Fix readme for 1.2.0.3-IBM-IMA-IFIT22195

Content

Fix: 1.2.0.3-IBM-IMA-IFIT22195
Date: September 5, 2017
Build: 20170830-2056

Component:

IBM MessageSight 1.2.0.3 Cumulative Interim Fix

(Note: all MessageSight 1.2.x ifixes are cumulative -- every build includes all fixes back to the first 1.2.0.0 release of the product.)

Platforms:

Platform	md5sum	File
Physical appliance	51f4d59567d5168600a95b1974e2677d	1.2.0.3-IBM-IMA-Physical-IFIT22195
SoftLayer BareMetal	3cbd42e72c7ba2ef793f0c44330a040b	1.2.0.3-IBM-IMA-BareMetal-IFIT22195
SoftLayer Virtual Server	211acd4a8cce4b74d19109d44b438321	1.2.0.3-IBM-IMA-SoftLayerVirtual-IFIT22195
Virtual Edition	2c97f53a2592fd73c30754d251401f20	1.2.0.3-IBM-IMA-VirtualEdition-IFIT22195

APARs fixed in this build:

APAR	Description
IT22195	Multiple vulnerabilities in IBM Java Runtime affect IBM MessageSight: CVE-2017-10115
IT20833	Platform updates addressing multiple vulnerabilities: CVE-2017-1000366, CVE-2017-2616, CVE-2017-2628, CVE-2016-8743, CVE-2017-5461, CVE-2016-1248
IT22274	Permissions problem can cause failure to upload files for specific users
IT22240	Remove server information from default endpoint landing page

Before you install:

We recommend performing a backup before upgrading the firmware:

Backup and restore

Installing the fix:

If you are upgrading from a previous version of MessageSight (ie, 1.x), see the Knowledge Center instructions here:

Upgrading

For updating the same major version of a MessageSight appliance, see Knowledge Center instructions here:

Changing the IBM MessageSight firmware level

If your appliances are setup in a high availability configuration, see the specific chapter in this section for the correct order to upgrade your appliances in this setup.

The quick version of these directions for a stand-alone appliance is:

1) connect to your appliance console:

ssh <username>@<appliance_network_address>

eg:

ssh admin@appliance.mydomain.com

2) Transfer the firmware file to your appliance:

file get <network_url>

3) Put the appliance into maintenance mode:

imaserver runmode maintenance
imaserver stop
imaserver start

4) Perform the upgrade:

firmware upgrade <image_file>

Eg:

firmware upgrade 1.2.0.3-IBM-IMA-Physical-IFIT20660.scrypt2

5) After the reboot, connect to the webui console normally and the webui will ask you to accept the license.

Starting with 1.2.0-IBM-IMA-FP0003, you can accept the license from the command line by issuing:

imaserver set AcceptLicense

Verifying the installation:

The firmware upgrade installer does a number of things to verify the firmware before upgrading, so if the firmware upgrade process indicates that it completed successfully before rebooting, the install should be successful.

You can verify the new version by running the following command at the command line console:

show imaserver

You can check to make sure imaserver started after installation by doing:

status imaserver

and checking the output.

Uninstalling the fix:

You can rollback the firmware upgrade from the console using the following command:

firmware rollback

This will rollback to the previously installed version. There are more details in this document.