IBM(R) Rational(R) Change iFix 5.3.2.1.01
-------------------------------------------

SUMMARY

This README describes the contents of Change iFix 5.3.2.1.01 and describes how to install the iFix.

    SUPPORTED RELEASES
      This section lists the releases to which this iFix may be applied.
   
    WHO SHOULD APPLY THIS iFix 
      This section describes for whom this iFix is applicable.

    WHERE TO APPLY THIS iFix 
      This section describes where to apply this iFix.

    INSTALLATION INSTRUCTIONS
      This section describes how to apply the iFix to your Change server.
  
    REVERSING THE iFix
      This section describes how to remove the iFix.
	
    WHAT IS NEW?
      This section describes what is fixed in this iFix.

SUPPORTED RELEASES

  This iFix can only be applied to Change 5.3.2.1. This iFix can be installed directly on top of Change 5.3.2.1

WHO SHOULD APPLY THIS iFix

  This iFix should be installed at all sites running Change 5.3.2.1

WHERE TO APPLY THIS iFix

  This iFix can be installed to all Change installations (CHANGE_HOME) of 5.3.2.1.
 
INSTALLATION INSTRUCTIONS

1.Log in to the machine where Rational Change 5.3.2.1 is installed as the user who installed Rational Change.

2.Unzip (Windows) or untar (UNIX) the patch file into <CHANGE_APP_HOME>/WEB-INF/packages. The resultant directory will have the name rc<patch version>.

	For example, on UNIX:
	$ cd <CHANGE_APP_HOME>/WEB-INF/packages
	$ tar xvf <file path>

3.Open <CHANGE_APP_HOME>/WEB-INF/web.xml in a text editor.

4.Update the display-name tag( which is at begining of web.xml) from Rational Change 5.3.1 to Rational Change 5.3.2

	<display-name>Rational Change 5.3.2</display-name>

5.Add below entry to web.xml, just before the line "<!-- Add HTTP compression to reduce download time. 

	<!-- Apply Headers such as XSS protection,Cookie etc for all the pages -->
   	<filter>  
        	<filter-name>Header Filter</filter-name>  
        	<filter-class>com.telelogic.cs.filters.HeaderPatternFilter</filter-class>   
   	</filter>
   	<filter-mapping>  
   		<filter-name>Header Filter</filter-name>  
  		<url-pattern>/*</url-pattern>  
   	</filter-mapping>

6.Add below entry to web.xml, just before the tag"</web-app>" which is at the end of web.xml

	<!-- Cookie security - HTTPOnly not set -->
	<session-config>
    	  <cookie-config>
        	<http-only>true</http-only>
        	<secure>true</secure>
    	  </cookie-config>
 	</session-config>
	
	<!-- Redirect all 500 server page error to exception.jsp page -->
	<error-page>
		<error-code>500</error-code>
		<location>/WEB-INF/wsconfig/templates/pt/forms/exception.jsp</location>
	</error-page>

7.Save web.xml file.

8.Install the iFix
 	a. Login to Rational Change as Admin, and click the System Administration link in the action panel.
	b. Click on the Package Installer tab, select this iFix from the Available Packages listbox, and click the Install button.

9.After the patch installation is successful, stop and re-start Rational Change services.

REVERSING THE iFix

If it is necessary to remove the iFix after it was installed, follow these steps.

1.Login to Rational Change as Admin, and click the System Administration link in the action panel.Uninstall the iFix.

2.Remove the added entries of point 5 and 6 of the iFix installation instruction from web.xml

3.Click on the Package Installer tab, select the iFix from the Installed Packages listbox, and click the Uninstall button.

4.Stop and start Rational Change.

WHAT IS NEW?

1.Provided remediation for the security vulnerabilities.(Please refer Release Notes for more details)

2.Below APAR's have been fixed
  PH24338,PH24346