IBM Spectrum LSF Application Center Version 10.2 Fix Pack 15

The following topics summarize the new and changed behavior in IBM Spectrum LSF Application Center (LSF Application Center) 10.2 Fix Pack 15.

Download location

Download this Fix Pack from IBM Fix Central. For more information, see Getting fixes from IBM Fix Central.

LSF root privileges

To enable root privileges on hosts for LSF Application Center, you must specify a space-separated list of hosts for the LSF_ADDON_HOSTS parameter in the lsf.conf file. The root users on these specified hosts can then execute commands remotely.

For more information, see LSF_ADDON_HOSTS and Security.

Support for previous IBM Spectrum LSF versions

To ensure that LSF Application Center10.2 Fix Pack 15 works properly with LSF 10.1.0.11 and previous versions, you must configure the following parameters in the lsf.conf file:
LSF_STRICT_CHECKING=N
LSF_AUTH_QUERY_COMMANDS=N

Operating system and client browser support

Before applying Fix Pack 15, ensure that you use one of the supported operating systems. Note that Fix Pack 15 does not support RHEL 7.x, SLES 12, and Ubuntu 18.04 or 20.04. It adds support for RHEL 8.9 and 8.10, RHEL 9.5, SLES 15.6, and Ubuntu 24.04.

As of Fix Pack 15, you can use LSF Application Center on upgraded browsers. For details, see the supported browsers.

Upgraded software included with LSF Application Center

LSF Application Center includes various software, required for LSF Application Center components, as applicable for each operating system. This software is included with the LSF Application Center installation. To proactively address known security vulnerabilities, Fix Pack 15 upgraded the following software to ensure a secure environment:
Software Version
IBM J9 JRE 8.0-8.30
IBM WebSphere Liberty 24.0.0.12
Commons-io 2.18.0
Cxf 3.5.10
Crypto-js 4.2.0
hibernate-core 5.3.36.Final
Jackson Databind 2.15.2
Node.js 18.19.1
Spring Framework 5.3.39
Spring Security 5.7.14

List of fixes

LSF Application Center 10.2 Fix Pack 15 resolves the following reported issues:
Fix ID Description
P105206 A user can see other user’s VNC console.
P105131 Missing project name for array jobs.
P105131 Application description does not display in the application list column.
Hot fix VNC console freezes when copying large amount of text to the clipboard.
P105274 Missing scroll bar on page.
P105274 The filter in the workload page does not work for child job groups.
P105176 Jobaction.xml always passes 0 as the job array index.
P105206 LSF Application Center Kerberos SSO does not automatically log on a user if the user does not have a ticket-granting-ticket (TGT) on the LSF Application Center server.
Hot Fix LSF Application Center server on Ubuntu crashes when user logs on.
Hot Fix VNC Console jobs fail.
Hot Fix IBM HTTP Server (IHS) does not support customized installation paths.
P105032 User Roles & Permissions page crashes.
P105032 The Usergroup role does not work as expected.
P105032 Users can inject commands to start the VNC URL.
P105032 A third party can inject CLI to the checkWritePermission/pa RESTful API.
Hot Fix IBM HTTP Server security vulnerabilities.
Hot Fix pacclient does not honor the JSESSIONID setting in a high availability environment, causing subsequent calls to pacclient to go to different LSF Application Center backend servers.
Hot Fix Unable to install multiple LSF Application Center instances to the same location.
P104783 Missing the Created By icon on all templates.
P105025 Upgrade Struts version to address PSIRT CVE-2023-50164.
Hot Fix When high availability is enabled with IBM HTTP Server (IHS), multiple PAC instances are started up
Hot Fix High priority vulnerability CVS-2022-40609
P104932 Incorrect display of workload icons.
P104949 VNC does not work on RHEL 8.6.
P105239 The dbconfig.sh command does not work.
P105259 When navigating to from Workload > Data, the hostname is incorrect.

Upgraded OpenSSL

Fix Pack 15 supports OpenSSL 3.

Support for Apache HTTP Server high availability

Starting in LSF Application Center 10.2 Fix Pack 15, you can use Apache HTTP Server (instead of IBM HTTP Server) as your HTTP server and gateway to IBM Spectrum LSF Application Center and balance the load among servers.

If you use Apache HTTP Server, install it on a standalone host. Learn more at High availability architecture in IBM Spectrum LSF Application Center.

Remote visualization

For enhanced remote visualization, IBM Spectrum LSF Application Center leverages noVNC's support for more user-friendly enhancements such as copy and pasting. Fix Pack 15 also supports the TigerVNC 1.14 for RHEL 9.5.

Enhanced job notification for supporting high availability in IBM Cloud

Fix Pack 15 enhances job notification for a high availability environment in IBM Cloud.