Release Notes 5.4

Service Gateway 5.4.0.0.139 Release Notes

Service Gateway 5.4.0.0.139 is now available.

What's new in this release?

Vulnerability Fixes

• SGATEWAY-175 Security Vulnerability - Upgrade to Log4j 2.17.0 - installer
• SGATEWAY-174 Security Vulnerability - Upgrade to Log4j 2.17.0 -device-activation-plugin
• SGATEWAY-173 Security Vulnerability - Add Log4j 2.17.0 - libs
• SGATEWAY-172 Security Vulnerability - Upgrade to Log4j 2.17.0 - xmpp-server
• SGATEWAY-171 Security Vulnerability - Upgrade to Log4j 2.17.0 - stun-protocol-server
• SGATEWAY-169 Security Vulnerability - Upgrade to Log4j 2.17.0 - usp-mqtt
• SGATEWAY-168 Security Vulnerability - Upgrade to Log4j 2.17.0 or later

Enhancements

• SGATEWAY-193 USP MQTT is now made as a configurable feature. The default configuration is set to be disabled.

Defects Resolved

• Zendesk-3299466 Connection request credentials are not sent to the device
• Zendesk-3296385 HTML, Inventory/Firmware UI page doesn’t work
• Zendesk-3295634 NBI setParameterValue doesn’t work
• Zendesk-3226707 Problem Adding nodes in the data model
• Zendesk-2960555 New UI: CSR probe still shows old info after selecting a new device
• Zendesk-2577259 New UI: Device browse tab has lost GetParamAttributes button
• Zendesk-2508165 New UI: there should be a filter on lists of firmware, policy actions and other configuration items
• Zendesk-3296398 HTML, Reload Record in Inventory/Device page doesn’t work
• Zendesk-2960553 Enhance log context with ec_device_id, Unique ID parts and CPE guid
• Zendesk-3317511 HTML Ability to search for reports by name is missing

Upgrade Instructions

Note: Regular backups of the database and file systems should be performed prior to performing an upgrade.

This patch is packaged with a web-based installer to ease the upgrade process. The installer is used in the same way as during a new install.

It is necessary to run the installer on all servers that make up the Service Gateway installation. This is so that the installer can update, at minimum, patch level information on each server.

Prior to upgrading any server, the ACS servers must be shut down and all user interface and EAI activity must cease.

Perform the upgrades to the Application Servers and Database Schema first. When patching a clustered environment, the Admin server must be patched before any managed servers are patched. Servers must be running before the patch process can be started. Ensure that there is only one ear file in the destination directory. For Weblogic ensure that configuration is not locked.

Once the application servers and database schema have been successfully upgraded, proceed with the upgrade of each ACS server. The ACS upgrade will automatically restart the ACS.

The steps to upgrade each server are as follows:

1. Extract the contents of the patch archive to a temporary location.
2. Copy the JDBC driver for the database to the root directory of the extracted patch contents.
3. Enter the "bin" directory and start the run script appropriate to the operating system. run.bat for Windows, and run.sh for Solaris or Linux.
4. Under Windows, the default web browser is automatically launched and directed at http://localhost:8888/. On Solaris or Linux, a web browser must be launched from any computer on the network and directed at the installation site manually. The installer listens for HTTP connections on port 8888 of the server the installer is running on.
5. After accessing the installer web UI, select "Update an existing instance" and click "Next".
6. Once the target instance has been selected and the license agreement has been accepted, the patch prerequisite scripts will run. If they are all successful, clicking "Next" will start the upgrade process.

Troubleshooting and Manual Installation
If the installer fails for any reason, installer.log should be backed up to a safe location so that there is no loss of information needed to diagnose the problem and understand the current state of the application. This file should be sent to Aptean Technical Support for review. Manual patch and rollback instructions are available to Aptean technicians to assist in recovery from a failed upgrade.

Download Links

• Please raise a support ticket to get a link for the Service Gateway 5.4.0.0.139 Installer