IBM Cloud Orchestrator Fix Pack 10 (2.5.0.10) for 2.5

Download

Downloadable File

File link	File size	File description

Abstract

IBM Cloud Orchestrator 2.5.0.10 has been made generally available and contains fixes to version 2.5.

Download Description

*Table of Contents*
Sections	Description
What's new	The Change history section provides an overview on what is new in this release with a description of any new functions or enhancements when applicable.
Impact assessment	The How critical is this fix section provides information related to the impact of this release to allow you to assess how your environment may be affected.
Prerequisites	The Prerequisites section provides important information to review prior to the installation of this release.
Download package	The Download package section provides the direct link to obtain the download package for installation in your environment.
Installation instructions	The Installation instructions section provides the installation instructions necessary to apply this release into your environment.
Known problems	The Known side effects section contains a link to the known problems (open defects) identified at the time of this release.

*Supporting Documentation*
Document	Description
Detailed System Requirements	Click to review the detailed system requirements information for a complete list of hardware requirements, supported operating systems, prerequisites and optional supported software, with component-level details and operating system restrictions.
IBM Knowledge Center	IBM Knowledge Center provides an entry point to product documentation. You can view, browse, and search online information related to the product.
Fix List	Click to review a complete list of the defects (APARs) resolved in this release including a list of resolved defects for the entire version family.

Prerequisites

Prerequisites include:

Review the Software prerequisites page in the IBM Knowledge Center to ensure your environment meets the minimum hypervisor and operating system requirements, especially if you are upgrading from a previous release of IBM Cloud Orchestrator.
Review the Prerequisites tab in the system requirements report for supported versions of Data Protection and Recovery, Databases and Process Management tools.

Installation Instructions

This fix pack can be installed as a fresh installation or as an upgrade of an existing installation. Follow the instructions in the tabs below.

Fresh installation of IBM Cloud Orchestrator

Step 1: Review the Installing topic in the IBM Knowledge Center.

---------------------------------------------------------------------------

Upgrade of IBM Cloud Orchestrator from version 2.5 or later

The following upgrade scenarios are supported:

IBM Cloud Orchestrator V2.5 -> IBM Cloud Orchestrator V2.5.0.10
IBM Cloud Orchestrator V2.5.0.1 -> IBM Cloud Orchestrator V2.5.0.10
IBM Cloud Orchestrator V2.5.0.1 Interim Fix 1 -> IBM Cloud Orchestrator V2.5.0.10
IBM Cloud Orchestrator V2.5.0.2 -> IBM Cloud Orchestrator V2.5.0.10
IBM Cloud Orchestrator V2.5.0.2 LA0005 or LA0006 -> IBM Cloud Orchestrator V2.5.0.10
IBM Cloud Orchestrator V2.5.0.3 -> IBM Cloud Orchestrator V2.5.0.10
IBM Cloud Orchestrator V2.5.0.4 -> IBM Cloud Orchestrator V2.5.0.10
IBM Cloud Orchestrator V2.5.0.4 with DirectDriver LA -> IBM Cloud Orchestrator V2.5.0.10
IBM Cloud Orchestrator V2.5.0.5 -> IBM Cloud Orchestrator V2.5.0.10
IBM Cloud Orchestrator V2.5.0.6 -> IBM Cloud Orchestrator V2.5.0.10
IBM Cloud Orchestrator V2.5.0.7 -> IBM Cloud Orchestrator V2.5.0.10
IBM Cloud Orchestrator V2.5.0.8 -> IBM Cloud Orchestrator V2.5.0.10
IBM Cloud Orchestrator V2.5.0.9 -> IBM Cloud Orchestrator V2.5.0.10

Step 1: Review the Upgrading from IBM Cloud Orchestrator V2.5 topic in the IBM Knowledge Center.

-------------------------------------------------------------------------------------------------------------

Migration of IBM Cloud Orchestrator from version 2.4.0.2 or later

The following migration scenarios are supported:

IBM Cloud Orchestrator V2.4.0.2 -> IBM Cloud Orchestrator V2.5.0.10
IBM Cloud Orchestrator V2.4.0.3 -> IBM Cloud Orchestrator V2.5.0.10
IBM Cloud Orchestrator V2.4.0.4 -> IBM Cloud Orchestrator V2.5.0.10
IBM Cloud Orchestrator V2.4.0.5 -> IBM Cloud Orchestrator V2.5.0.10

Step 1: Review the Migrating from IBM Cloud Orchestrator V2.4.0.2 or later topic in the IBM Knowledge Center.

Step 2: If you are migrating from an IBM Cloud Orchestrator 2.4.0.2 (or later) environment, review the During Migration and After Migration sections and apply the steps appropriate for your setup.

Note: All references to version 2.4.0.4 also apply to version 2.4.0.5 or later.

During Migration

SQL0964C error message

During migration the following message might be displayed:

SQL0964C  The transaction log for the database is full.  SQLSTATE=57011

To solve this problem, clear the transaction logs. For the procedure to clear transaction logs, see IBM DB2 Knowledge Center.

