Control-M/EM PANFT.9.0.20.238

BMC Software is releasing patch PANFT.9.0.20.238 to correct several problems in Control-M Web.

Note

You must have Control-M/EM 9.0.20.200 installed before you install this patch. 

You must install this patch on every environment where a Control-M/Enterprise Manager Server and Client are installed.

Corrected Problems

The following table describes the problems that are fixed in this patch:

Tracking number

Description

CTM-5907

Two jobs with the same name in a SMART folder but with different schedules display scheduling definitions incorrectly. For one of the jobs, the scheduling definitions are correct, but for the other job, no scheduling definitions are displayed.

CTM-9503

Reporting access control is not enforced properly for internal users.

In this bug, CVE-2024-1604 is detected.

CTM-9504

Installation directory access protection is insufficient for files in use by Control-M.

In this bug, CVE-2024-1605 is detected.

CTM-9802

A security vulnerability CVE-2024-1606 is detected in the Report naming functionality.

 Installing the Patch on Control-M/EM Server on UNIX/Linux

This procedure describes how to install patch PANFT.9.0.20.238 on UNIX/Linux.

Before You Begin

Begin

  1. Log in to the Control-M/EM Server machine as a Control-M/EM user.
  2. Copy the patch installation file that you obtained into a temporary directory.
  3. Set execution flags for the patch installation file using the following command:
    chmod +x PANFT.9.0.20.238_<platform>_INSTALL.BIN
  4. In a High Availability configuration, stop the Control-M/EM Configuration Agent on the non-active environment.
  5. Stop all Control-M/EM components by running the stop_all command.
  1. Run the following script from the Control-M/EM Home directory, and follow the on-screen instructions until the installation is complete.
    <temporary directory>/PANFT.9.0.20.238_<platform>_INSTALL.BIN
    In a High Availability configuration, perform this step on both the active environment and the non-active environment.
  2. Start all Control-M/EM components by running the start_all command.
    In a High Availability configuration, start with the active environment. 

Installing the Patch on Windows

This procedure describes how to install patch PANFT.9.0.20.238 on Windows.

Before You Begin

Begin

  1. In a High Availability configuration, stop the Control-M/EM Configuration Agent on the non-active environment.

  2. Stop the Control-M/EM Configuration Agent using the ctl command:

    ctl -mcs -C Config_Agent -all -cmd shutdown     
    Ensure that all Control-M/EM components are down.

  3. Double-click the downloaded PANFT.9.0.20.238 patch installation file, and follow the on-screen instructions until the installation is complete.
    In a High Availability configuration, perform this step on both the active environment and the non-active environment.
  1. Start the Control-M/EM Configuration Agent.
    In a High Availability configuration, start with the active environment.

Installing the Patch using Client Distribution on UNIX/Linux

This procedure describes how to install PANFT.9.0.20.238 using Client Distribution.

Before You Begin

Begin

  1. From the Control-M/Enterprise Manager server computer, navigate to the BIN directory:
    cd $EM_HOME%/bin
  2. Run the deploy_client_patch utility using the following command: 
    em deploy_client_patch -U <EM USER> -P <EM PASSWORD> <PATH_TO_TEMPORARY_DIRECTORY_WHERE_PATCH_WAS_DOWNLOADED>/PANFT.9.0.20.238_windows_x86_64.exe
  3. Log in to the CCM, and set the patch for deployment.
    1. From the Manage tab, click Client Distribution.
    2. Select the Enable Distribution Mode check box.
    3. For Distribute version, select 9.0.20.238.
    4. Log in to the Control-M client.
      A notification appears instructing you to install the patch. 
    5. Follow the on-screen instructions until the installation is complete.

Installing the Patch using Client Distribution on Windows

This procedure describes how to install PANFT.9.0.20.238 using Client Distribution.

Before You Begin

Begin

  1. On the Control-M/Enterprise Manager server computer, open a command line from <EM_HOME>\bin
  2. Run the deploy_client_patch utility using the following command:
    deploy_client_patch.bat -U <EM USER> -P <EM PASSWORD> <PATH_TO_TEMPORARY_DIRECTORY_WHERE_PATCH_WAS_DOWNLOADED>PANFT.9.0.20.238_windows_x86_64.exeExample:
    deploy_client_patch.bat -U emuser -P myPassword C:\PANFT.9.0.20.238\PANFT.9.0.20.238_windows_x86_64.exe
  3. Log in to the CCM, and set the patch for deployment.
    1. From the Manage tab, click Client Distribution.
    2. Select the Enable Distribution Mode check box.
    3. For Distribute version, select 9.0.20.238.
    4. Log in to the Control-M client.
      A notification appears instructing you to install the patch. 
    5. Follow the on-screen instructions until the installation is complete.

Uninstalling the Patch from UNIX/Linux

This procedure describes how to uninstall patch PANFT.9.0.20.238 from UNIX/Linux.

Begin

  1. Log in to the Control-M/EM Server machine as a Control-M/EM user.
  2. In a High Availability configuration, stop the Control-M/EM Configuration Agent on the non-active environment.
  3. Stop all Control-M/EM components by running the stop_all command.
  4. From the <USER_HOME>/install/PANFT.9.0.20.238 directory, run the following script:
    uninstall.sh
    In a High Availability configuration, perform this step on both the active environment and the non-active environment.
  5. Start all Control-M/EM components by running the start_all command.
    In a High Availability configuration, start with the active environment.

Uninstalling the Patch from Windows

This procedure describes how to uninstall patch PANFT.9.0.20.238 from Windows.

Begin

  1. In a High Availability configuration, stop the Control-M/EM Configuration Agent on the non-active environment.

  2. Stop the Control-M/EM Configuration Agent using the ctl command:

    ctl -mcs -C Config_Agent -all -cmd shutdown     
    Ensure that all Control-M/EM components are down.

  3. From Windows Settings > Apps > Apps & Features, select Control-M/Enterprise Manager 9.0.20.200 Patch 38 (<instance name>), and then select Uninstall.
    In a High Availability configuration, perform this step on both the active environment and the non-active environment.
  1. Start the Control-M/EM Configuration Agent.
    In a High Availability configuration, start with the active environment.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*