===============================================================================
Readme file for: IBM Platform Web Services
Product/Component Release: 9.1.3.2
Update name: Fix 489673
Fix ID: PWS9.1.3.2-build489673
D-APAR: P102568
Publication date: 11 June 2018
Last modified: 11 June 2018

This update fixes the following issues:
1. Upgrade jackson jars to fix security issue CVE-2018-7489.

================================================================================

=========================
CONTENTS
=========================

1. Abbreviations

2. About IBM Platform Web Services for SAS

3. Supported operating systems

4. Products or components affected

5. Installation and Configuration

6. Copyright

=========================
1. Abbreviations
=========================
N/A

=========================
2. About Platform Web Services
=========================
IBM Platform Web Services (Platform Web Services) is a web application launched by SAS on the SAS tc Server. It provides RESTful web services APIs to monitor and control LSF jobs, hosts, and queues. It also manages Platform Web Services users and permissions and audits user actions.

=========================
3. Supported operating systems
=========================
RHEL 7.x, 64 bit
Windows 2008/2008 R2/7/8/2012 R2/2016 X86_64
=========================
4. Products or components affected
=========================
platform.web.services.war/WEB-INF/lib/jackson-annotations-2.8.11.jar
platform.web.services.war/WEB-INF/lib/jackson-core-2.8.11.jar
platform.web.services.war/WEB-INF/lib/jackson-databind-2.8.11.1.jar
platform.web.services.war/WEB-INF/lib/jackson-jaxrs-base-2.8.11.jar
platform.web.services.war/WEB-INF/lib/jackson-jaxrs-json-provider-2.8.11.jar
platform.web.services.war/WEB-INF/lib/jackson-module-jaxb-annotations-2.8.11.jar

=========================
5. Installation and Configuration
=========================
(PWS_TOP=Full path to the top-level installation directory of PWS instance.)

Note: The following steps use installation on Unix as an example.

1. Log on to the SAS tc Server, and shut down the PWS instance.

2. Back up the following files in your existing installation:
    - $PWS_TOP/sas_webapps/platform.web.services.war/WEB-INF/lib/jackson-annotations-2.8.1.jar
    - $PWS_TOP/sas_webapps/platform.web.services.war/WEB-INF/lib/jackson-core-2.8.1.jar
    - $PWS_TOP/sas_webapps/platform.web.services.war/WEB-INF/lib/jackson-databind-2.8.1.jar
    - $PWS_TOP/sas_webapps/platform.web.services.war/WEB-INF/lib/jackson-jaxrs-base-2.8.1.jar
    - $PWS_TOP/sas_webapps/platform.web.services.war/WEB-INF/lib/jackson-jaxrs-json-provider-2.8.1.jar
    - $PWS_TOP/sas_webapps/platform.web.services.war/WEB-INF/lib/jackson-module-jaxb-annotations-2.8.1.jar

3. Copy files from the fix to your current installation:
    - Copy "platform/WEB-INF/lib/jackson-annotations-2.8.11.jar" in this fix to $PWS_TOP/sas_webapps/platform.web.services.war/WEB-INF/lib/
    - Copy "platform/WEB-INF/lib/jackson-core-2.8.11.jar" in this fix to $PWS_TOP/sas_webapps/platform.web.services.war/WEB-INF/lib/
    - Copy "platform/WEB-INF/lib/jackson-databind-2.8.11.1.jar" in this fix to $PWS_TOP/sas_webapps/platform.web.services.war/WEB-INF/lib/
    - Copy "platform/WEB-INF/lib/jackson-jaxrs-base-2.8.11.jar" in this fix to $PWS_TOP/sas_webapps/platform.web.services.war/WEB-INF/lib/
    - Copy "platform/WEB-INF/lib/jackson-jaxrs-json-provider-2.8.11.jar" in this fix to $PWS_TOP/sas_webapps/platform.web.services.war/WEB-INF/lib/
    - Copy "platform/WEB-INF/lib/jackson-module-jaxb-annotations-2.8.11.jar" in this fix to $PWS_TOP/sas_webapps/platform.web.services.war/WEB-INF/lib/

4. Log on to the SAS tc Server and start up the PWS instance.

=========================
6. Copyright
=========================

©Copyright IBM Corporation 2018

U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM®,  the IBM logo and ibm.com®, are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.