After Migration

Creating actions

If you added an action to a predefined toolkit in the IBM Cloud Orchestrator 2.4.0.2 environment and the action was not migrated in the IBM Cloud Orchestrator 2.5.0.10 environment, create the action manually by following the procedure described in Creating an action.

Download Package

*Download options*
Access type	Description
eAssemblies Parts List	Review eAssemblies Parts List for a list of part numbers you can download for this product.
IBM OEM software	IBM Software Group OEM offerings are designed for partners who develop and sell business solutions with embedded or bundled IBM middleware software. Clients with Flexible Contract Type (FCT) license purchases and IBM Business Partners must sign in to download the software package.
Fix Central	Click the HTTP link in the Download section below to obtain the release from Fix Central. Image directory contents 2.5.0-CSI-ICO-FP00010.tgz: IBM Cloud Orchestrator Version 2.5 Fix Pack 10 for Red Hat Enterprise Linux Multilingual 2.1.0.6-SCCM-IFIX07.tar: IBM SmartCloud Cost Management 2.1 Fix Pack 6 ifix07

How critical is this fix?

*Impact Assessment*
Impact	Description
Corrective	This is a maintenance release. It contains fixes for client-reported and internally found defects. CVE-2019-4399: IBM Cloud Orchestrator uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. CVE-2019-4398: IBM Cloud Orchestrator could allow a local user to obtain sensitive information from SessionManagement cookies. CVE-2019-0211: Apache HTTP Server publicly disclosed vulnerability. CVE-2019-4400: IBM Cloud Orchestrator could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. CVE-2019-0215 CVE-2019-0217 CVE-2019-0197 CVE-2019-0196 CVE-2019-0220: Apache HTTP Server publicly disclosed vulnerability. CVE-2019-2699 CVE-2019-2698 CVE-2019-2697 CVE-2019-2602 CVE-2019-2684 CVE-2019-10245: There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, 7.0.10.35 used by IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise. CVE-2019-4459: Malicious package usage in Python. CVE-2012-5351: ASoC - OpenSource issue CVE-2019-4394: ASoC - Injection.Mail CVE-2019-4396: ASoC -Injection.HttpResponseSplitting CVE-2019-11775 CVE-2019-11772 CVE-2019-2766 CVE-2019-2786 CVE-2019-2816 CVE-2019-2762 CVE-2019-2769 CVE-2019-7317 CVE-2019-4473 CVE-2019-11771 - IBM SDK, Java Technology Edition Quarterly CPU - Jul 2019
Test Results Close [x] Definitions Regression: An error in the Maintenance Delivery Vehicle (MDV) that produces incorrect or unexpected behavior causing a supported feature to stop functioning as designed. This includes: Coding errors that cause a regression Documentation or packaging problems that cause a regression Errors reported in a new function delivered in a MDV that cause a regression Incomplete: An error in the MDV has not regressed, but does not work as designed. This includes: Fixed APARs which did not solve the original problem but did not break anything new APARs reporting documentation errors, such as readme errors, that cause problems applying an MDV but do not lead to a regression Notes: Regression and incomplete APARs are considered fix-in-error or MDV-in-error *Definitions above apply only to valid APARs that result in product fixes (APARs returned as working-as-designed* are not assessed for being fix-in-error) Issues in major releases due to new functionality do not apply in this definition**	There are no known regressions to report.

Known Side Effects

**Review the following list of known issues and open defects:**
Review the Known errors and limitations section of the IBM Knowledge Center for issues related to this release.
Open defects Review the following list of open defects for IBM Cloud Orchestrator on the IBM Support Portal.

Change History

What's new

For information about the new features and enhancements, review the What is new in this release topic in the IBM Knowledge Center.

Effective Oct 14, 2019 IBM has announced the following changes in the entitlement of BigFix, which HCL acquired in June 2019:

To continue using BigFix for Patching, you must purchase BigFix from HCL or an authorized BigFix reseller. A replay of HCL’s BigFix roadmap can be found here: https://register.gotowebinar.com/register/5699647677344055565.

Please contact Mark Phinick at HCL for BigFix licensing information and pricing. Mark’s email is mark.phinick@hcl.com.

This entitlement change applies to the supported IBM Cloud Orchestrator versions 2.4 and 2.5, and is also applicable to the Standard Edition and Enterprise Edition variants of IBM Cloud Orchestrator.

          [{"DNLabel":"IBM Cloud Orchestrator 2.5 fixes","DNDate":"14 Oct 2019","DNLang":"English","DNSize":"22693800 KB","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7ETivoli&product=ibm/Tivoli/IBM+SmartCloud+Orchestrator&release=2.5.0&platform=All&function=all","DNURL_FTP":"","DDURL":null}]
          

Document Location

Worldwide

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SS4KMC","label":"IBM SmartCloud Orchestrator"},"Component":"","Platform":[{"code":"PF002","label":"AIX"}],"Version":"2.5.0.10","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

Tips