Readme File for IBM^® Spectrum Symphony 7.3.1 Interim Fix 601210

Readme file for: IBM Spectrum Symphony
Product release: 7.3.1
Fix ID: sym-7.3.1-build601210-welfg

Publication date: June 28, 2022

 

This interim fix upgrades Spring Framework to version 5.2.22 to resolve security vulnerability CVE-2022-22970 for IBM Spectrum Symphony 7.3.1 on Linux, IBM Spectrum Symphony 7.3.1 on Linux with the multicluster feature, and IBM Spectrum Symphony Developer Edition 7.3.1 on Linux.

 

Contents

1.      List of fixes

2.      Download location 

3.      Product or components affected

4.      Installation and configuration

5.      Uninstallation

6.      List of files

7.      Product notifications 

8.      Copyright and trademark information

1.     List of fixes

APAR: P104704

2.     Download location

Download interim fix 601210 from the following location: http://www.ibm.com/eserver/support/fixes/.

3.     Product or components affected

Component name, Platform, Fix ID:

WEBGUI/HostFactory, Linux x86_64, sym-7.3.1-build601210-welfg

4.     Installation and configuration

Follow these instructions to download and install this interim fix on the hosts in your cluster.

System requirements

Linux x86_64

Installing on an IBM Spectrum Symphony cluster

a.      Log on to the primary host as the cluster administrator and stop the WEBGUI and HostFactory services:

> egosh user logon -u Admin -x Admin

> egosh service stop WEBGUI HostFactory

b.      On each management host, create a directory (for example, /symfixes) and download the hfcore-1.1.0.0_x86_64_build601210.tar.gz and egomgmt-3.9.0.0_noarch_build601210.tar.gz files to the directory.

c.       Run the egoinstallfixes command to install the hfcore-1.1.0.0_x86_64_build601210.tar.gz and egomgmt-3.9.0.0_noarch_build601210.tar.gz files:

> egoinstallfixes /symfixes/hfcore-1.1.0.0_x86_64_build601210.tar.gz

> egoinstallfixes /symfixes/egomgmt-3.9.0.0_noarch_build601210.tar.gz

Important: Running the egoinstallfixes command automatically backs up the current binary files to a fix backup directory.  For recovery purposes of the original file, do not delete this backup directory. For more information on using this command, see the egoinstallfixes command reference.

d.      Run the pversions command to verify the installation:

> pversions -b 601210

e.      Delete all subdirectories and files in the following directories:

> rm -rf $EGO_TOP/gui/work/*

> rm -rf $EGO_TOP/gui/workarea/*

f.        (Optional) If failover is enabled, you can delete all subdirectories and files in the following directory:

> rm -rf $WLP_OUTPUT_DIR/webgui_hostname/gui/workarea/*

g.      Clear your browser cache. 

h.      From the primary host, start the WEBGUI and HostFactory services:

> egosh service start WEBGUI HostFactory

Installing on an IBM Spectrum Symphony cluster with the multicluster feature

a.      Log on to the primary host as the cluster administrator and stop the WEBGUI service:

> egosh user logon -u Admin -x Admin

> egosh service stop WEBGUI

b.      On each management host, create a directory (for example, /symfixes) and download the symmcmgmt-7.3.1.0_noarch_build601210.tar.gz file to the directory.

c.       Run the egoinstallfixes command to install the symmcmgmt-7.3.1.0_noarch_build601210.tar.gz file:

> egoinstallfixes /symfixes/symmcmgmt-7.3.1.0_noarch_build601210.tar.gz

Important: Running the egoinstallfixes command automatically backs up the current binary files to a fix backup directory.  For recovery purposes of the original file, do not delete this backup directory. For more information on using this command, see the egoinstallfixes command reference.

d.      Run the pversions command to verify the installation:

> pversions -b 601210

e.      Delete all subdirectories and files in the following directories:

> rm -rf $EGO_TOP/gui/work/*

> rm -rf $EGO_TOP/gui/workarea/*

f.        (Optional) If failover is enabled, you can delete all subdirectories and files in the following directory:

> rm -rf $WLP_OUTPUT_DIR/webgui_hostname/gui/workarea/*

g.      Clear your browser cache. 

h.      From the primary host, start the WEBGUI service:

 > egosh service start WEBGUI

Installing on and IBM Spectrum Symphony Develop Edition cluster

a.    Log on to the IBM Spectrum Symphony Develop Edition host as the cluster administrator and stop the agent:

