Fix readme for 1.2.0.3-IBM-IMA-IFIT20660

Content

Fix: 1.2.0.3-IBM-IMA-IFIT20660
Date: June 1, 2017
Build: 20170524-2328

Component:

IBM MessageSight 1.2.0.3 Cumulative Interim Fix

(Note: all MessageSight 1.2.x ifixes are cumulative -- every build includes all fixes back to the first 1.2.0.0 release of the product.)

Platforms:

Platform	md5sum	File
Physical appliance	a44ed00aabc0da87eb8a94c87b5809c5	1.2.0.3-IBM-IMA-Physical-IFIT20660
SoftLayer BareMetal	5e7bce50034ce9e964ffbdb8e2018e3b	1.2.0.3-IBM-IMA-BareMetal-IFIT20660
SoftLayer Virtual Server	e412b5cc9d939c6598e0dad2b2eaf3ba	1.2.0.3-IBM-IMA-SoftLayerVirtual-IFIT20660
Virtual Edition	4e9096d1d1ddeb545fa449da9b191222	1.2.0.3-IBM-IMA-VirtualEdition-IFIT20660

APARs fixed in this build:

APAR	Description
IT20660	Multiple vulnerabilities in IBM Java Runtime affect IBM MessageSight
IT20833	Platform updates addressing CVE-2016-2183 CVE-2016-5546 CVE-2016-5548 CVE-2016-5549 CVE-2016-5552 CVE-2017-3231 CVE-2016-3241 CVE-2016-3252 CVE-2016-3253 CVE-2016-3259 CVE-2016-3261 CVE-2016-3272 CVE-2015-8870 CVE-2016-5652 CVE-2016-9533 CVE-2016-9534 CVE-2016-9535 CVE-2016-9536 CVE-2016-9537 CVE-2016-9540 CVE-2016-1248 CVE-2014-9761 CVE-2015-8776 CVE-2015-8778 CVE-2015-8779 CVE-2016-0634 CVE-2016-7543 CVE-2016-9401 CVE-2017-2616 CVE-2017-2628 CVE-2017-3136 CVE-2017-3137 CVE-2017-3139 CVE-2017-5461 CVE-2015-5203 CVE-2015-5221 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089 CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692 CVE-2016-8693 CVE-2016-8883+

Before you install:

We recommend performing a backup before upgrading the firmware:

Backup and restore

Installing the fix:

If you are upgrading from a previous version of MessageSight (ie, 1.x), see the Knowledge Center instructions here:

Upgrading

For updating the same major version of a MessageSight appliance, see Knowledge Center instructions here:

Changing the IBM MessageSight firmware level

If your appliances are setup in a high availability configuration, see the specific chapter in this section for the correct order to upgrade your appliances in this setup.

The quick version of these directions for a stand-alone appliance is:

1) connect to your appliance console:

ssh <username>@<appliance_network_address>

eg:

ssh admin@appliance.mydomain.com

2) Transfer the firmware file to your appliance:

file get <network_url>

3) Put the appliance into maintenance mode:

imaserver runmode maintenance
imaserver stop
imaserver start

4) Perform the upgrade:

firmware upgrade <image_file>

Eg:

firmware upgrade 1.2.0.3-IBM-IMA-Physical-IFIT20660.scrypt2

5) After the reboot, connect to the webui console normally and the webui will ask you to accept the license.

Starting with 1.2.0-IBM-IMA-FP0003, you can accept the license from the command line by issuing:

imaserver set AcceptLicense

Verifying the installation:

The firmware upgrade installer does a number of things to verify the firmware before upgrading, so if the firmware upgrade process indicates that it completed successfully before rebooting, the install should be successful.

You can verify the new version by running the following command at the command line console:

show imaserver

You can check to make sure imaserver started after installation by doing:

status imaserver

and checking the output.

Uninstalling the fix:

You can rollback the firmware upgrade from the console using the following command:

firmware rollback

This will rollback to the previously installed version. There are more details in this document.