Helix Control-M/Agent PAFZ4.9.0.21.081
BMC Software is releasing patch PAFZ4.9.0.21.081 to resolve several security vulnerabilities detected in binaries used by Helix Control-M/Agents.
Note
Helix Control-M/Agents are not impacted by the vulnerabilities detected in the binaries. Nevertheless, patch PAFZ4.9.0.21.081 replaces the vulnerable binaries in the Agent package.
Corrected Problems
The following table describes the corrected problems that are fixed in PAFZ4.9.0.21.081:
Tracking number | Description |
---|---|
CTM-7496 | Vulnerabilities are detected in Installer.jar 9.0.21 in the uninstall folders. |
CTM-7494 | The CVE-2022-32215, CVE-2022-32214, CVE-2022-32213 vulnerabilities are detected in NodeJs. |
CTM-7416 | The CVE-2022-37614 vulnerability is detected in the Control-M Automation CLI. |
Installing the Patch
This procedure describes how to install patch PAFZ4.9.0.21.081 on your Agent hosts.
Before You Begin
- Ensure that your Helix Control-M/Agents are of version 9.0.21.080.
- Verify that Control-M jobs are not running on Control-M/Agent.
Begin
From the Configuration domain in Helix Control-M, click
Select Agents.
Click Install Agent.
Select the operating system where your Agent is installed.
Do one of the following:
Windows:
Log into the target Agent host with Administrative privileges.
Download the patch PAFZ4.9.0.21.081 installation file from the location in the provided link and save it on the target Agent host.
Linux:
Copy the cURL or wget command for patch PAFZ4.9.0.21.081 to the clipboard by clicking one of the provided links.
Run the copied command on the Agent host to download the installation file.
- Verify that the installation file has execute permissions.
Set the Java environment variable with one of the following:
Linux: From a command line, type one of the following:
shell/bash: export BMC_INST_JAVA_HOME=<java_11_directory>
- csh/tcsh: setenv BMC_INST_JAVA_HOME <java_11_directory>
Windows: From a command line, type the following:
set BMC_INST_JAVA_HOME="< java_11_directory >"
Run the following installation file from the same session or command prompt where the Java environment variable was defined, and follow the on-screen instructions:
- Linux: <file_path>/PAFZ4.9.0.21.081_Linux-x86_64_INSTALL.BIN
- Windows: <file_path>/PAFZ4.9.0.21.081_windows_x86_64.exe
Note
For a silent (non-interactive) installation, add the -s option to the end of the command.
Uninstalling the Patch from Linux
This procedure describes how to uninstall patch PAFZ4.9.0.21.081 from Linux.
Before You Begin
- Verify that Control-M jobs are not running on Control-M/Agent.
Begin
- Log in as the Control-M/Agent user.
Stop Control-M/Agent with the following command:
shut-ag- Type the following command:
${HOME}/install/PAFZ4.9.0.21.081/unInstall_PAFZ4.9.0.21.081.sh Start the Control-M/Agent with the following command:
start-ag
Uninstalling the Patch from Windows
This procedure describes how to uninstall patch PAFZ4.9.0.21.081 from Windows.
Before You Begin
- Verify that Control-M jobs are not running on Control-M/Agent.
Begin
- Log in as the Control-M/Agent administrator.
- Navigate to the Control-M/Agent home directory.
Run the following command:
<AGENT_HOME>\install\PAFZ4.9.0.21.081\uninstall.bat
Comments
Log in or register to comment.