> soamshutdown

b.    For recovery purposes, back up the following files and then remove them:

cd $SOAM_HOME

tar -cvf backup_old_601210.tar gui/3.9/lib/spring-orm-5.2.6.RELEASE.jar

tar -uvf backup_old_601210.tar gui/3.9/lib/spring-tx-5.2.6.RELEASE.jar

tar -uvf backup_old_601210.tar gui/3.9/lib/spring-web-5.2.6.RELEASE.jar

tar -uvf backup_old_601210.tar gui/3.9/lib/spring-aop-5.2.6.RELEASE.jar

tar -uvf backup_old_601210.tar gui/3.9/lib/spring-beans-5.2.6.RELEASE.jar

tar -uvf backup_old_601210.tar gui/3.9/lib/spring-context-5.2.6.RELEASE.jar

tar -uvf backup_old_601210.tar gui/3.9/lib/spring-context-support-5.2.6.RELEASE.jar

tar -uvf backup_old_601210.tar gui/3.9/lib/spring-core-5.2.6.RELEASE.jar

tar -uvf backup_old_601210.tar gui/3.9/lib/spring-expression-5.2.6.RELEASE.jar

tar -uvf backup_old_601210.tar gui/3.9/lib/spring-jdbc-5.2.6.RELEASE.jar

tar -uvf backup_old_601210.tar gui/3.9/lib/spring-test-5.2.6.RELEASE.jar

tar -uvf backup_old_601210.tar gui/3.9/lib/spring-webmvc-5.2.6.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-orm-5.2.6.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-tx-5.2.6.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-web-5.2.6.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-aop-5.2.6.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-beans-5.2.6.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-context-5.2.6.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-context-support-5.2.6.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-core-5.2.6.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-expression-5.2.6.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-jdbc-5.2.6.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-test-5.2.6.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-webmvc-5.2.6.RELEASE.jar

c.    Download the symde-7.3.1.0_x86_64_build601210.tar.gz file and decompress to the $SOAM_HOME directory, for example:

> tar zxfo symde-7.3.1.0_x86_64_build601210.tar.gz -C $SOAM_HOME

d.    Delete all subdirectories and files in the following directories:

> rm -rf $EGO_TOP/gui/work/*

> rm -rf $EGO_TOP/gui/workarea/*

e.    Clear your browser cache. 

f.     From the primary host, start the agent:

> soamstartup &

5.     Uninstallation

If required, follow the instructions to uninstall this interim fix from hosts in your cluster.

Uninstalling from an IBM Spectrum Symphony cluster

a.      Log on to the primary host as the cluster administrator and stop the WEBGUI and HostFactory services:

> egosh user logon -u Admin -x Admin

> egosh service stop WEBGUI HostFactory

b.      Log on to each management host in the cluster and roll back this interim fix:

> egoinstallfixes -r 601210

c.       Delete all subdirectories and files in the following directories:

> rm -rf $EGO_TOP/gui/work/*

> rm -rf $EGO_TOP/gui/workarea/*

d.      (Optional) If failover is enabled, you can delete all subdirectories and files in the following directory:

> rm -rf $WLP_OUTPUT_DIR/webgui_hostname/gui/workarea/*

e.      Clear your browser cache. 

f.        From the primary host, start the WEBGUI and HostFactory services:

> egosh service start WEBGUI HostFactory

Uninstalling from an IBM Spectrum Symphony cluster with the multicluster feature

a.      Log on to the primary host as the cluster administrator and stop the WEBGUI service:

> egosh user logon -u Admin -x Admin

> egosh service stop WEBGUI

b.      Log on to each management host in the cluster and roll back this interim fix:

> egoinstallfixes -r 601210

c.       Delete all subdirectories and files in the following directories:

> rm -rf $EGO_TOP/gui/work/*

> rm -rf $EGO_TOP/gui/workarea/*

d.      (Optional) If failover is enabled, you can delete all subdirectories and files in the following directory:

> rm -rf $WLP_OUTPUT_DIR/webgui_hostname/gui/workarea/*

e.      Clear your browser cache. 

f.        From the primary host, start the WEBGUI service:

> egosh service start WEBGUI

Uninstalling from an IBM Spectrum Symphony Develop Edition cluster

a.    Log on to the IBM Spectrum Symphony Develop Edition host as the cluster administrator and stop the agent:

> soamshutdown

b.    Log on to each IBM Spectrum Symphony Develop Edition host in the cluster and remove the installed fix:

rm -rf $SOAM_HOME/gui/3.9/lib/spring-orm-5.2.22.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-tx-5.2.22.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-web-5.2.22.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-aop-5.2.22.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-beans-5.2.22.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-context-5.2.22.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-context-support-5.2.22.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-core-5.2.22.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-expression-5.2.22.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-jdbc-5.2.22.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-test-5.2.22.RELEASE.jar

rm -rf $SOAM_HOME/gui/3.9/lib/spring-webmvc-5.2.22.RELEASE.jar

c.    Restore your backup for the following files:

cd $SOAM_HOME

tar -xvf backup_old_601210.tar

d.    Delete all subdirectories and files from the following directories:

> rm -rf $EGO_TOP/gui/work/*

> rm -rf $EGO_TOP/gui/workarea/*

e.    Clear your browser cache. 

