Download Information: Version 7.1.6.x Data Protection for VMware

Download Description

Tip: Beginning with Version 7.1.3, IBM Tivoli Storage Manager for Virtual Environments is now IBM Spectrum Protect™ for Virtual Environments. Some applications such as the software fulfillment systems and IBM License Metric Tool use the new product name. However, the software and its product documentation continue to use the Tivoli Storage Manager for Virtual Environments product name. To learn more about the rebranding transition, see http://www.ibm.com/support/docview.wss?uid=swg21963634.

WARNING: If you are updating to 7.1.6.5, the File Restore UI may not work properly if the mount proxy is at a lower level. Additionally, if a mount proxy is updated to 7.1.6.5 level but the UI is at a lower level, the File Restore UI may not work correctly. The solution is to update all Data Protection for Virtual Environments components (the GUI, data mover, mount proxy, recovery agent) to 7.1.6.5 or higher level.

Note: Data Protection for VMware 7.1.6.2 delivery was repackaged to include the V7.1.6.2 Backup-Archive Client. This V7.1.6.2 Backup-Archive Client includes the APAR fixes of IT15769 and IT15975.

Note: Following vulnerabilities have been identified in Version 7.1.6.x Data Protection for VMware:

IBM Spectrum Protect for Virtual Environments: Data Protection for VMware
First Fixing VRMF Level	Platform	Bulletin Title/Link
7.1.6.2 & 7.1.6.3	--	no security vulnerabilities.
7.1.6.4	Windows	Multiple vulnerabilities in IBM Java Runtime affect IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware on Windows (CVE-2016-3485) http://www.ibm.com/support/docview.wss?uid=swg21995792
7.1.6.4	Linux Windows	Security Bulletin: Vulnerabilities in IBM WebSphere Application Server affect Tivoli Storage Manager (IBM Spectrum Protect) for Virtual Environments: Data Protection for VMware (CVE-2016-5986, CVE-2016-3092) http://www.ibm.com/support/docview.wss?uid=swg21995793
7.1.6.4	Windows	Security Bulletin: Password disclosure vulnerability in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware vSphere GUI (CVE-2016-6034)http://www.ibm.com/support/docview.wss?uid=swg21995544
7.1.6.4	Linux Windows	Security Bulletin: Cross-site request forgery vulnerability in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware and IBM Tivoli Storage FlashCopy Manager for VMware (CVE-2016-6033) http://www.ibm.com/support/docview.wss?uid=swg21995545
7.1.6.4	Linux Windows	Security Bulletin: vCenter password disclosure via application tracing in IBM Tivoli Storage Manager Client and IBM Tivoli Storage Manager for Virtual Environments:Data Protection for VMware (CVE-2016-6110) http://www.ibm.com/support/docview.wss?uid=swg21996198
7.1.6.5	Linux Windows	Security Bulletin: Multiple vulnerabilites in IBM Java Runtime affect Tivoli Storage Manager (IBM Spectrum Protect) for Virtual Environments: Data Protection for VMware (CVE-2016-5597) http://www.ibm.com/support/docview.wss?uid=swg21999054
7.1.6.5	Linux Windows	Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Tivoli Storage Manager (IBM Spectrum Protect) for Virtual Environments: Data Protection for VMware and FlashCopy Manager (IBM Spectrum Protect Snapshot) for VMware http://www.ibm.com/support/docview.wss?uid=swg22000212
7.1.6.5	Linux Windows	Security Bulletin: Multiple Vulnerabilities in OpenSSL affect IBM Spectrum Protect (formerly Tivoli Storage Manager) Client and IBM Spectrum Protect (formerly Tivoli Storage Manager) for Virtual Environments: Data Protection for VMware http://www.ibm.com/support/docview.wss?uid=swg22003480
7.1.6.5	Linux Windows	Security Bulletin: Multiple Vulnerabilities in OpenSSL affect IBM Spectrum Protect (formerly Tivoli Storage Manager) Client and IBM Spectrum Protect (formerly Tivoli Storage Manager) for Virtual Environments: Data Protection for VMware http://www.ibm.com/support/docview.wss?uid=swg22003620
7.1.6.5	Linux Windows	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Spectrum Protect (formerly Tivoli Storage Manager) Client and IBM Spectrum Protect (formerly Tivoli Storage Manager) for Virtual Environments: Data Protection for VMware http://www.ibm.com/support/docview.wss?uid=swg22003673

The IBM Spectrum Protect Client/API are used as components of Data Protection for VMware. The IBM Spectrum Protect Backup-Archive Client also known as Data Mover is a separate prerequisite and is included as a convenience in the Data Protection for VMware installation package. The IBM Spectrum Protect Client API is also a prerequisite of Data Protection for VMware and is installed as a part of the default Data Protection for VMware installation process. Be aware that all Data Protection for VMware functional components must be at the same Fix Pack level. Within a given Fix Pack level, the interim fix level can differ.

See in the "Flashes, alerts and bulletins for Tivoli Storage Manager for Virtual Environments Support Portal" for vulnerabilities that have been identified in IBM Spectrum Protect affecting beside other IBM Spectrum Protect products also Data Protection for VMware.

Instructions to replace IBM Spectrum Protect Client/API on system where Data Protection for VMware is installed within a Fix Pack level:
• If the IBM Spectrum Protect Client (data mover) is installed on this system, its possible to upgrade the Data Mover by installing the new IBM Spectrum Protect Client package.
  This will update the IBM Spectrum Protect API as well.
• If the IBM Spectrum Protect Client (data mover) is not installed on this system (for example if only GUI is installed):
• On a Linux system its possible to upgrade the IBM Spectrum Protect API by installing the new API package
• On a Windows system its necessary to install the IBM Spectrum Protect Client package which installs automatically the new API package