information
APAR: P104681
Download
interim fix 601167 from the following location: http://www.ibm.com/eserver/support/fixes/.
Component
name, Platform, Fix ID:
PMC/HostFactory/ascd, Linux x86_64, Linux ppc64le, sc-2.5-build601167
Follow these instructions
to download and install this interim fix on the hosts in your cluster.
System
requirements
Linux x86_64 or Linux ppc64le
Installation
a.
Log on to
the primary host as the cluster administrator and stop the WEBGUI, HostFactory and ascd services:
> egosh user logon -u Admin -x Admin
> egosh
service stop WEBGUI HostFactory ascd
b.
On each
management host, create a directory (for example, /scfixes) and download the egocore-3.9.0.0_
OS_type_
build601167.tar.gz, egomgmt-3.9.0.0_noarch_build601167.tar.gz, and ascd-2.5.0.0_noarch_build601167.tar.gz files
to the directory.
c.
Run the egoinstallfixes
command to install the egocore-3.9.0.0_
OS_type_
build601167.tar.gz, egomgmt-3.9.0.0_noarch_build601167.tar.gz, and ascd-2.5.0.0_noarch_build601167.tar.gz files:
> egoinstallfixes /scfixes/egocore-3.9.0.0_
OS_type_
build601167.tar.gz
> egoinstallfixes /scfixes/egomgmt-3.9.0.0_noarch_build601167.tar.gz
> egoinstallfixes /scfixes/ascd-2.5.0.0_noarch_build601167.tar.gz
where OS_type is either x86_64 or ppc64le.
Important: Running the egoinstallfixes
command automatically backs up the current binary files to a fix backup
directory. For recovery purposes of the original file, do not delete this
backup directory. For more information on using this command, see the egoinstallfixes command reference.
d.
Run the pversions command to verify the installation:
> pversions -b 601167
e.
Delete all
subdirectories and files in the following directories:
> rm -rf $EGO_TOP/gui/work/*
> rm -rf $EGO_TOP/gui/workarea/*
f.
(Optional) If
failover is enabled, you can delete all subdirectories and files in the
following directory:
> rm -rf $WLP_OUTPUT_DIR/webgui_hostname/gui/workarea/*
g.
Clear your
browser cache.
h.
From the primary
host, start the WEBGUI, HostFactory and ascd services:
> egosh service start WEBGUI HostFactory ascd
If
required, follow the instructions to uninstall this interim fix on the hosts in
your cluster.
a.
Log on to
the primary host as the cluster administrator and stop the WEBGUI, HostFactory and ascd services:
> egosh user
logon -u Admin -x Admin
> egosh service stop WEBGUI HostFactory ascd
b.
Log on to
each management host in the cluster and roll back this interim fix:
> egoinstallfixes
-r 601167
c.
Delete all
subdirectories and files in the following directories:
> rm -rf $EGO_TOP/gui/work/*
> rm -rf $EGO_TOP/gui/workarea/*
d.
(Optional) If failover is
enabled, you can delete all subdirectories and files in the following directory:
> rm -rf $WLP_OUTPUT_DIR/webgui_hostname/gui/workarea/*
e.
Clear your
browser cache.
f.
From the primary
host, start the WEBGUI, HostFactory and ascd services:
> egosh service start WEBGUI HostFactory ascd
gui/3.9/lib/spring-orm-5.2.20.RELEASE.jar
gui/3.9/lib/spring-tx-5.2.20.RELEASE.jar
gui/3.9/lib/spring-web-5.2.20.RELEASE.jar
gui/3.9/lib/spring-aop-5.2.20.RELEASE.jar
gui/3.9/lib/spring-beans-5.2.20.RELEASE.jar
gui/3.9/lib/spring-context-5.2.20.RELEASE.jar
gui/3.9/lib/spring-context-support-5.2.20.RELEASE.jar
gui/3.9/lib/spring-core-5.2.20.RELEASE.jar
gui/3.9/lib/spring-expression-5.2.20.RELEASE.jar
gui/3.9/lib/spring-jdbc-5.2.20.RELEASE.jar
gui/3.9/lib/spring-test-5.2.20.RELEASE.jar
gui/3.9/lib/spring-webmvc-5.2.20.RELEASE.jar
hostfactory/1.1/providerplugins/common/lib/spring-beans-5.2.20.RELEASE.jar
hostfactory/1.1/providerplugins/common/lib/spring-core-5.2.20.RELEASE.jar
ascd/2.5.0/lib/spring-aop-5.2.20.RELEASE.jar
ascd/2.5.0/lib/spring-beans-5.2.20.RELEASE.jar
ascd/2.5.0/lib/spring-context-5.2.20.RELEASE.jar
ascd/2.5.0/lib/spring-core-5.2.20.RELEASE.jar
ascd/2.5.0/lib/spring-expression-5.2.20.RELEASE.jar
To
receive information about product solution and patch updates automatically,
subscribe to product notifications on the My Notifications page http://www.ibm.com/support/mynotifications/ on the IBM Support website (http://support.ibm.com). You can edit your subscription settings to choose the types of
information you want to get notification about, for example, security
bulletins, fixes, troubleshooting, and product enhancements or documentation
changes.
©
Copyright IBM Corporation 2022
U.S.
Government Users Restricted Rights - Use, duplication or disclosure restricted
by GSA ADP Schedule Contract with IBM Corp.
IBM®,
the IBM logo and ibm.com® are trademarks of International Business Machines
Corp., registered in many jurisdictions worldwide. Other product and service
names might be trademarks of IBM or other companies. A current list of IBM
trademarks is available on the Web at "Copyright and trademark
information" at www.ibm.com/legal/copytrade.shtml