Control-M/EM and Control-M/Server PAOST.9.0.21.301

BMC Software is releasing Control-M/EM and Control-M/Server PAOST.9.0.21.301, which corrects security vulnerability CVE-2025-1094 (CTM-12976). This vulnerability affects the PostgreSQL 15.3 database client that is installed on the following components, which are connected to a BMC-supplied and dedicated or user-provided and existing PostgreSQL database server:

  • Control-M/EM and Control-M/Server 9.0.21.20x on AIX
  • Control-M/EM and Control-M/Server 9.0.21.30x on Linux and Windows

You do not need to install this patch on both components if you installed this patch on a Control-M Full Installation.

Important

  • Verify that the following components are installed before you install this patch:
    • (AIX only) Control-M/EM or Control-M/Server 9.0.21.20x
    • (Windows and Linux only) Control-M/EM or Control-M/Server 9.0.21.30x
  • (BMC dedicated PostgreSQL database server only) Verify that PostgreSQL 15.3 is installed, as described in Upgrading the PostgreSQL Database Server.

Installing Control-M/EM and Control-M/Server PAOST.9.0.21.201 on AIX

This procedure describes how to install Control-M/EM and Control-M/Server PAOST.9.0.21.301 on AIX.

Important

  • In a High Availability environment, you must install this patch on the active and non-active hosts.
  • You must install this patch on every host where a Control-M/EM server or Control-M/Server is installed.
  • You cannot run the patch installation script in the em tcsh shell.

Before You Begin

  • Verify that Control-M/EM or Control-M/Server 9.0.21.20x on AIX are installed before you install this patch.

Begin

  1. Log in to the account where Control-M/EM or Control-M/Server is installed.
  2. Download the Control-M PostgreSQL 15.3 database client patch for AIX 9.0.21.20x installation package from Control-M/EM 9.0.21 Patches.
  3. Save the downloaded installation package to a temporary directory on your local hard drive (not a network drive), and extract the package.
  4. From the extracted directory, run the following command:
    ./install_patch.sh
  5. Follow the on-screen instructions until the installation is complete.

Installing Control-M/EM and Control-M/Server PAOST.9.0.21.301 on Linux

This procedure describes how to install Control-M/EM and Control-M/Server PAOST.9.0.21.301 on Linux. 

Important

  • In a High Availability environment, you must install this patch on the active and non-active hosts.
  • You must install this patch on every host where a Control-M/EM server or Control-M/Server is installed.
  • You cannot run the patch installation script in the em tcsh shell.

Before You Begin

  • Verify that Control-M/EM or Control-M/Server 9.0.21.30x on Linux are installed before you install this patch.

Begin

  1. Log in to the account where Control-M/EM or Control-M/Server is installed.
  2. Download the Control-M PostgreSQL 15.3 database client patch for Linux 9.0.21.30x installation package from Control-M/EM 9.0.21 Patches.
  3. Save the downloaded installation package to a temporary directory on your local hard drive (not a network drive), and extract the package.
  4. From the extracted directory, run the following command:
    ./install_patch.sh
  5. Follow the on-screen instructions until the installation is complete.

Installing Control-M/EM and Control-M/Server PAOST.9.0.21.301 on Windows

This procedure describes how to install Control-M/EM and Control-M/Server PAOST.9.0.21.301 on Windows.

Important

  • In a High Availability environment, you must install this patch on the active and non-active hosts.
  • You must install this patch on every host where a Control-M/EM server or Control-M/Server is installed.

Before You Begin

  • Verify that Control-M/EM or Control-M/Server 9.0.21.30x on Windows are installed before you install this patch.

Begin

  1. Log in to the account where Control-M/EM or Control-M/Server is installed.
  2. Download the Control-M PostgreSQL 15.3 database client patch for Windows 9.0.21.30x installation package from Control-M/EM 9.0.21 Patches.
  3. Save the downloaded installation package to a temporary directory on your local hard drive (not a network drive), and extract the package.
  4. From the extracted directory, run the following command:
    install_patch.bat
    Follow the on-screen instructions until the installation is complete.
  5. In a High Availability environment, repeat steps 3–5 on the non-active environment.
    Verify that the Control-M/EM Configuration Agent on the non-active environment is up after the installation completes.

Uninstalling Control-M/EM and Control-M/Server PAOST.9.0.21.301 from Linux or AIX

This procedure describes how to uninstall Control-M/EM and Control-M/Server PAOST.9.0.21.301 from Linux or AIX. 

Important

  • In a High Availability environment, you must uninstall this patch from the active and non-active hosts.
  • You cannot run the patch uninstallation script in the em tcsh shell.

Begin

  1. Log in to the account where Control-M/EM or Control-M/Server is installed.
  2. Navigate to one of the following directories:
    • Control-M/EM: <EM_HOME>/patches/PAOST.<Version>
    • Control-M/Server: <Control-M/Server_Home>/patches/PAOST.<Version>
  3. Run the following command:
    uninstall_patch.sh
  4. In a High Availability environment, run the following command on the non-active environment:
    uninstall_patch.sh
    Verify that the Control-M/EM Configuration Agent on the non-active environment is up after the installation completes.

Uninstalling Control-M/EM and Control-M/Server PAOST.9.0.21.301 from Windows

This procedure describes how to uninstall Control-M/EM and Control-M/Server PAOST.9.0.21.301 from Windows. 

Important

In a High Availability environment, you must uninstall this patch from the active and non-active hosts.

Begin

  1. Log in to the account where Control-M/EM or Control-M/Server is installed.
  2. Navigate to one of the following directories:
    • Control-M/EM: <EM_HOME>\patches\PAOST.<Version>
    • Control-M/Server: <Control-M/Server_Home>\patches\PAOST.<Version>
  3. Run the following command:
    uninstall_patch.bat
  4. In a High Availability environment, run the following command on the non-active environment:
    uninstall_patch.sh
    Verify that the Control-M/EM Configuration Agent on the non-active environment is up after the installation completes.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*