IBM Support

IBM Jazz for Service Management (JazzSM) v1.1.3 Fixpack8 (1.1.3-TIV-JazzSM-multi-FP008)

Download


Downloadable File

File link File size File description

Abstract

This fix pack is a cumulative fix release and addresses some new APARs and internally found issues since the release of IBM Jazz for Service Management (JazzSM) v1.1.3

Prerequisites

This Fix Pack requires IBM Jazz for Service Management (JazzSM) v1.1.3 GA release
B.1 IBM Installation Manager (IIM)
------------------------------------------

IBM Installation Manager is used to install, uninstall, update and modify the JazzSM offering.
B.2 IBM WebSphere Application Server (WAS)
---------------------------------------------------------

IBM WebSphere Application Server is required by Jazz for Service Management. Please refer to Jazz for Service Management release notes for details of supported versions.
IBM WebSphere SDK Java Technology Edition package is available from WebSphere Application Server and must be installed through Installation Manager using "Install" or "Update" option, as appropriate. The IBM WebSphere SDK Java version must be supported by the installed/installing WebSphere Application Server. Please refer to WebSphere Application Server release notes for details of supported versions.
See the following sample of IBM WebSphere Application Server release notes.
- For IBM WebSphere Application Server v8.5.5.7 release notes, see http://www.ibm.com/support/docview.wss?uid=swg24040533
- For IBM WebSphere Application Server v8.5.5.13 release notes, see http://www.ibm.com/support/docview.wss?uid=swg24044501
- For IBM WebSphere Application Server v8.5.5.14 release notes, see https://www.ibm.com/support/docview.wss?uid=ibm10726035
- For IBM WebSphere Application Server v8.5.5.16 release notes, see https://www.ibm.com/support/pages/85516-websphere-application-server-v855-fix-pack-16
- For IBM WebSphere Application Server v8.5.5.17 release notes, see https://www.ibm.com/support/pages/85517-websphere-application-server-v855-fix-pack-17
- For IBM WebSphere Application Server v9.0.5.1 release notes, see https://www.ibm.com/support/pages/node/886233
- For IBM WebSphere Application Server v9.0.5.3 release notes, see https://www.ibm.com/support/pages/node/5694825
Download WAS 8.5.5.17 from https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%2FWebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=All&platform=All&function=fixId&fixids=8.5.5-WS-WAS-FP017-part1,8.5.5-WS-WAS-FP017-part2,8.5.5-WS-WAS-FP017-part3&includeSupersedes=0
  To install - unzip all 3 parts into the same directory
     8.5.5-WS-WAS-FP017-part1.zip
     8.5.5-WS-WAS-FP017-part2.zip
     8.5.5-WS-WAS-FP017-part3.zip
Download full traditional WAS 9.0.5.1 from https://w3-03.ibm.com/software/xl/download/ticket.wss and find by part number CC3NXML
  To install - unzip IBM WebSphere Application Server V9.0.5.1 Multiplatform Multilingual (CC3NXML)
     was.repo.90501.base.zip
Download WAS 9.0.5.3 from https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EWebSphere&product=ibm/WebSphere/WebSphere+Application+Server&release=9.0.5.3&platform=All&function=fixId&fixids=9.0.5-WS-WAS-FP003&includeSupersedes=0
  To install - unzip WebSphere Application Server (9.0.5.3, All platforms)
     9.0.5-WS-WAS-FP003.zip

Please refer to the Installation Prerequisites for minimum and maximum requirement details of supported versions.
see https://www.ibm.com/support/knowledgecenter/SSSHTQ_8.1.0/com.ibm.netcool_OMNIbus.doc_8.1.0/webtop/wip/concept/web_ins_prerequisites.html
B.3 IBM DB2 (DB2)
------------------------------------------

IBM DB2 is a database server and may be used in cluster environments, to support load balancing architecture. Please refer to Jazz for Service Management release notes for details of supported versions.
 
C. Supported browsers & JREs
--------------------------------------
For supported JazzSM browsers and JREs, please refer to the following link:
https://www.ibm.com/software/reports/compatibility/clarity/osForProduct.html
D. Supported Operating Systems
---------------------------------------------
For supported JazzSM browsers and JREs, please refer to the following link:
https://www.ibm.com/software/reports/compatibility/clarity/osForProduct.html

Installation Instructions

The installation of this fix pack is allowed on DASH 3.1.3 (Or CP1 to CP7) or DASH 3.1.3 fixpack1 to fixpack7 or DASH 3.1.3.1 CP1 or DASH 3.1.3.5 CP1 or DASH 3.1.3.6 iFix01

