IBM i2 Analyze 4.3.2 Fix Pack 1 readme

Fix Readme

Abstract

Readme file for: IBM i2 Analyze 4.3.2 Fix Pack 1
Product/Component release: 4.3.2
Update name: Fix Pack 1
Fix IDs:
IBM i2 Enterprise Insight Analysis 2.3.3: 2.3.3.1-SEC-i2EIA-WinLinux-FP0001
IBM i2 Enterprise Insight Analysis 2.3.2: 2.3.2.1-SEC-i2EIA-WinLinux-FP0001
i2 Connect: 1.0.2.1-SEC-I2CONNECT-WinLinux-FP0001
Publication date: December 2021
Last modified date: December 2021
Important: The most current version of the readme file can always be found online.

Content

Download location

IBM i2 Analyze 4.3.2 Fix Pack 1 can be downloaded from Fix Central. For more information, see the download document:

Download IBM i2 Analyze 4.3.2 Fix Pack 1

Prerequisites

The fix pack requires a deployment of IBM i2 Analyze 4.3.2.

Installation information

IBM i2 Analyze 4.3.2 Fix Pack 1 contains the following files:

IBM_i2_Analyze_4.3.2_Fix_Pack_1_Windows_Archive.zip
IBM_i2_Analyze_4.3.2_Fix_Pack_1_Linux_Archive.tar.gz

Updating the toolkit

To upgrade the i2 Analyze installation, complete the following steps.

Ensure that you are logged on with Administrator privileges.
Extract the contents of the fix pack into the appropriate directory as follows:
- On Windows, extract the file IBM_i2_Analyze_4.3.2_Fix_Pack_1_Windows_Archive.zip into the directory C:\IBM\i2analyze\toolkit.
- On Linux, extract the file IBM_i2_Analyze_4.3.2_Fix_Pack_1_Linux_Archive.tar.gz or into the directory /opt/IBM/i2analyze/toolkit.

Updating Solr

To upgrade a Solr instance in your deployment to use the patched version of log4j:

Stop your Solr server:

setup -t stopSolr
Update your Solr server:

setup -t installSolr

During the install task, you will see a message in your console log:

'Installing Apache Solr to C:/IBM/i2analyze/deploy/solr.<Version (new): 8.3.1-log4j-patch, (old): 8.3.1>'

Note: The 'log4j-patch' indicates that the newer version has been applied.
Restart your i2 Analyze Liberty server:

setup -t startSolr

Note: If you have multiple Solr servers in your environment, you must follow these steps on each Solr server.

List of fixes

This fix pack includes the following fixes.

Security Bulletin: i2 Analyze, i2 Connect and Analyst's Notebook Premium are affected by the Log4j vulnerability (CVE-2021-44228)

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45046

Known Issues

This fix pack is specific to the version of i2 Analyze specified. If your system is subsequently upgraded to i2 Analyze versions 4.3.3, 4.3.4, or 4.3.5, you must apply the related fix pack specific to that version after completing the upgrade process.

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSXVXZ","label":"IBM i2 Enterprise Insight Analysis"},"ARM Category":[{"code":"a8m0z000000cwkBAAQ","label":"i2 Enterprise Insight Analysis-\u003EDeployment"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"2.3.2;2.3.3"},{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSUJWJ","label":"i2 Connect"},"ARM Category":[{"code":"a8m0z0000001f9MAAQ","label":"i2 Connect"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"1.0.2"}]

Tips