Fix Pack Releases: 10.2 Series

[Alan Kirk]

For those who are unaware this morning IBM released a bunch of fix pack / interim fixes for the three main current versions, 9.5.2, 10.1 and 10.2. For the most part they relate to security. I'll put a separate post for each version to allow any discussions to be held under the relevant version post.

For 10.2 the release is Cognos TM1 10.2.0.2.1 (10.2.0 Fix Pack 2, Interim Fix 1), the main page for which will be found here.

The fix lists for the various fixpacks will be found here; there are way too many to list in this post.

10.2.0 FP2 IF1 deals with four security issues:
CVE-2014-0224, which is described as "OpenSSL is vulnerable to a man-in-the-middle attack, caused by the use of weak keying material in SSL/TLS clients and servers. A remote attacker could exploit this vulnerability using a specially-crafted handshake to conduct man-in-the-middle attacks to decrypt and modify traffic";
CVE-2014-0411, which is described as "Timing differences based on validity of TLS messages can be exploited to decrypt the entire session. The exploit is not trivial, requiring a man-in-the-middle position and a long time to complete";
CVE-2014-0863, described as "A security vulnerability has been discovered in IBM Cognos TM1 resulting in unencrypted passwords found in memory on client"; and
CVE-2014-0877 which is described as "The link generated when opening the Rights page for an application can be opened anywhere, without the need to log in."

The release notes for the various versions will be found below (this part of the post is updated as new patches are released):
10.2.0
10.2.0 FP1, which addressed a range of problems with various components of TM1
10.2.0 FP2
10.2.0 FP2 IF1
Cognos TM1 10.2.0.2 Interim Fix 6 (08 Apr 2016)
Cognos TM1 10.2.0.2 Interim Fix 8 (13 Apr 2017)
Cognos TM1 10.2.0.2 Interim Fix 9 (04 Aug 2017)
End Of Life notification. Support ends on 30 September 2018. (Announced 13 Sep 2017)
Cognos TM1 10.2.0.2 Interim Fix 10 (23 Jan 2018)
Cognos TM1 10.2.0.2 Interim Fix 24 (5 April 2018)

10.2.2
10.2.2 FP3 (released 24 Apr 2015, removed 12 May 2015).
10.2.2 FP4 (Released 16 Sep 2015).
10.2.2 FP5 (04 Mar 2016)
10.2.2 FP6 (22 Aug 2016)
IBM Cognos TM1 10.2.2 Fix Pack 5 Interim Fix 1 (08 Apr 2016)
IBM Cognos TM1 10.2.2 Fix Pack 6 Interim Fix 1 (06 Feb 2017)
IBM Cognos TM1 10.2.2 Fix Pack 7 (11 Apr 2017)
IBM Cognos TM1 10.2.2 Fix Pack 7 Interim Fix 1 (04 Aug 2017)
End Of Life notification. Support ends on 30 September 2019. (Announced 13 Sep 2017)
IBM Cognos TM1 10.2.2 FP7 IF5 and higher(21 Sep 17)
Cannot be downgraded to an earlier version. See this post.
IBM Cognos TM1 10.2.2 Fix Pack 7 Interim Fix 2 (23 Jan 2018)
IBM Cognos TM1 10.2.2 Fix Pack 7 Interim Fix 12 (05 April 2018)
IBM Cognos TM1 10.2.2 Fix Pack 7 Interim Fix 18 (03 December 2018)
IBM Cognos TM1 10.2.2 Fix Pack 7 Interim Fix 21 (18 April 2019)
IBM Cognos TM1 10.2.2 Fix Pack 7 Interim Fix 22 (28 Jun 2019)

[Alan Kirk]

10.2.2 Fix Pack 1 has been released.

The release notes will be found here.

The fix lists will be found here.

I noted that one of the fixes was:

PI24861 Since 10.2 : C level rule interfers with next N level rule

which is finally a fix for the bug reported in this thread and was a potential show stopper for some upgrades.

In other good news two new but undocumented functions have been added to TI:

SubsetMDXSet
This function removes the MDX expression from a dynamic subset and converts the dynamic subset to a static subset without locking the underlying dimension.

All of the old elements at the time of the call are saved as elements of the new static subset. The function returns the number of elements that the new subset contains. Optionally, you can also populate the subset with a new MDX expression.

This is a TM1® TurboIntegrator function, valid only in TurboIntegrator processes.

and

SubsetMDXGet
This function retrieves the MDX expression used to create a subset.

Well done Iboglix, I can see those two being quite useful.

Now for the love of all that is holy will you please, please finally deliver unto us a SubIx function????

[RJ!]

Can anyone confirm if they have added the feature of being able to use the Attributes in the same way as the Elements?