The installation of this patch will back up all patched files before updating them.
Important Notes:
1) This fix pack may overwrite any previously applied test patches.  If having any test patches, confirm that they are included in the fix pack before applying.
2) You must run the fix pack as the same user who installed base version of Jazz for Service Management.
3) If using a High Availability cluster, be sure to apply the patch to all nodes.
4) Ensure to take backup of JazzSM and JazzSM Profile (in case profile folder created out of JazzSM directory) directory before installing DASH 3.1.3.8 fix pack
To apply DASH v3.1.3.8:
     1)Mandatory to set JazzSM profile to use Java 1.8 if not already set
        If Java 1.8 is not installed, install through IBM Installation Manager by pointing to WAS installation files repository
           ex: Go to WAS installed path and then bin directory (Below are only the examples, please provide proper sdkName)
             ./managesdk.sh -setCommandDefault -sdkName 1.8_64
             ./managesdk.sh -setNewProfileDefault -sdkName 1.8_64
             ./managesdk.sh -enableProfile -profileName JazzSMProfile -sdkname 1.8_64  (Execute this step if profile already installed)
    2) Download 1.1.3-TIV-JazzSM-multi-FP008 from IBM Fixcentral
    3) Create a temporary folder (e.g. /tmp/fixpack or C:\fixpack) and unzip the fix pack zip into it.
    4) Open IBM Installation Manager (IIM) and follow installation process to upgrade DASH to v3.1.3.8
    5) After successful upgrade, open command prompt and go to <JazzSM installed path>/ui/bin and run "consolecli.sh/bat Version" and confirm below output shows
            ./consolecli.sh Version
                Dashboard Application Services Hub version:  3.1.3.8-202009110429
Note: Upgrade also can be done using silent response files (/tmp/fixpack/responsefiles)

Problems Solved

Issues and Enhancements addressed in IBM Jazz for Service Management v3.1.3 Fixpack8:
--------------------------------------------------------------------------------------------------------------
Enhancements:
------------------
IJ27357 - Topology Lite Widget showing None in font size 10
IJ27856 - Include wimconfig.xml file in consoleLogcollector based logs
IJ27921 - Include security.xml and ssl.client.props files in consoleLogcollector based logs
IJ27904 - Enable "Print" toolbar option(icon under Action menu) for TopologyLite widget
IJ27914 - Enable Up/Down  Refresh toolbar for Topology Lite widget
Defects:
----------
IJ24750 - Business logic failure vulnerability when importing package into Dashboard Application Services Hub
IJ24996 -  Reflected cross-site scripting vulnerabilities arise when data is copied from a request and copied into application response   
IJ26000 - Dashboard Application Services Hub credential store page is vulnerable to CSRF attack
IJ25902 - No Secure flag for cookies created by Dashboard Application Services Hub
IJ25897 - No HTTPOnly flag for cookies created by Dashboard Application Services Hub
IJ25901 - Zip slip vulnerability noticed when importing dashboards zip file into Dashboard Application Services Hub
IJ25246 - Remote provider connection sends password in clear text in Jazz for Service Management profile logs
IJ27920 -  Updated Log4J library version to 2.13.3
IJ27919 - Updated ActiveMQ library version to 5.15.13
IJ25673 -  Dashboard Application Services Hub URI's added to the "URIS_TO_AVOID_CSRF_CHECK" console property, still result in authorization failure
IJ25047 -  XSS Vulnerability noticed when creating new catalog or editing existing catalog
IJ14663 - Console integration pages in Dashboard Application Services Hub overwrites existing widgets instead of opening in new tab
IJ25829 - When opening connection pages in Dashboard Application Services Hub, the java process occupies 100% of cpu usage.
IJ27918 - Removed struts-legacy.jar from DASH installation and updated struts.jar to latest version.
IJ27917 - Maximize default Topology Lite widget, Zoom In or Zoom Out does not support centralized display unless Fit Contents is clicked on
IJ26107 - Topology lite widget layout display is off when chosen back and forth
IJ25903 - Topology lite widget shows blank page instead of none
IJ27916 - Extra Tab on Topology/Topology Lite Widget Display as Table view
IJ27906 - Reflected XSS vulnerability in Search field of Dashboard Application Services Hub console
IJ27903 -  Unable to leave portlet edit mode. Dashboard Application Service Console is frozen
IJ26704 -  Unable to connect data providers when special character is part of password.
IJ27844 - Console Integration pages fail to open in a new tab while using page toolbar option "Open Page in New Tab"
IJ27838 - Add "/ibm/console/navigation.do " as a default for the URIS_TO_AVOID_CSRF_CHECK console property
IJ26428 - 'URIS_TO_AVOID_CSRF_CHECK' property fails to allowlist Dashboard Application Services Hub java security check url.
IJ27837 - Bundle IBM Installation Manager Version (IIM) v1.9.1.3
IJ27234 - Change password page does not have server side validation.
IJ27836 -  Updated license files with "Websphere Application Services"  v9.* entry.

On
[{"DNLabel":"1.1.3-TIV-JazzSM-multi-FP008","DNDate":"18 Sep 2020","DNLang":"English","DNSize":"99999999 B","DNPlat":{"label":"Linux","code":"PF016"},"DNURL":"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7ETivoli&product=ibm/Tivoli/Jazz+for+Service+Management&release=All&platform=All&function=all","DNURL_FTP":"","DDURL":null}]

Document Location

Worldwide

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEKCU","label":"Jazz for Service Management"},"ARM Category":[{"code":"a8m500000008bsvAAA","label":"DASH"}],"ARM Case Number":"","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF033","label":"Windows"}],"Version":"3.1.3","Line of Business":{"code":"LOB45","label":"Automation"}}]

Problems (APARS) fixed
IJ24750;IJ24996;IJ26000;IJ25902;IJ25897;IJ25901;IJ25246;IJ27920;IJ27919;IJ25673;IJ25047;IJ14663;IJ25829;IJ27918;IJ27917;IJ26107;IJ25903;IJ27916;IJ27914;IJ27906;IJ27904;IJ27903;IJ27856;IJ26704;IJ27844;IJ27838;IJ26428;IJ27837;IJ27357;IJ27234;IJ27836;IJ27921;

Document Information

Modified date:
24 November 2020

UID

ibm16332933

Page Feedback