IBM CMIS Version 3.0.6 Interim Fix 2 Readme

This Readme document contains information about the installation of this package and about restrictions in support of IBM CMIS, Version 3.0.6 Interim Fix 2.

Readme file for:

IBM CMIS. This interim fix contains IBM CMIS APARs.

Product or component release:

Version 3.0.6.0

Update name:

Interim Fix 2

IBM CMIS build number:

cmis-fncs-installer306.002.099

IBM CMIS Fix ID:

Publication date:

June 24th, 2022

Last modified date:

June 24th, 2022

Additional documentation for IBM CMIS 3.0.6.0 can be found at : https://www.ibm.com/docs/en/content-navigator/3.0.x?topic=navigator-planning-installing-configuring-ecm-cmis

New Features

Known problems, issues, and limitations

Known problems, restrictions, and solutions that affect administration and usage of interim fixes are documented as techdocs in the product support knowledge base. Use the following link to query the product support knowledge base by searching for the product and version number: https://www.ibm.com/support/home.

Prerequisites for Version 3.0.6 Interim Fix 2

For complete details about the hardware and software requirements for IBM Content Navigator, IBM ECM CMIS v3.0.6 see Software Product Compatibility Reports.

Installing or Updating IBM CMIS Version 3.0.6 Interim Fix 2

The following information and steps apply to IBM CMIS. To install the interim fix, perform the steps below using the interim fix executable. When you install an interim fix, you can run the installation wizard or run a silent installation. This interim fix can be installed as an update to IBM CMIS Version 3.0.6.0.

The interim fix installation program updates the files in the directory where IBM CMIS is installed. After the installation program completes successfully, restart the web application server and redeploy the IBM CMIS web application to apply the changes from the interim fix.

For more information about installing IBM CMIS, Version 3.0.6.0, see https://www.ibm.com/docs/en/content-navigator/3.0.x?topic=navigator-planning-installing-configuring-ecm-cmis

To install IBM CMIS, Version 3.0.6 Interim Fix 2:

  1. Back up your current installation of IBM CMIS.
  2. Ensure that the IBM CMIS Configuration and Deployment Tool is closed.
  3. Log in to the IBM CMIS server with the IBM CMIS installer account.
  4. Install the interim fix by running the installation wizard or by running a silent installation:
    Important: Do not enter line breaks in the command that you enter to start the installation program.

    AIX

    At a command prompt, change to the directory where you downloaded the interim fix and enter one of the following commands:

    Linux

    At a command prompt, change to the directory where you downloaded the interim fix and enter one of the following commands:

    Linux for System z

    At a command prompt, change to the directory where you downloaded the interim fix and enter one of the following commands:

    Windows

    At a command prompt, change to the directory where you downloaded the interim fix and enter one of the following commands:

  5. Open the IBM CMIS Configuration and Deployment tool, click File > Open Deployment Profile, select the target deployment profile and click Open.

  6. Run the "Configure IBM CMIS for <repository type>" task. For more instructions, see the topic, https://www.ibm.com/docs/en/content-navigator/3.0.x?topic=cmis-configuring-deploying-ecm-web-applications.

  7. Run the "Build the Web Application" task. For more instructions, see the topic, https://www.ibm.com/docs/en/content-navigator/3.0.x?topic=cmis-configuring-deploying-ecm-web-applications.

  8. Run the "Deploy the Web Application" task. For more instructions, see the topic, https://www.ibm.com/docs/en/content-navigator/3.0.x?topic=cmis-configuring-deploying-ecm-web-applications.

  9. Stop the IBM CMIS web application server.

  10. Clear the application server cache:

  11. Start the IBM CMIS web application server.

  12. Verify that the correct version of the software is deployed to the web application server. For more information, see the topic, "Verifying your deployment" in the information center: https://www.ibm.com/docs/en/content-navigator/3.0.x?topic=deployment-verifying-your-ecm-cmis.

Removing the interim fix

When you uninstall the interim fix, you also uninstall IBM CMIS.

The interim fix for IBM CMIS uninstallation program removes the program and all applied fixes. You cannot remove only the interim fix.

Fixes included in IBM CMIS Version 3.0.6 Interim Fix 2

The fixes that were provided in previous IBM CMIS Version 3.0.6 releases are combined in this fix.


IO28690 SQL query is executed using displayed value instead of using database value.
(IBM CMIS for Content Manager OnDemand users) SQL query is being executed using Display Name value instead of Database Name value, of the search attribute. This can cause the query to fail if both the values don't match. With this fix, the query is always executed using the Database Name value, even if the query contains the Display Name value of a search attribute.

IO28773 Some documents in can fail to be retrieved.
(IBM CMIS for Content Manager OnDemand users) Some documents can fail to be retrieved or be queried when using IBM CMIS. The error seen in the application server log is - 'CIL2403: No logged-on connection found for this request.'. With this fix, this issue does not occur.

Security Issue: The following security vulnerabilities have been fixed (see New Features section)
CVE-2021-40690, CVE-2022-22965 CVSS# 9.8 CVE-2022-22963 CVSS# 9.8 CVE-2022-22968


Fixes included in IBM CMIS Version 3.0.6 Interim Fix 1


Security Issue: The following security vulnerabilities have been fixed:
CVE-2017-12624, CVE-2017-3156, CVE-2017-5653, CVE-2017-5656
CVE-2018-8039, CVE 2018-0629, CVE-2019-12406
CVE-2019-12423, CVE-2020-13954, CVE-2020-1954
CVE-2021-22696, CVE-2021-30468, CVE-2021-22118


Install/Upgrade improvement
There was a known issue in v3.0.6 which prevented a successful upgrade to the base version from IBM CMIS v3.0.5 IF002 or later.. With this improvement in this interim fix, users can successfully upgrade to this interim fix level, from v3.0.5 IF002 or later.

PJ46628 Enable Trace logging on IBM ECM CMIS Container.
(IBM CMIS users)  Added SLF4j-JDK jar which was missing for logging mechanism to work.


PJ46644 Failure with creating content element file name containing space or Unicode character.
(IBM FileNet Content Manager users) With this fix, the UTF-8 string is removed from the file name and the content element can be created successfully.


IO28248 SQL query fails to run if it has a string value containing an apostrophe.
(IBM Content Manager OnDemand users) When an apostrophe is escaped using double single quotes (ex: Test''s) in the value of a column/attribute of an SQL query, IBM CMIS throws an error. With this fix, the escaped apostrophe is processed correctly and the query runs successfully. This fix requires searchMethod=SQL in the cmis.properties file.



Copyright and trademark information

http://www.ibm.com/legal/copytrade.shtml

Notices

INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some jurisdictions do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you.

This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice.

Other company, product, or service names may be trademarks or service marks of others.

THIRD-PARTY LICENSE TERMS AND CONDITIONS, NOTICES AND INFORMATION

The license agreement for this product refers you to this file for details concerning terms and conditions applicable to third party software code included in this product, and for certain notices and other information IBM must provide to you under its license to certain software code. The relevant terms and conditions, notices and other information are provided or referenced below. Please note that any non-English version of the licenses below is unofficial and is provided to you for your convenience only. The English version of the licenses below, provided as part of the English version of this file, is the official version.

Notwithstanding the terms and conditions of any other agreement you may have with IBM or any of its related or affiliated entities (collectively "IBM"), the third party software code identified below are "Excluded Components" and are subject to the following terms and conditions: