CSP-90495 - Patch instructions to upgrade Angular XLTS

Products

VMware Aria Suite

Issue/Introduction

Patch Superseded

This patch (CSP-90495) has been superseded and is no longer available. Please install the latest cumulative update, CSP-102092, by following the instructions in KB 412021.

Vulnerabilities Addressed by This (Superseded) Patch

This article provides information on a previous patch (CSP-90495) that upgraded Angular XLTS to version 1.9.1 to address licensing requirements and fix the security vulnerabilities listed below.

Affected Product

VMware Identity Manager Appliance: 3.3.7

Applicable CVEs

CVE-2023-26116, CVE-2023-26117, CVE-2023-26118

Environment

VMware Identity Manager 3.3.x

Resolution

Prerequisites (for Superseded Patch CSP-90495)

Version Support: It is recommended to upgrade any unsupported product versions to a supported version before patching. Please refer to the VMware Product Lifecycle Matrix.
Snapshots/Backups: It is strongly recommended to take a snapshot or backup of the appliance(s) and the database server before proceeding.

Procedure (for Superseded Patch CSP-90495)

Log in to the VMware Identity Manager appliance via SSH as sshuser and elevate to the root user with sudo su -.
Download and transfer the CSP-90495-Appliance-3.3.7.zip file to a temporary location on the appliance.

Unzip the file into a new directory:

unzip CSP-90495-Appliance-3.3.7.zip -d CSP-90495-Appliance-3.3.7

Navigate into the new directory:
```
cd CSP-90495-Appliance-3.3.7
```
Run the patch script:
```
./CSP-90495-applyPatch.sh
```

Note: For a clustered deployment, repeat the steps above on all additional nodes sequentially.

Validation (for Superseded Patch CSP-90495)

After the patch deployment, perform the following steps to confirm it was applied successfully:

Log in to the VMware Identity Manager Console and verify the System Diagnostics page shows a green status.

Verify that the patch flag file has been created:

ls /usr/local/horizon/conf/flags/CSP-90495-3.3.7-hotfix.applied

Verify Legacy Connector functionality by ensuring the Auth Adapters load and open without errors.
Perform a Directory Sync and confirm that users and groups are synchronized correctly.
Check that all UI portal tabs load properly, including the configuration page at https://<vidm-hostname>:8443.
Confirm the new version on the Admin Portal and Connectors page is 3.3.7.0 Build 23103647.

Additional Information

To revert this patch, you can revert to the appliance(s) snapshot and the database backup taken before applying these steps.