Introduction

SOS provides patches provides JS7 - Patches in a situation of severe bugs or Vulnerabilities.

• Bugs, vulnerabilities and patches are communicated with our Change Management System.
• Patches are provided per release. The corresponding fixes are integrated with the next maintenance release or with the next minor release.
  • For vulnerabilities in 3rd-party components the Change Management System indicates where to download the patch and how to apply the patch.
  • For severe bugs in JS7 components SOS provides patches that are available for download from the issue description.
• with the SOS Change Management System.
• Find below the information how to apply patches for the respective JS7 components.

Change Management System

...

• patches

...

• For example, consider a 3rd-party vulnerability such as  

  Jira
  server SOS JIRA columns key,summary,type,created,updated,due,assignee,reporter,priority,status,resolution serverId 6dc67751-9d67-34cd-985b-194a8cdc9602 key JOC-1229

• The issue description provides immediate instructions how to replace 3rd-party libraries.
• Users download patched libraries from the 3rd-party vendor's site.
The issue is reported for release 2.2.1 that can be patched from the instructions. Subsequent releases 2.2.2 and later include the updated libraries to fix the issue.
• For example, consider a bug such as 

  Jira
  server SOS JIRA columns key,summary,type,created,updated,due,assignee,reporter,priority,status,resolution serverId 6dc67751-9d67-34cd-985b-194a8cdc9602 key JOC-1235

  • The issue is reported to affect release 2.2.2 and us fixed with release 2.2.3.
  • For immediate resolution a patch file is offered for download. This patch can be applied to the indicated release 2.2.2, it cannot be applied to earlier releases.

...

• JOC Cockpit.

...

Apply Patch to JOC Cockpit

On Premises

JOC Cockpit expects Java .jar libraries for patching in patches from the following location:

• Unix
  • /var/sos-berlin.com/js7/joc/jetty_base/webapps/joc/WEB-INF/classes
• Windows
  • C:\ProgramData\sos-berlin.com\js7\joc\jetty_base\webapps\joc\WEB-INF\classes

The JETTY_BASE part of the above path is specified during installation and can point to a different location. The remaining part webapps/joc/WEB-INF/classes is the same for any installation.

Apply Patch

Apply the following steps to a JOC Cockpit instance. If a JOC Cockpit cluster is operated the then steps are performed for any JOC Cockpit instance.

...

Note: As an alternative for Windows you can download the .jar patch file to the target directory and use tools such as 7-Zip to extract the archive. Do not create a sub-folder from the archive name but extract directly to the directory hierarchy as indicated above.

Remove Patch

Patches are automatically removed when a JOC Cockpit release is installed.

...

Note: A restart of JOC Cockpit is required to apply removal of patches.

Docker® Containers

Apply Patch

Remove Patch

Apply Patch for Controller

On Premises

The Controller expects Java .jar libraries for patching in the following location:

...

The <controller-id> part of the above path is specified during installation and defaults to controller, this can point to a different location. The remaining part lib/patches is the same for any installation.

Apply Patch

Apply the following steps to a Controller instance. If a Controller cluster is operated the steps are performed for any Controller instance.

...

Note: A restart of the Controller instance is required to apply the patch.

Remove Patch

Patches are automatically removed when a Controller release is installed using the JS7 - Controller - Installation Using the Windows Graphical Installer.

...