IBM CMIS Version 3.0.7 Interim Fix 5 Readme

This Readme document contains information about the installation of this package and about restrictions in support of IBM CMIS, Version 3.0.7 Interim Fix 5.

This interim fix contains new software currency and fixes.

Readme file for:

IBM CMIS.

Product or component release:

Version 3.0.7.0

Update name:

Interim Fix 5

IBM CMIS build number:

cmis-installer307.005.093

IBM CMIS Fix ID:

• 3.0.7.0-IF005-IBM_ECM_CMIS-AIX
• 3.0.7.0-IF005-IBM_ECM_CMIS-LINUX
• 3.0.7.0-IF005-IBM_ECM_CMIS-zLINUX
• 3.0.7.0-IF005-IBM_ECM_CMIS-WIN

Publication date:

April 12, 2024

Last modified date:

April 12, 2024

Additional documentation for IBM CMIS 3.0.7.0 can be found at : https://www.ibm.com/docs/en/content-navigator/3.0.x?topic=navigator-planning-installing-configuring-ecm-cmis

New Features

Interim Fix 5

• Support for WebSphere Application Server v9.0.5.19.

Interim Fix 4

• Correct adjustment of Class Loader Order settings for CMIS with Application Edition Manager
• When deploying Application Edition Manager (AEM) in Websphere Application Server alongside IBM CMIS and IBM Content Navigator, or when utilizing CMIS alone, the Class Loader Order settings are configured as 'Classes loaded with local class loader first (parent last)'.
• CMIS container ping page for startupProbe is now available.
• Support for WebSphere Application Server v9.0.5.17.
• Support for IBM Content Manager v8.7 Fixpack 2.
• Support for IBM FileNet Content Manager v5.5.12.

Interim Fix 3

• Support for WebSphere Application Server v9.0.5.16.

Interim Fix 2

• Support for WebSphere Application Server v9.0.5.15, v8.5.5.23.
• Support for RHEL v9.1.
• Support for IBM FileNet Content Manager v5.5.11.

Interim Fix 1

• Improvements made to enhance performance under heavy load, which includes better caching mechanisms and amplified performance with minimal blocking of thread.
• Added maxServicePoolSize attribute in repository.properties file, with default value 40, as defined below:
• #maxServicePoolSize=40
  If set to 0 then service object caching is disabled resulting in lesser throughput Service object is the main component used to serve the user requests and this property is for pooling of the service objects. Pooling of these objects helps in achieving faster throughput by avoiding creation of new instance of service objects. Default size is 40 and can be extended to a higher number e.g.,200, depending on the number of concurrent users accessing CMIS. Setting it to higher value may result in more memory consumption.
• For container version, the default value of 40 cannot be modified.
• Support for IBM WebSphere Application Server (WAS) v9.0.5.14 added.

Known problems, issues, and limitations

Known problems, restrictions, and solutions that affect administration and usage of interim fixes are documented as techdocs in the product support knowledge base. Use the following link to query the product support knowledge base by searching for the product and version number: https://www.ibm.com/support/home.

Prerequisites for Version 3.0.7 Interim Fix 5

For complete details about the hardware and software requirements for IBM Content Navigator, IBM ECM CMIS v3.0.7 see Software Product Compatibility Reports.

Installing or Updating IBM CMIS Version 3.0.7 Interim Fix 5

The following information and steps apply to IBM CMIS. To install the interim fix, perform the steps below using the interim fix executable. When you install an interim fix, you can run the installation wizard or run a silent installation. This interim fix can be installed as an update to IBM CMIS Version 3.0.7.0.

The interim fix installation program updates the files in the directory where IBM CMIS is installed. After the installation program completes successfully, restart the web application server and redeploy the IBM CMIS web application to apply the changes from the interim fix.

For more information about installing IBM CMIS, Version 3.0.7.0, see https://www.ibm.com/docs/en/content-navigator/3.0.x?topic=navigator-planning-installing-configuring-ecm-cmis

To install IBM CMIS, Version 3.0.7 Interim Fix 5:

1. Back up your current installation of IBM CMIS.
2. Ensure that the IBM CMIS Configuration and Deployment Tool is closed.
3. Log in to the IBM CMIS server with the IBM CMIS installer account.

4. Install the interim fix by running the installation wizard or by running a silent installation:
   Important: Do not enter line breaks in the command that you enter to start the installation program.

   AIX

   At a command prompt, change to the directory where you downloaded the interim fix and enter one of the following commands:

   • To install the interim fix interactively, enter: ./IBM_ECM_CMIS-3.0.7.0-IF005-AIX.bin.
   • To install the interim fix silently, enter ./IBM_ECM_CMIS-3.0.7.0-IF005-AIX.bin -f fully_qualified_path_of_the_response_file/ecmclient_silent_install.txt.

   Linux

   At a command prompt, change to the directory where you downloaded the interim fix and enter one of the following commands:

   • To install the interim fix interactively, enter: ./IBM_ECM_CMIS-3.0.7.0-IF005-LINUX.bin.
   • To install the interim fix silently, enter ./IBM_ECM_CMIS-3.0.7.0-IF005-LINUX.bin -f fully_qualified_path_of_the_response_file/ecmclient_silent_install.txt.

