Control-M/Agent PAFZ4.9.0.21.001


BMC Software is releasing Control-M/Agent patch PAFZ4.9.0.21.001, which corrects the following security vulnerabilities that are detected in binaries that are used by Control-M/Agent 9.0.21.000 on UNIX and Windows.

Information
Important
  • Verify that Control-M/Agent 9.0.21 is ​​​installed before you install this patch. This patch is cumulative. You do not need to install any previous patches.
  • Control-M/Agents are not impacted by the vulnerabilities detected in the binaries. Nevertheless, patch PAFZ4.9.0.21.001 replaces the vulnerable binaries in the Agent package.

Corrected Problems

The following table describes the problems that are corrected in Control-M/Agent PAFZ4.9.0.21.001.

Tracking NumberDescription

CTM-7496

Vulnerabilities are detected in Installer.jar 9.0.21 in the uninstall folders.

CTM-7494

The following vulnerabilities are detected in NodeJs:

  • CVE-2022-32215
  • CVE-2022-32214
  • CVE-2022-32213

CTM-7416

The CVE-2022-37614 vulnerability is detected in the Control-M Automation CLI.

Installing Control-M/Agent Patch PAFZ4.9.0.21.001 on UNIX

This procedure describes how to install patch Control-M/Agent patch PAFZ4.9.0.21.001 on UNIX.

Before You Begin

  • Verify that Control-M/Agent 9.0.21 is installed. 
  • Verify that Control-M jobs are not running on Control-M/Agent.

Begin

  1. Download the installation package from Control-M/Agent 9.0.21 Patches.
  2. Log in to the account where Control-M/Agent is installed, copy the installation package to a temporary directory on your local hard drive (not a network drive), and then extract the package.
  3. Set execution flags for the patch installation file using the following command:
    chmod +x PAFZ4.9.0.21.001_<platform>_INSTALL.BIN
  4. Run the following script from the Control-M/Agent Home directory:
    <temporary directory>/PAFZ4.9.0.21.001_<platform>_INSTALL.BIN
  5. Follow the on-screen instructions until the installation is complete.

Installing Control-M/Agent Patch PAFZ4.9.0.21.001 on Windows

This procedure describes how to install patch Control-M/Agent patch PAFZ4.9.0.21.001 on Windows.

Before You Begin

  • Verify that Control-M/Agent 9.0.21 is installed. 
  • Verify that Control-M jobs are not running on Control-M/Agent.

Begin

  1. Download the installation package from Control-M/Agent 9.0.21 Patches.
  2. Log in to the account where Control-M/Agent is installed, copy the installation package to a temporary directory on your local hard drive (not a network drive), and then extract the package.
  3. From the Control-M/Agent home directory, run the following command:
  4. <temporary directory>\PAFZ4.9.0.21.001_windows_x86_64.exe

Uninstalling Control-M/Agent Patch PAFZ4.9.0.21.001 from UNIX

This procedure describes how to uninstall Control-M/Agent patch PAFZ4.9.0.21.001 from UNIX.

Before You Begin

  • Verify that Control-M jobs are not running on Control-M/Agent.

Begin

  1. Log in as the Control-M/Agent user.
  2. Type the following command:
    ${HOME}/install/PAFZ4.9.0.21.001/unInstall_PAFZ4.9.0.21.001.sh

Uninstalling Control-M/Agent Patch PAFZ4.9.0.21.001 from Windows

This procedure describes how to uninstall Control-M/Agent patch PAFZ4.9.0.21.001 from Windows.

Before You Begin

Verify that Control-M jobs are not running on Control-M/Agent.

Begin

  1. Log in as the Control-M/Agent administrator.
  2. Navigate to the Control-M/Agent home directory.
  3. Run the following command:
    <AGENT_HOME>\install\PAFZ4.9.0.21.001\uninstall.bat

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

Control-M 9.0.21