IBM Support

IBM Cloud Orchestrator Fix Pack 10 (2.5.0.10) for 2.5

Download


Downloadable File

Abstract

IBM Cloud Orchestrator 2.5.0.10 has been made generally available and contains fixes to version 2.5.

Download Description

Table of Contents
Sections Description

The Change history section provides an overview on what is new in this release with a description of any new functions or enhancements when applicable.

The How critical is this fix section provides information related to the impact of this release to allow you to assess how your environment may be affected.

The Prerequisites section provides important information to review prior to the installation of this release.

The Download package section provides the direct link to obtain the download package for installation in your environment.

The Installation instructions section provides the installation instructions necessary to apply this release into your environment.

The Known side effects section contains a link to the known problems (open defects) identified at the time of this release.

Supporting Documentation
Document Description

Click to review the detailed system requirements information for a complete list of hardware requirements, supported operating systems, prerequisites and optional supported software, with component-level details and operating system restrictions.

IBM Knowledge Center provides an entry point to product documentation. You can view, browse, and search online information related to the product.

Click to review a complete list of the defects (APARs) resolved in this release including a list of resolved defects for the entire version family.

Prerequisites

Prerequisites include:

Review the Software prerequisites page in the IBM Knowledge Center to ensure your environment meets the minimum hypervisor and operating system requirements, especially if you are upgrading from a previous release of IBM Cloud Orchestrator.

Review the Prerequisites tab in the system requirements report for supported versions of Data Protection and Recovery, Databases and Process Management tools.

Back to top

Installation Instructions

This fix pack can be installed as a fresh installation or as an upgrade of an existing installation. Follow the instructions in the tabs below.


Fresh installation of IBM Cloud Orchestrator

 

Step 1: Review the Installing topic in the IBM Knowledge Center.

---------------------------------------------------------------------------

Upgrade of IBM Cloud Orchestrator from version 2.5 or later

 

The following upgrade scenarios are supported:

  • IBM Cloud Orchestrator V2.5 -> IBM Cloud Orchestrator V2.5.0.10
  • IBM Cloud Orchestrator V2.5.0.1 -> IBM Cloud Orchestrator V2.5.0.10
  • IBM Cloud Orchestrator V2.5.0.1 Interim Fix 1 -> IBM Cloud Orchestrator V2.5.0.10
  • IBM Cloud Orchestrator V2.5.0.2 -> IBM Cloud Orchestrator V2.5.0.10
  • IBM Cloud Orchestrator V2.5.0.2 LA0005 or LA0006  -> IBM Cloud Orchestrator V2.5.0.10
  • IBM Cloud Orchestrator V2.5.0.3 -> IBM Cloud Orchestrator V2.5.0.10
  • IBM Cloud Orchestrator V2.5.0.4 -> IBM Cloud Orchestrator V2.5.0.10
  • IBM Cloud Orchestrator V2.5.0.4 with DirectDriver LA -> IBM Cloud Orchestrator V2.5.0.10
  • IBM Cloud Orchestrator V2.5.0.5 -> IBM Cloud Orchestrator V2.5.0.10
  • IBM Cloud Orchestrator V2.5.0.6 -> IBM Cloud Orchestrator V2.5.0.10
  • IBM Cloud Orchestrator V2.5.0.7 -> IBM Cloud Orchestrator V2.5.0.10
  • IBM Cloud Orchestrator V2.5.0.8 -> IBM Cloud Orchestrator V2.5.0.10
  • IBM Cloud Orchestrator V2.5.0.9 -> IBM Cloud Orchestrator V2.5.0.10

Step 1: Review the Upgrading from IBM Cloud Orchestrator V2.5 topic in the IBM Knowledge Center.

-------------------------------------------------------------------------------------------------------------

Migration of IBM Cloud Orchestrator from version 2.4.0.2 or later

 

The following migration scenarios are supported:

  • IBM Cloud Orchestrator V2.4.0.2 -> IBM Cloud Orchestrator V2.5.0.10
  • IBM Cloud Orchestrator V2.4.0.3  -> IBM Cloud Orchestrator V2.5.0.10
  • IBM Cloud Orchestrator V2.4.0.4 -> IBM Cloud Orchestrator V2.5.0.10
  • IBM Cloud Orchestrator V2.4.0.5 -> IBM Cloud Orchestrator V2.5.0.10

 

Step 1: Review the Migrating from IBM Cloud Orchestrator V2.4.0.2 or later topic in the IBM Knowledge Center.

 

Step 2: If you are migrating from an IBM Cloud Orchestrator 2.4.0.2 (or later) environment, review the During Migration and After Migration sections and apply the steps appropriate for your setup.

Note: All references to version 2.4.0.4 also apply to version 2.4.0.5 or later.


During Migration

SQL0964C error message

During migration the following message might be displayed:

SQL0964C  The transaction log for the database is full.  SQLSTATE=57011

To solve this problem, clear the transaction logs. For the procedure to clear transaction logs, see IBM DB2 Knowledge Center.


