Readme file for IBM® Spectrum Conductor 2.5.1 Interim Fix 602043
Readme file for: IBM Spectrum Conductor
Product/Component release: 2.5.1
Fix ID: sc-2.5.1-build602043
Publication date: May 28, 2024
This
interim fix resolves vulnerability CVE-2024-25026 by upgrading IBM WebSphere
Liberty Profile to 24.0.0.5 on IBM Spectrum Conductor 2.5.1 with Fix 601712.
1. List
of fixes
2. Download
location
3. Products
or components affected
4. Installation
and configuration
5. Uninstallation
6. List
of files
7. Product
notifications
8. Copyright
and trademark information
APAR: P105141
Download interim fix 602043 from the following location: https://www.ibm.com/eserver/support/fixes/.
Component name, Platform, Fix ID:
wlp, Linux x86_64/Linux on
POWER 64-bit, sc-2.5.1-build602043
Follow the instructions in this section
to download and install this interim fix on hosts in your cluster.
System
requirements
Linux x86_64/Linux on
POWER 64-bit
Prerequisites
Fix 601712 must be installed before applying this
fix package.
Installation
a. Log on to the primary host as the cluster administrator and stop the cluster:
>
egosh user logon -u Admin -x Admin
>
egosh service stop all
> egosh ego shutdown
b. On each management host, create a directory (for example, /scfixes directory) and download following package to the directory:
egowlp-24.0.0.5.noarch.rpm
c. Change to the directory where you downloaded all installation packages, and then install the rpm package with root or sudo to root permission:
> sudo rpm -ivh --replacefiles egowlp-24.0.0.5.noarch.rpm --prefix <install_location> --dbpath <dbpath_location>
d.
Verify the installation using the pversions command.
> pversions -b 602043
e.
Delete
all subdirectories and files from the following directories:
> rm -rf $EGO_TOP/gui/work/*
> rm -rf $EGO_TOP/gui/workarea/*
>
rm -rf $EGO_TOP/kernel/rest/workarea/*
(Optional) > rm -rf
$WLP_OUTPUT_DIR/webgui_hostname/gui/workarea/*
f.
Clear your browser cache.
g. From the primary host, source the latest environment and start the cluster:
(BASH) . $EGO_TOP/profile.platform
(CSH) source $EGO_TOP/cshrc.platform
> egosh ego start
If required, follow the instructions in this section to uninstall this enhancement from hosts in your cluster.
a.
Log on to the primary
host as the cluster administrator and stop the cluster:
> egosh user logon -u Admin -x Admin
> egosh service stop all
>
egosh ego shutdown
b. On
each management host in the cluster, roll back this enhancement by manually changing the following files:
$EGO_TOP/wlp/cshrc.wlp with content of “setenv WLP_VERSION 23.0.0.6”
$EGO_TOP/wlp/profile.wlp
with content of “WLP_VERSION=23.0.0.6”
c.
Delete
all subdirectories and files from the following directories:
> rm -rf $EGO_TOP/gui/work/*
> rm -rf $EGO_TOP/gui/workarea/*
>
rm -rf $EGO_TOP/kernel/rest/workarea/*
(Optional) > rm -rf
$WLP_OUTPUT_DIR/webgui_hostname/gui/workarea/*
d. Clear your browser cache.
e. From the primary host, source the latest environment and start the cluster:
(BASH) . $EGO_TOP/profile.platform
(CSH) source $EGO_TOP/cshrc.platform
> egosh ego start
egowlp-24.0.0.5.noarch.rpm
To receive information about
product solution and patch updates automatically, subscribe to product
notifications on the My Notifications page http://www.ibm.com/support/mynotifications/ on the IBM Support website
(http://support.ibm.com). You can edit your subscription settings to choose the
types of information you want to get notification about, for example, security
bulletins, fixes, troubleshooting, and product enhancements or documentation
changes.
© Copyright IBM Corporation 2024
U.S. Government Users
Restricted Rights - Use, duplication or disclosure restricted by GSA ADP
Schedule Contract with IBM Corp.
IBM®, the IBM logo,
and ibm.com® are trademarks of International Business Machines Corp.,
registered in many jurisdictions worldwide. Other product and service names
might be trademarks of IBM or other companies. A current list of IBM trademarks
is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.