Fix Readme
Abstract
This readme describes the contents and fixes included in new cumulative IFIX 1.2.0.3-IBM-IMA-IFIT17737
Content
Fix: 1.2.0.3-IBM-IMA-IFIT17737
Date: November 3, 2016
Build: 20161028-2206
Component:
IBM MessageSight 1.2.0.3 Cumulative Interim Fix
(Note: all MessageSight 1.2.x ifixes are cumulative -- every build includes all fixes back to the first 1.2.0.0 release of the product.)
Platforms:
| Platform | md5sum | File |
| Physical appliance | a8fa9d911c02b1e12e1aee0349211c5b | 1.2.0.3-IBM-IMA-Physical-IFIT17737 |
| SoftLayer BareMetal | 0c416fa756cdea8cefd0d3607bd5e0b6 | 1.2.0.3-IBM-IMA-BareMetal-IFIT17737 |
| SoftLayer Virtual Server | 36aee4e168246c81d75951b462311e47 | 1.2.0.3-IBM-IMA-SoftLayerVirtual-IFIT17737 |
| Virtual Edition | bc5932a2e428480c3cc30663d6a27cf5 | 1.2.0.3-IBM-IMA-VirtualEdition-IFIT17737 |
APARs fixed in this build:
| APAR | Description |
| IT17726 | Possible incorrect memory allocation for user auth info |
| IT17727 | Incorrect initialization of structure used for storing parsed oauth data |
| IT17728 | Improve scheduling of oauth/ltpa requests to improve performance |
| IT17729 | Avoid sending authentication request for a closed connection |
| IT17730 | Bypass authentication when it's not required |
| IT17733 | Possible memory corruption when compacting store generations when HA is enabled |
| IT17736 | Improve initialization of curl to avoid locking issues |
| IT17737 | Update Java for CVE-2016-3598 |
Before you install:
We recommend performing a backup before upgrading the firmware:
Backup and restore
Installing the fix:
If you are upgrading from a previous version of MessageSight (ie, 1.x), see the Knowledge Center instructions here:
Upgrading
For updating the same major version of a MessageSight appliance, see Knowledge Center instructions here:
Changing the IBM MessageSight firmware level
If your appliances are setup in a high availability configuration, see the specific chapter in this section for the correct order to upgrade your appliances in this setup.
The quick version of these directions for a stand-alone appliance is:
1) connect to your appliance console:
ssh <username>@<appliance_network_address>
eg:
ssh admin@appliance.mydomain.com
2) Transfer the firmware file to your appliance:
file get <network_url>
3) Put the appliance into maintenance mode:
imaserver runmode maintenance
imaserver stop
imaserver start
4) Perform the upgrade:
firmware upgrade <image_file>
Eg:
firmware upgrade rel_bedrock.scrypt2
5) After the reboot, connect to the webui console normally and the webui will ask you to accept the license.
Starting with 1.2.0-IBM-IMA-FP0003, you can accept the license from the command line by issuing:
imaserver set AcceptLicense
Verifying the installation:
The firmware upgrade installer does a number of things to verify the firmware before upgrading, so if the firmware upgrade process indicates that it completed successfully before rebooting, the install should be successful.
You can verify the new version by running the following command at the command line console:
show imaserver
You can check to make sure imaserver started after installation by doing:
status imaserver
and checking the output.
Uninstalling the fix:
You can rollback the firmware upgrade from the console using the following command:
firmware rollback
This will rollback to the previously installed version. There are more details in this document.
Related Information
[{"Product":{"code":"SSCGGQ","label":"IBM MessageSight"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"Security","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"1.2","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]
Was this topic helpful?
Document Information
Modified date:
17 June 2018
UID
swg21993286