After Migration

Creating actions

If you added an action to a predefined toolkit in the IBM Cloud Orchestrator 2.4.0.2 environment and the action was not migrated in the IBM Cloud Orchestrator 2.5.0.10 environment, create the action manually by following the procedure described in Creating an action.


Download Package

Download options
Access type Description

Review eAssemblies Parts List for a list of part numbers you can download for this product.

IBM Software Group OEM offerings are designed for partners who develop and sell business solutions with embedded or bundled IBM middleware software. Clients with Flexible Contract Type (FCT) license purchases and IBM Business Partners must sign in to download the software package.

Click the HTTP link in the Download section below to obtain the release from Fix Central.

Image directory contents

  • 2.5.0-CSI-ICO-FP00010.tgz: IBM Cloud Orchestrator Version 2.5 Fix Pack 10 for Red Hat Enterprise Linux Multilingual
  • 2.1.0.6-SCCM-IFIX07.tar: IBM SmartCloud Cost Management 2.1 Fix Pack 6 ifix07

How critical is this fix?

Impact Assessment
Impact Description

Corrective

This is a maintenance release. It contains fixes for client-reported and internally found defects.

  • CVE-2019-4399: IBM Cloud Orchestrator uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
  • CVE-2019-4398: IBM Cloud Orchestrator could allow a local user to obtain sensitive information from SessionManagement cookies.
  • CVE-2019-0211: Apache HTTP Server publicly disclosed vulnerability.
  • CVE-2019-4400: IBM Cloud Orchestrator could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
  • CVE-2019-0215 CVE-2019-0217 CVE-2019-0197 CVE-2019-0196 CVE-2019-0220: Apache HTTP Server publicly disclosed vulnerability.
  • CVE-2019-2699 CVE-2019-2698 CVE-2019-2697 CVE-2019-2602 CVE-2019-2684 CVE-2019-10245: There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, 7.0.10.35 used by IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise.
  • CVE-2019-4459: Malicious package usage in Python.
  • CVE-2012-5351: ASoC - OpenSource issue
  • CVE-2019-4394: ASoC - Injection.Mail
  •  CVE-2019-4396: ASoC -Injection.HttpResponseSplitting
  •  CVE-2019-11775 CVE-2019-11772 CVE-2019-2766 CVE-2019-2786 CVE-2019-2816 CVE-2019-2762 CVE-2019-2769 CVE-2019-7317 CVE-2019-4473 CVE-2019-11771 - IBM SDK, Java Technology Edition Quarterly CPU - Jul 2019

Test Results

Definitions

Regression: An error in the Maintenance Delivery Vehicle (MDV) that produces incorrect or unexpected behavior causing a supported feature to stop functioning as designed.
This includes:

  • Coding errors that cause a regression
  • Documentation or packaging problems that cause a regression
  • Errors reported in a new function delivered in a MDV that cause a regression

Incomplete: An error in the MDV has not regressed, but does not work as designed.
This includes:

  • Fixed APARs which did not solve the original problem but did not break anything new
  • APARs reporting documentation errors, such as readme errors, that cause problems applying an MDV but do not lead to a regression


Notes:
  • Regression and incomplete APARs are considered fix-in-error or MDV-in-error
  • Definitions above apply only to valid APARs that result in product fixes (APARs returned as working-as-designed are not assessed for being fix-in-error)
  • Issues in major releases due to new functionality do not apply in this definition

There are no known regressions to report.

Known Side Effects

Review the following list of known issues and open defects:

Review the Known errors and limitations section of the IBM Knowledge Center for issues related to this release.

Open defects

Review the following list of open defects for IBM Cloud Orchestrator on the IBM Support Portal.

Change History

What's new

For information about the new features and enhancements, review the What is new in this release topic in the IBM Knowledge Center.

Effective Oct 14, 2019 IBM has announced the following changes in the entitlement of BigFix, which HCL acquired in June 2019:
 
To continue using BigFix for Patching, you must purchase BigFix from HCL or an authorized BigFix reseller. A replay of HCL’s BigFix roadmap can be found here: https://register.gotowebinar.com/register/5699647677344055565.
 
Please contact Mark Phinick at HCL for BigFix licensing information and pricing. Mark’s email is mark.phinick@hcl.com.
 
This entitlement change applies to the supported IBM Cloud Orchestrator versions 2.4 and 2.5, and is also applicable to the Standard Edition and Enterprise Edition variants of IBM Cloud Orchestrator.

On
[{"DNLabel":"IBM Cloud Orchestrator 2.5 fixes","DNDate":"14 Oct 2019","DNLang":"English","DNSize":"22693800 KB","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7ETivoli&product=ibm/Tivoli/IBM+SmartCloud+Orchestrator&release=2.5.0&platform=All&function=all","DNURL_FTP":"","DDURL":null}]

Document Location

Worldwide

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SS4KMC","label":"IBM SmartCloud Orchestrator"},"Component":"","Platform":[{"code":"PF002","label":"AIX"}],"Version":"2.5.0.10","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
18 October 2019

UID

ibm10888201