I went to a conference recently and the IBM App Manager showed a cool feature where you could use CAFE and put an elements attributes & display similar to the Element.
(Sorry, difficult to explain since I can't remember 100% what was showed)

[Duncan P]

Is it this feature?

[lotsaram]

Can anyone confirm if they have added the feature of being able to use the Attributes in the same way as the Elements?

I went to a conference recently and the IBM App Manager showed a cool feature where you could use CAFE and put an elements attributes & display similar to the Element.
(Sorry, difficult to explain since I can't remember 100% what was showed)

I think you are meaning "alternate named hierarchies"?? This would manifest as the ability to use alternate hierarchies from the same dimension effectively as separate dimensions in a view/crosstab/report. (so for example you could have one hierarchy on rows, one on columns and another as a slicer, all from the same dimension.) It would be a huge change with some massive benefits in terms of model design, flexibility and performance. This is not in 10.2.2 (and wouldn't ever be introduced in any fix pack as it represents a major new feature/functionality which would only ever come in a major release).

Hopefully it might be in the next major release but don't expect IBM to confirm or deny anything as they just don't ever make any commitments on forward looking statements.

[Alan Kirk]

In the news feed today there was mention of Fix Pack 2 for 10.2.2 (which will be 10.2.2.2). However the link that IBM gave to the release notes reads "Our apologies...The page you requested"cannot be displayed". Below that appears "410 Gone".

It does however helpfully offer a link to "Search the IBM Web Site". (http://www.ibm.com/search/help/). This yields "Our apologies… The page you requested cannot be displayed... 404 Not Found"

Mmm. The quality. You can feel it in every digital bit flowing to and from the IBM web site.

When the actual documents finally turn up I'll add the standard post with the relevant links. For now, this is just a "be aware" post that a new fix pack is probably coming shortly.

[Alan Kirk]

10.2.2 Fix Pack 2 (10.2.2.2) has been released.

The release notes will be found here.

The fix lists will be found here.

The list is lengthy but there are no "showstopper" ones that stand out to me (a couple relate to a generic "server crash" but that could be anything), though doubtless each one will be relevant to those who were affected by it.

[Alan Kirk]

10.2.2 Fix Pack 2 (10.2.2.2) has been released.

Well that didn't last long...

Interim fix 2 has been released for both 10.2.0 Fix Pack 2 (10.2.0.2) and 10.2.2 Fix Pack 2 (10.2.2.2). These address "multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is used by IBM Cognos TM1" which have "partial confidentiality impact, partial integrity impact, and no availability impact".

Security issues in Java? Unthinkable, surely.

[mattgoff]

10.2.2 Fix Pack 2 (10.2.2.2) has been released.

Well that didn't last long...

Interim fix 2 has been released for both 10.2.0 Fix Pack 2 (10.2.0.2) and 10.2.2 Fix Pack 2 (10.2.2.2).

Unless I'm misreading the bulletins (1, 2) 10.2.2 FP2 already has the patch, so there's no IF.

[pandinus]

Bet this is the most important one since a long time: PI28980: LAUNCHING PERSPECTIVES TURNS OFF NUM LOCK

[Steve Vincent]

you have no idea how long customers here have complained about that...

[Alan Kirk]

Stack Overflow errors and Feeders not working correctly in 10.2.2 FP2

My attention was drawn to this technote that may affect some people on 10.2.2 FP2

In a nutshell if you feed from an N element into its parent consolidation (with the intention of feeding the other members of that consolidation) you may get a stack overflow and feeder issues. This only came in with 10.2.2 FP2.

[kangkc]

Interim fix IF4 is available which will solve this problem. Not sure this is available on fix central for download.

[RJ!]

Is anyone on CAFE 10.2.2.2? Can you confirm if your are able to successfully log out of CAFE from the Log Off button? (i.e. you session closes in TM1Top)

[image2x]

Interim fix IF4 is available which will solve this problem. Not sure this is available on fix central for download.

Can you please confirm that it's IF4? Our support rep is saying IF2 is the latest. Thx.

[Gabor]

I saw the stack overflow issue with the release of 10.2.2 FP2 and it was fixed with 10.2.2 FP2 IF4 (tm1s.exe 10.2.20204.62, a couple of files have a build 67).
I have received the fix after Feb 13th, the fix list contains about 35 APARs. You need to contact support to get access.

[amigo]

Please can someone advise how you can see what current FP or Interim Fix you currently have installed?
--> OK, so I have seen that we are using TM1 Build Number: 10.2.20200.55

Is this the latest FP / IF?

Thanks in advance.

[Duncan P]

Try this

[amigo]

Thanks

[Alan Kirk]

10.2 FP3 has been released. A link to the release notes has been added to the first post above.