IBM Support

IBM SPSS Collaboration and Deployment Services 8.1.1 updates to address security vulnerabilities by upgrading Log4J from 1.x to 2.17.1

Download


Abstract

IBM SPSS Collaboration and Deployment Services 8.1.1 updates to address security vulnerabilities by upgrading Log4J from 1.x to 2.17.1

Prerequisites

This interim fix can only be installed over existing installations of IBM SPSS Collaboration and Deployment Services 8.1.1
IBM SPSS Collaboration and Deployment Services Repository Server 8.1.1
IBM SPSS Collaboration and Deployment Services Remote Scoring Server 8.1.1
IBM SPSS Collaboration and Deployment Services Remote Process Server 8.1.1
IBM SPSS Collaboration and Deployment Services Deployment Manager 8.1.1
Notes:
Due to the limitation of WebLogic, the manual remediation on C&DS Repository Server and Remote Scoring Server is required and covered on the Technical Note of Vulnerabilities in Apache Log4j 1.x affect IBM SPSS Collaboration and Deployment Services 8.1, 8.1.1 with Modeler Server Adapters 18.1, 18.1.1 (deployed on WebLogic)

Installation Instructions

---------------------------------------
BY DOWNLOADING, INSTALLING, COPYING, ACCESSING, OR OTHERWISE USING THE SOFTWARE, YOU AGREE TO THE TERMS OF THE IBM LICENSE AGREEMENT UNDER WHICH YOU ACQUIRED IBM SPSS Collaboration and Deployment Services 8.1.1
BY AGREEING, YOU REPRESENT AND WARRANT THAT YOU HAVE FULL AUTHORITY TO ACCEPT THESE TERMS. IF YOU DO NOT AGREE TO THESE TERMS,
- DO NOT DOWNLOAD, INSTALL, COPY, ACCESS, OR USE THE SOFTWARE; AND
- PROMPTLY RETURN THE UNUSED MEDIA AND DOCUMENTATION TO THE PARTY FROM WHOM IT WAS OBTAINED. IF THE SOFTWARE WAS DOWNLOADED, DESTROY ALL COPIES OF THE SOFTWARE.
Please refer to the installation text file in downloaded packages for details information.

Bugs Fixed:
--------------------

APAR PH44312: Log4J Vulnerability affects IBM SPSS Collaboration and Deployment Services
Affected Products:
--------------------
IBM SPSS Collaboration and Deployment Services Repository Server 8.1.1
IBM SPSS Collaboration and Deployment Services Remote Scoring Server 8.1.1
IBM SPSS Collaboration and Deployment Services Remote Process Server 8.1.1
IBM SPSS Collaboration and Deployment Services Deployment Manager 8.1.1
Notice:
1. IBM SPSS Collaboration and Deployment Services Repository Server 8.1.1 and IBM SPSS Collaboration and Deployment Services Deployment Manager 8.1.1 IFIX package are controlled by restricted access which must be granted by IBM Support.
2. All customized configurations previously made on log4j.properties of Log4J 1.x must be manually configured again on log4j2.xml of Log4J 2.x.

Problems Solved

PH44312

On
[{"DNLabel":"8.1.1.0-IM-SCaDSREPOSITORY-IF007","DNDate":"21 Feb 2022","DNLang":"Language Independent","DNSize":"158 MB","DNPlat":{"label":"Platform Independent","code":"PF025"},"DNURL":"http://www.ibm.com/support/fixcentral/swg/quickorder?parent=SPSS&product=ibm/Information+Management/SPSS+Collaboration+and+Deployment+Services&release=All&platform=All&function=fixId&fixids=8.1.1.0-IM-SCaDSREPOSITORY-IF007:0&includeSupersedes=0&source=fc&login=true","DNURL_FTP":"","DDURL":null},{"DNLabel":"8.1.1.0-IM-SCaDSRPS-IF007","DNDate":"21 Feb 2022","DNLang":"Language Independent","DNSize":"2.13 MB","DNPlat":{"label":"Platform Independent","code":"PF025"},"DNURL":"http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FInformation+Management%2FSPSS+Collaboration+and+Deployment+Services&fixids=8.1.1.0-IM-SCaDSRPS-IF007&source=SAR","DNURL_FTP":"","DDURL":null},{"DNLabel":"8.1.1.0-IM-SCaDSRSS-IF007","DNDate":"21 Feb 2022","DNLang":"Language Independent","DNSize":"2.12 MB","DNPlat":{"label":"Platform Independent","code":"PF025"},"DNURL":"http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FInformation+Management%2FSPSS+Collaboration+and+Deployment+Services&fixids=8.1.1.0-IM-SCaDSRSS-IF007&source=SAR","DNURL_FTP":"","DDURL":null},{"DNLabel":"8.1.1.0-IM-SCaDSDEPLOYMENTMANAGER-IF007","DNDate":"21 Feb 2022","DNLang":"Language Independent","DNSize":"430 MB","DNPlat":{"label":"Platform Independent","code":"PF025"},"DNURL":"http://www.ibm.com/support/fixcentral/swg/quickorder?parent=SPSS&product=ibm/Information+Management/SPSS+Collaboration+and+Deployment+Services&release=All&platform=All&function=fixId&fixids=8.1.1.0-IM-SCaDSDEPLOYMENTMANAGER-IF007:0&includeSupersedes=0&source=fc&login=true","DNURL_FTP":"","DDURL":null}]
[{"Type":"MASTER","Line of Business":{"code":"LOB10","label":"Data and AI"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS69YH","label":"IBM SPSS Collaboration and Deployment Services"},"ARM Category":[{"code":"a8m50000000CaeKAAS","label":"Collaboration and Deployment Services-\u003EC\u0026DS Repository Server"},{"code":"a8m500000008TzOAAU","label":"Collaboration and Deployment Services-\u003EDeployment Manager Client"},{"code":"a8m500000008U0MAAU","label":"Collaboration and Deployment Services-\u003EProcess Management"},{"code":"a8m500000008U02AAE","label":"Collaboration and Deployment Services-\u003EScoring"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.1.1"}]

Document Information

Modified date:
27 February 2022

UID

ibm16558090