Fix readme for 1.2.0.3-IBM-IMA-IFIT15495

Content

Fix: 1.2.0.3-IBM-IMA-IFIT15495
Date: May 31, 2016

Component:

IBM MessageSight 1.2.0.3 Cumulative Interim Fix

(Note: all MessageSight 1.2.x ifixes are cumulative.)

Platforms:

Platform	md5sum	File
Physical appliance	cf53beb5baf44d2614a074d279de9403	rel_bedrock.scrypt2
SoftLayer BareMetal	22c6ed4de12a59e878b42462b452cd77	rel_baremetal.scrypt2
SoftLayer Virtual Server	05090c1b5526010ecdd916ccd5135bf2	prod_MessageSight.slscrypt2
Virtual Edition	6dcf213f01859d8f9d84fd9c33cca9f4	rel_bedrock.vcrypt2

APARs fixed in this build:

APAR	Description
IT15495	Platform update addressing CVEs: CVE-2016-0264 CVE-2016-0363 CVE-2016-0376 CVE-2016-0686 CVE-2016-0687 CVE-2016-0695 CVE-2016-3422 CVE-2016-3425 CVE-2016-3426 CVE-2016-3427 CVE-2016-3443 CVE-2016-3449 CVE-2016-0799 CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2108 CVE-2016-2109 CVE-2016-2842
IT15124	Update Java provided with appliance to address CVE-2016-3426
IT15119	Fix memory leak in SoftLayer Virtual Edition
IT15122	Remote log server functionality added to SoftLayer Virtual Edition

Before you install:

We recommend performing a backup before upgrading the firmware:

Backup and restore

Installing the fix:

If you are upgrading from a previous version of MessageSight (ie, 1.x), see the Knowledge Center instructions here:

Upgrading

For updating the same major version of a MessageSight appliance, see Knowledge Center instructions here:

Changing the IBM MessageSight firmware level

If your appliances are setup in a high availability configuration, see the specific chapter in this section for the correct order to upgrade your appliances in this setup.

The quick version of these directions for a stand-alone appliance is:

1) connect to your appliance console:

ssh <username>@<appliance_network_address>

eg:

ssh admin@appliance.mydomain.com

2) Transfer the firmware file to your appliance:

file get <network_url>

3) Put the appliance into maintenance mode:

imaserver runmode maintenance
imaserver stop
imaserver start

4) Perform the upgrade:

firmware upgrade <image_file>

Eg:

firmware upgrade rel_bedrock.scrypt2

5) After the reboot, connect to the webui console normally and the webui will ask you to accept the license.

Starting with 1.2.0-IBM-IMA-FP0003, you can accept the license from the command line by issuing:

imaserver set AcceptLicense

Verifying the installation:

The firmware upgrade installer does a number of things to verify the firmware before upgrading, so if the firmware upgrade process indicates that it completed successfully before rebooting, the install should be successful.

You can verify the new version by running the following command at the command line console:

show imaserver

You can check to make sure imaserver started after installation by doing:

status imaserver

and checking the output.

Uninstalling the fix:

You can rollback the firmware upgrade from the console using the following command:

firmware rollback

This will rollback to the previously installed version. There are more details in this document.