   Linux for System z

   At a command prompt, change to the directory where you downloaded the interim fix and enter one of the following commands:

   • To install the interim fix interactively, enter: ./IBM_ECM_CMIS-3.0.7.0-IF005-zLINUX.bin.
   • To install the interim fix silently, enter ./IBM_ECM_CMIS-3.0.7.0-IF005-zLINUX.bin -f fully_qualified_path_of_the_response_file/ecmclient_silent_install.txt.

   Windows

   At a command prompt, change to the directory where you downloaded the interim fix and enter one of the following commands:

   • To install the interim fix interactively, enter: ./IBM_ECM_CMIS-3.0.7.0-IF005-WIN.exe.
   • To install the interim fix silently, enter ./IBM_ECM_CMIS-3.0.7.0-IF005-WIN.exe -f fully_qualified_path_of_the_response_file/ecmclient_silent_install.txt.

5. Open the IBM CMIS Configuration and Deployment tool, click File > Open Deployment Profile, select the target deployment profile and click Open.

6. Run the "Configure IBM CMIS for <repository type>" task. For more instructions, see the topic, https://www.ibm.com/docs/en/content-navigator/3.0.x?topic=cmis-configuring-deploying-ecm-web-applications.

7. Run the "Build the Web Application" task. For more instructions, see the topic, https://www.ibm.com/docs/en/content-navigator/3.0.x?topic=cmis-configuring-deploying-ecm-web-applications.

8. Run the "Deploy the Web Application" task. For more instructions, see the topic, https://www.ibm.com/docs/en/content-navigator/3.0.x?topic=cmis-configuring-deploying-ecm-web-applications.

9. Stop the IBM CMIS web application server.

10. Clear the application server cache:

    • For IBM WebSphere Application Server: Delete the following folders:

      • Delete the cmis folder from the temp temporary directory.

        For example, on Microsoft Windows, delete the cmis folder from the following directory: \IBM\WebSphere\AppServer\profiles\AppSrv01\temp\ServerName Node01\server1.

      • Delete the subfolders in the wstemp directory. This folder is different from the temp folder. Do not delete the wstemp folder itself.

        For example, on Windows, delete the subfolders in following directory: \IBM\WebSphere\AppServer\profiles\AppSrv01\wstemp.

      • For Oracle WebLogic Server: Delete the cmis folder from the tmp temporary directory.

      For example, on Windows, delete the cmis folder from the following directory: \Oracle\Middleware\user_projects\domains\base_domain\servers\AdminServer\tmp\_WL_user.

11. Start the IBM CMIS web application server.

12. Verify that the correct version of the software is deployed to the web application server. For more information, see the topic, "Verifying your deployment" in the information center: https://www.ibm.com/docs/en/content-navigator/3.0.x?topic=deployment-verifying-your-ecm-cmis.

Removing the interim fix

When you uninstall the interim fix, you also uninstall IBM CMIS. The interim fix for IBM CMIS uninstallation program removes the program and all applied fixes. You cannot remove only the interim fix.

Fixes included in IBM CMIS Version 3.0.7 Interim Fix 5

This fix includes content from previous IBM CMIS Version 3.0.7 interim fixes:

PJ47198 Incorrect error CBR_INCOMPLETE_CONFIG written to logs upon execution of a wrong query. 
(IBM CMIS users) An incorrect error CBR_INCOMPLETE_CONFIG is written to IBM CMIS server log files along with the correct error, when a wrong query containing invalid parameters is executed. With this fix, only the correct errors are written to the log files.

Security Issue: Spring web jar file upgraded to spring-web-6.0.18.jar to fix vulnerability, CVE-2024-22243 CVSS# 8.1 High. IBM CMIS is not vulnerable even though affected jar file was previously present. 

Security Issue: Spring-expression, spring-aop, spring-context, spring-context-support, spring-beans, spring-core, spring-jcl jar files upgraded to v5.3.32 to fix vulnerability, CVE-2024-22243 CVSS# 8.1 High. IBM CMIS is not vulnerable even though affected jar files were previously present. 

Copyright and trademark information

http://www.ibm.com/legal/copytrade.shtml

Notices

INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some jurisdictions do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you.

This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice.

Other company, product, or service names may be trademarks or service marks of others.

THIRD-PARTY LICENSE TERMS AND CONDITIONS, NOTICES AND INFORMATION

The license agreement for this product refers you to this file for details concerning terms and conditions applicable to third party software code included in this product, and for certain notices and other information IBM must provide to you under its license to certain software code. The relevant terms and conditions, notices and other information are provided or referenced below. Please note that any non-English version of the licenses below is unofficial and is provided to you for your convenience only. The English version of the licenses below, provided as part of the English version of this file, is the official version.

Notwithstanding the terms and conditions of any other agreement you may have with IBM or any of its related or affiliated entities (collectively "IBM"), the third party software code identified below are "Excluded Components" and are subject to the following terms and conditions:

• The Excluded Components are provided on an "AS IS" basis
• IBM DISCLAIMS ANY AND ALL EXPRESS AND IMPLIED WARRANTIES AND CONDITIONS WITH RESPECT TO THE EXCLUDED COMPONENTS, INCLUDING, BUT NOT LIMITED TO, THE WARRANTY OF NON-INFRINGEMENT OR INTERFERENCE AND THE IMPLIED WARRANTIES AND CONDITIONS OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
• IBM will not be liable to you or indemnify you for any claims related to the Excluded Components
• IBM will not be liable for any direct, indirect, incidental, special, exemplary, punitive or consequential damages with respect to the Excluded Components.