Fix readme for 1.2.0.3-IBM-IMA-IFIT17109

Content

Fix: 1.2.0.3-IBM-IMA-IFIT17109
Date: September 30, 2016
Build: 20160915-1724

Component:

IBM MessageSight 1.2.0.3 Cumulative Interim Fix

(Note: all MessageSight 1.2.x ifixes are cumulative -- every build includes all fixes back to the first 1.2.0.0 release of the product.)

Platforms:

Platform	md5sum	File
Physical appliance	c78933f9ced79671a4fec6121a391495	rel_bedrock.scrypt2
SoftLayer BareMetal	f75658abe31fa03a67fcb04aa55772ef	rel_baremetal.scrypt2
SoftLayer Virtual Server	7c19df95f9a31412fc1047da560eeffb	prod_MessageSight.slscrypt2
Virtual Edition	fbd76fa0906238e23af8565d0e0f88da	rel_bedrock.vcrypt2

APARs fixed in this build:

APAR	Description
IT17109	Liberty update addressing CVE-2016-0359, CVE-2016-2923
IT17249	Platform update to address the following CVEs: CVE-2015-5194 CVE-2015-5195 CVE-2015-5219 CVE-2015-7691 CVE-2015-7692 CVE-2015-7701 CVE-2015-7702 CVE-2015-7703 CVE-2015-7852 CVE-2015-7977 CVE-2015-7978 CVE-2015-7979 CVE-2016-1547 CVE-2016-1548 CVE-2016-1550 CVE-2016-2518 CVE-2014-3538 CVE-2014-3587 CVE-2014-3710 CVE-2014-8116 CVE-2014-8117 CVE-2014-9620 CVE-2014-9653 CVE-2016-1762 CVE-2016-1833 CVE-2016-1834 CVE-2016-1835 CVE-2016-1836 CVE-2016-1837 CVE-2016-1838 CVE-2016-1839 CVE-2016-1840 CVE-2016-3627 CVE-2016-3705 CVE-2016-4447 CVE-2016-4448 CVE-2016-4449 CVE-2016-5387 CVE-2015-5352 CVE-2015-6563 CVE-2015-6564

Before you install:

We recommend performing a backup before upgrading the firmware:

Backup and restore

Installing the fix:

If you are upgrading from a previous version of MessageSight (ie, 1.x), see the Knowledge Center instructions here:

Upgrading

For updating the same major version of a MessageSight appliance, see Knowledge Center instructions here:

Changing the IBM MessageSight firmware level

If your appliances are setup in a high availability configuration, see the specific chapter in this section for the correct order to upgrade your appliances in this setup.

The quick version of these directions for a stand-alone appliance is:

1) connect to your appliance console:

ssh <username>@<appliance_network_address>

eg:

ssh admin@appliance.mydomain.com

2) Transfer the firmware file to your appliance:

file get <network_url>

3) Put the appliance into maintenance mode:

imaserver runmode maintenance
imaserver stop
imaserver start

4) Perform the upgrade:

firmware upgrade <image_file>

Eg:

firmware upgrade rel_bedrock.scrypt2

5) After the reboot, connect to the webui console normally and the webui will ask you to accept the license.

Starting with 1.2.0-IBM-IMA-FP0003, you can accept the license from the command line by issuing:

imaserver set AcceptLicense

Verifying the installation:

The firmware upgrade installer does a number of things to verify the firmware before upgrading, so if the firmware upgrade process indicates that it completed successfully before rebooting, the install should be successful.

You can verify the new version by running the following command at the command line console:

show imaserver

You can check to make sure imaserver started after installation by doing:

status imaserver

and checking the output.

Uninstalling the fix:

You can rollback the firmware upgrade from the console using the following command:

firmware rollback

This will rollback to the previously installed version. There are more details in this document.