Helix Control-M/Agent PAFZ4.9.0.21.081

BMC Software is releasing patch PAFZ4.9.0.21.081 to resolve several security vulnerabilities detected in binaries used by Helix Control-M/Agents.

Note

Helix Control-M/Agents are not impacted by the vulnerabilities detected in the binaries. Nevertheless, patch PAFZ4.9.0.21.081 replaces the vulnerable binaries in the Agent package.

Corrected Problems

The following table describes the corrected problems that are fixed in PAFZ4.9.0.21.081:

Tracking number

Description

CTM-7496

Vulnerabilities are detected in Installer.jar 9.0.21 in the uninstall folders.

CTM-7494

The CVE-2022-32215, CVE-2022-32214, CVE-2022-32213 vulnerabilities are detected in NodeJs.

CTM-7416

The CVE-2022-37614 vulnerability is detected in the Control-M Automation CLI.

Installing the Patch

This procedure describes how to install patch PAFZ4.9.0.21.081 on your Agent hosts.

Before You Begin

  • Ensure that your Helix Control-M/Agents are of version 9.0.21.080.
  • Verify that Control-M jobs are not running on Control-M/Agent.

Begin

  1. From the Configuration domain in Helix Control-M, clickI_Web_Dropdown_20x18.png
  2. Select Agents.
  3. Click Install Agent.
  4. Select the operating system where your Agent is installed.
  5. Do one of the following:
    • Windows:
      1. Log into the target Agent host with Administrative privileges.
      2. Download the patch PAFZ4.9.0.21.081 installation file from the location in the provided link and save it on the target Agent host.
    • Linux:
      1. Copy the cURL or wget command for patch PAFZ4.9.0.21.081 to the clipboard by clicking one of the provided links.
      2. Run the copied command on the Agent host to download the installation file.
      3. Verify that the installation file has execute permissions.
  6. Set the Java environment variable with one of the following:
    • Linux: From a command line, type one of the following:
      • shell/bash:  export BMC_INST_JAVA_HOME=<java_11_directory>
      • csh/tcsh:  setenv BMC_INST_JAVA_HOME <java_11_directory>
    • Windows: From a command line, type the following:
      set BMC_INST_JAVA_HOME="< java_11_directory >"

  7. Run the following installation file from the same session or command prompt where the Java environment variable was defined, and follow the on-screen instructions:

    • Linux: <file_path>/PAFZ4.9.0.21.081_Linux-x86_64_INSTALL.BIN
    • Windows: <file_path>/PAFZ4.9.0.21.081_windows_x86_64.exe

    Note

    For a silent (non-interactive) installation, add the -s option to the end of the command.

Uninstalling the Patch from Linux

This procedure describes how to uninstall patch PAFZ4.9.0.21.081 from Linux.

Before You Begin

  • Verify that Control-M jobs are not running on Control-M/Agent.

Begin

  1. Log in as the Control-M/Agent user.
  2. Stop Control-M/Agent with the following command:
    shut-ag
  3. Type the following command:
    ${HOME}/install/PAFZ4.9.0.21.081/unInstall_PAFZ4.9.0.21.081.sh
  4. Start the Control-M/Agent with the following command:
    start-ag

Uninstalling the Patch from Windows

This procedure describes how to uninstall patch PAFZ4.9.0.21.081 from Windows.

Before You Begin

  • Verify that Control-M jobs are not running on Control-M/Agent.

Begin

  1. Log in as the Control-M/Agent administrator.
  2. Navigate to the Control-M/Agent home directory.
  3. Run the following command:
    <AGENT_HOME>\install\PAFZ4.9.0.21.081\uninstall.bat

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*