IBM Support

Tivoli Netcool/OMNIbus_GUI 8.1.0 Fix Pack 41 Interim Fix 1, 8.1.0-TIV-NCOMNIbus_GUI-FP0041-IF001

Download


Downloadable File

File linkFile sizeFile description
   
   
   
   
   

Abstract

This interim fix addresses security vulnerabilities in js-cookie (CVE-2026-46625), immutable (CVE-2026-59879, CVE-2026-59880), and log4j (CVE-2026-49844) in Tivoli Netcool/OMNIbus Web GUI 8.1.0 Fix Pack 41.

Prerequisites

This interim fix requires IBM Tivoli Netcool/OMNIbus Web GUI V8.1.0 Fix Pack 41 to be installed.

Installation Instructions

The included ZIP file contains modified versions of the following files:

$JazzSMHOME/profile/installedApps/${jazzsm.was.cell}/isc.ear/OMNIbusWebGUI.war/client-assets/
WEB-INF/lib/log4j-api-2.25.5.jar
WEB-INF/lib/log4j-core-2.25.5.jar
WEB-INF/lib/version.jar

where $JazzSMHOME is the root JazzSM installation directory and ${jazzsm.was.cell} is the cell name (JazzSMNode01Cell).

Steps for installing the fix on a Unix platform:

  1. Stop the JazzSM server
    e.g. $JazzSMHOME/profile/bin/stopServer.sh server1
  2. Unzip the interim fix file
    e.g. unzip WebGUI-81041-InterimFix001.zip
  3. Execute the install_IF script
    e.g. ./install_IF.sh -dash $JazzSMHOME/ui -webgui $WEBGUI_HOME
  4. Start the JazzSM server
    e.g. $JazzSMHOME/profile/bin/startServer.sh server1

Note: The original files are backed up to $WEBGUI_HOME/backup/OMNIbus-v8.1.0-WebGUI-FP41_IF001
where $WEBGUI_HOME is the root OMNIbus Web GUI installation directory.

Verifying the Interim Fix

  1. Log onto WebGUI.
  2. Verify the WebGUI fix pack and interim fix version.

Uninstallation Instructions

  1. Move to the backup directory
    e.g. cd $WEBGUI_HOME/backup/OMNIbus-v8.1.0-WebGUI-FP41_IF001
  2. Execute the uninstall script
    e.g. ./uninstall_IF.sh -dash $JazzSMHOME/ui -webgui $WEBGUI_HOME

Problems Solved

DT: CSP known issue - Defect Ticket number
WEBGUINOI: Jira issue number

WEBGUINOI-507
Short Description: Fix js-cookie vulnerability for CVE-2026-46625.
Summary: PSIRT: CVE-2026-46625. Upgrades js-cookie to remediate the reported security vulnerability.

WEBGUINOI-533
Short Description: Upgrade immutable from 3.8.3 to 4.3.9 to fix CVE-2026-59879 and CVE-2026-59880.
Summary: PSIRT: CVE-2026-59879, CVE-2026-59880. Upgrades immutable.js from version 3.8.3 to 4.3.9 to remediate the reported security vulnerabilities.

WEBGUINOI-536
Short Description: Upgrade log4j to 2.25.5 to remediate CVE-2026-49844.
Summary: PSIRT: CVE-2026-49844. Upgrades log4j from version 2.25.4 to 2.25.5 to remediate the reported security vulnerability.

On
[{"DNLabel":"8.1.0-TIV-NCOMNIbus_GUI-FP0041-IF001","DNDate":"01 Aug 2026","DNLang":"English","DNSize":"3443988 B","DNPlat":{"label":"Linux","code":"PF016"},"DNURL":"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7ETivoli&product=ibm/Tivoli/Tivoli+Netcool+OMNIbus&release=8.1.0.41&platform=All&function=fixId&fixids=8.1.0-TIV-NCOMNIbus_GUI-FP0041-IF001","DNURL_FTP":"","DDURL":null}]

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSSHTQ","label":"Tivoli Netcool\/OMNIbus"},"ARM Category":[{"code":"a8m500000008a1DAAQ","label":"WebGUI"}],"Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF033","label":"Windows"}],"Version":"8.1.0"}]

Product Synonym

OMNIbus_GUI 8.1.0; OMNIbus_GUI 8.1.0.41; OMNIbus_GUI 8.1.0 FP0041; OMNIbus_GUI 8.1.0 Fix Pack 41; OMNIbus_GUI 8.1.0 IF001; OMNIbus_GUI 8.1.0 Interim Fix 1; OMNIbus_GUI 8.1.0.41 IF001; Web GUI 8.1.0; Web GUI 8.1.0.41; Web GUI 8.1.0 Fix Pack 41; Web GUI 8.1.0 FP0041; Web GUI 8.1.0 Interim Fix 1; 8.1.0-TIV-NCOMNIbus_GUI-FP0041-IF001

Problems (APARS) fixed
WEBGUINOI-507; WEBGUINOI-533; WEBGUINOI-536

Document Information

Modified date:
02 August 2026

UID

ibm17282326

Page Feedback