f.     From the primary host, start the agent:

> soamstartup &

6.     List of files 

On an IBM Spectrum Symphony cluster

gui/3.9/lib/spring-orm-5.2.22.RELEASE.jar

gui/3.9/lib/spring-tx-5.2.22.RELEASE.jar

gui/3.9/lib/spring-web-5.2.22.RELEASE.jar

gui/3.9/lib/spring-aop-5.2.22.RELEASE.jar

gui/3.9/lib/spring-beans-5.2.22.RELEASE.jar

gui/3.9/lib/spring-context-5.2.22.RELEASE.jar

gui/3.9/lib/spring-context-support-5.2.22.RELEASE.jar

gui/3.9/lib/spring-core-5.2.22.RELEASE.jar

gui/3.9/lib/spring-expression-5.2.22.RELEASE.jar

gui/3.9/lib/spring-jdbc-5.2.22.RELEASE.jar

gui/3.9/lib/spring-test-5.2.22.RELEASE.jar

gui/3.9/lib/spring-webmvc-5.2.22.RELEASE.jar

hostfactory/1.1/providerplugins/common/lib/spring-beans-5.2.22.RELEASE.jar

hostfactory/1.1/providerplugins/common/lib/spring-core-5.2.22.RELEASE.jar

On an IBM Spectrum Symphony cluster with the multicluster feature

wlp/usr/shared/resources/gui/7.3.1/spring-web-5.2.22.RELEASE.jar

wlp/usr/shared/resources/gui/7.3.1/spring-core-5.2.22.RELEASE.jar

wlp/usr/shared/resources/gui/7.3.1/spring-beans-5.2.22.RELEASE.jar

wlp/usr/shared/resources/gui/7.3.1/spring-aop-5.2.22.RELEASE.jar

wlp/usr/shared/resources/gui/7.3.1/spring-expression-5.2.22.RELEASE.jar

wlp/usr/shared/resources/gui/7.3.1/spring-context-5.2.22.RELEASE.jar

wlp/usr/servers/gui/apps/2.0/lib/spring-core-5.2.22.RELEASE.jar

wlp/usr/servers/gui/apps/2.0/lib/spring-beans-5.2.22.RELEASE.jar

wlp/usr/servers/gui/apps/2.0/lib/spring-aop-5.2.22.RELEASE.jar

wlp/usr/servers/gui/apps/2.0/lib/spring-orm-5.2.22.RELEASE.jar

wlp/usr/servers/gui/apps/2.0/lib/spring-test-5.2.22.RELEASE.jar

wlp/usr/servers/gui/apps/2.0/lib/spring-context-support-5.2.22.RELEASE.jar

wlp/usr/servers/gui/apps/2.0/lib/spring-expression-5.2.22.RELEASE.jar

wlp/usr/servers/gui/apps/2.0/lib/spring-tx-5.2.22.RELEASE.jar

wlp/usr/servers/gui/apps/2.0/lib/spring-webmvc-5.2.22.RELEASE.jar

wlp/usr/servers/gui/apps/2.0/lib/spring-context-5.2.22.RELEASE.jar

wlp/usr/servers/gui/apps/2.0/lib/spring-jdbc-5.2.22.RELEASE.jar

wlp/usr/servers/gui/apps/2.0/lib/spring-web-5.2.22.RELEASE.jar

On an IBM Spectrum Symphony Develop Edition cluster

gui/3.9/lib/spring-orm-5.2.22.RELEASE.jar

gui/3.9/lib/spring-tx-5.2.22.RELEASE.jar

gui/3.9/lib/spring-web-5.2.22.RELEASE.jar

gui/3.9/lib/spring-aop-5.2.22.RELEASE.jar

gui/3.9/lib/spring-beans-5.2.22.RELEASE.jar

gui/3.9/lib/spring-context-5.2.22.RELEASE.jar

gui/3.9/lib/spring-context-support-5.2.22.RELEASE.jar

gui/3.9/lib/spring-core-5.2.22.RELEASE.jar

gui/3.9/lib/spring-expression-5.2.22.RELEASE.jar

gui/3.9/lib/spring-jdbc-5.2.22.RELEASE.jar

gui/3.9/lib/spring-test-5.2.22.RELEASE.jar

gui/3.9/lib/spring-webmvc-5.2.22.RELEASE.jar

7.     Product notifications

To receive information about product solution and patch updates automatically, subscribe to product notifications on the My Notifications page http://www.ibm.com/support/mynotifications/ on the IBM Support website (http://support.ibm.com). You can edit your subscription settings to choose the types of information you want to get notification about, for example, security bulletins, fixes, troubleshooting, and product enhancements or documentation changes. 

8.     Copyright and trademark information 

© Copyright IBM Corporation 2022

U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM®, the IBM logo and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml