Control-M Application Pack PA1CM.9.0.20.205

BMC Software is alerting you to a new CVE (CVE-2022-22965) in Control-M Application Pack version 9.0.20 and is announcing the release of patch PA1CM.9.0.20.205 which corrects the problem on Control-M Application Pack version 9.0.20.200 by updating the Spring Framework to version 5.3.18.

Note: This patch requires Control-M Application Pack version 9.0.20.200. If you are using Control-M Application Pack lower than version 9.0.20.200, see Upgrading Control-M Application pack on UNIX or Upgrading Control-M Application Pack on Windows. 

Corrected Problems

The following table describes the corrected problems that are fixed in PA1CM.9.0.20.205:

Tracking number

Description

Included in patch

CTM-6693

Control-M Application Pack 9.0.20.200 is vulnerable to CVE-2022-22965

PA1CM.9.0.20.205

CTM-5905

Control-M Application Integrator jobs fail if configured to run an AWS service and the authentication type is set to IAM Role.

Note: This fix requires the installation of PA1CM.9.0.20.201 on the Control-M/EM Server as described in the Release Notes for patch PA1CM.9.0.20.201.

PA1CM.9.0.20.201

CTM-5982

Control-M Application Pack jobs remain in executing status if the END_TIME property is missing in the response sent by a plug-in, such as Control-M for Databases.

PA1CM.9.0.20.201

CTM-5583

Control-M AWS Step Function jobs fail if the step function has more than 100 state machines.

PA1CM.9.0.20.201

CTM-6212

In Control-M Application Integrator jobs, when an Azure service response is Token is expiring, authentication tokens do not refresh.

PA1CM.9.0.20.201

CTM-5909

(Windows and Linux only) Control-M Application Pack now supports Google Cloud Platform (GCP) based integrations.

To apply this enhancement, you must install both patches, PA1CM.9.0.20.205 and PAKAI.9.0.20.201.

Note: To apply this enhancement, you must install patch PAKAI.9.0.20.201 as described in the Release Notes for patch PA1CM.9.0.20.201.

PA1CM.9.0.20.201

Installing the Patch on UNIX

This procedure describes how to install the patch PA1CM.9.0.20.205 on UNIX.

Before You Begin

Begin

  1. Log in as the Control-M/Agent user account.
    NOTE: If Control-M/Agent was installed with user root, you must log in as user root every time you start up or shut down the Control-M/Agent throughout this procedure.
  2. Stop Control-M/Agent by typing the following command:
    shut-ag
  3. AIX only: Remove unused libraries from the memory, by typing the following command as a root user:
    /usr/sbin/slibclean
  4. Create a temporary directory.
    EXAMPLE: <Agent_home_directory>/PA1CM.9.0.20.205
  5. Extract the downloaded .tar.Z file into the temporary directory by typing the following command:
    tar -xf PA1CM.9.0.20.205_unix.tar.Z
  6. Navigate to the temporary directory and run the following command:
    setup.sh
  7. Start Control-M/Agent by typing the following command:
    start-ag

Installing the Patch on Windows

This procedure describes how to install patch PA1CM.9.0.20.205 on Windows.

Before You Begin

Begin

  1. Stop the Control-M/Agent services.
  2. Create a temporary directory.
    EXAMPLE: <Agent_home_directory>\PA1CM.9.0.20.205
  3. Extract PA1CM.9.0.20.205_windows_x86_64.zip to the temporary directory.
  4. Run PA1CM.9.0.20.205_windows_x86_64.exe.
  5. Start the Control-M/Agent service.

Uninstalling the Patch from UNIX

This procedure describes how to uninstall patch PA1CM.9.0.20.205 from UNIX.

Before You Begin

  • Verify that Control-M jobs are not running on the Control-M/Agent. 

Begin

  1. Log in as the Control-M/Agent user account.
    NOTE: If Control-M/Agent was installed with user root, you must log in as user root every time you start up or shut down the Control-M/Agent throughout this procedure
  2. Stop Control-M/Agent by typing the following command:
    shut-ag
  3. If you are using an AIX operating system, remove unused libraries from memory, by typing the following command as a root user:
    /usr/sbin/slibclean
  4. Navigate to <Agent_home_directory>/install/PA1CM.9.0.20.205
  5. Type the following command:
    ./uninstall.sh

Uninstalling the Patch from Windows

This procedure describes how to uninstall patch PA1CM.9.0.20.205 from Windows.

Before You Begin

  • Verify that Control-M jobs are not running on the Control-M/Agent.

Begin

  1. Log on to the Control-M/Agent host computer as a user with administrator privileges.
  2. Stop the Control-M/Agent service.
  3. From the Control Panel, select Programs > Uninstall a Program.
  4. Select Control-M Application Pack 9.0.20.200 Patch 2 and click Uninstall.
  5. Start the Control-M/Agent service.

Upgrading Control-M Application Pack on UNIX

This procedure describes how to upgrade to Control-M Application Pack version 9.0.20.200 on Control-M/Agent on UNIX.

Before You Begin

  • Stop all jobs running on Control-M/Agent.

Begin

  1. Stop the Control-M/Agent with the following command:

    $CONTROLM/scripts/shut-ag -u <agentUser> -p all

  2. Obtain the Control-M Application Pack version 9.0.20.200 installation files from the EPD or FTP, and extract the files from the temporary directory that you created.
    • If the Control-M/Agent was installed with root user, log in as root user every time you start or shut down the Control-M/Agent throughout this procedure.

    • (AIX only) Type the following command as a root user to remove unused libraries:

      /usr/sbin/slibclean

  3. Use one of the following modes:
    • Display: If you install using GUI or XServer, set your DISPLAY environment variable.
    • Console: It is not necessary to set DISPLAY.

  4. Activate the installation script with the following command:

    <source_path>/setup.sh

  5. Do one of the following:
    • Interactive install: Follow the on-screen instructions until the installation is complete.
    • Automatic install: Do the following:
      1. Follow the on-screen instructions until the Summary window appears.
      2. Click Generate, select a location to create the XML parameter file, and click Yes.
      3. Copy the XML parameter file to a network location that is accessible to all computers where you want to perform an automatic installation.

      4. Type the following command to run the installation script:

        <source_path>/setup.sh -silent <filename.xml>

  6. End the session.

  7. Start a new session and restart the Control-M/Agent with the following command:

    $CONTROLM/scripts/start-ag -u <agentUser> -p all

Upgrading Control-M Application Pack on Windows

This procedure describes how to upgrade to Control-M Application Pack version 9.0.20.200 on Control-M/Agent on Windows.

Before You Begin

  • Stop all jobs running on Control-M/Agent.

Begin

  1. Log in to Control-M/Agent as an Administrator.
  2. From the Services application, right click on Control-M Agent and click Stop.
  3. Download the Control-M Application Pack version 9.0.20.200 installation files that you obtained from EPD or FTP.
  4. Unzip the files and double-click setup.exe.
  5. Do one of the following:
    • Interactive install: Follow the on-screen instructions until the installation is complete.
    • Automatic install: Do the following:
      1. Follow the on-screen instructions until the Summary window.

      2. Click Generate, select the location to create the XML file, and click Yes.

        The XML file is only relevant for computers with the same Agent instance name. For Agents that have a different instance name, create a separate XML file for each Agent.

      3. Copy the XML file to a network location that is accessible to all computers where you want to perform an automatic installation.

      4. Run the following installation script:

        <source_path>\setup.exe -silent <silent.xml>

  6. From the Services application, right click on Control-M Agent and click Start.


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*