This article is for versions All versions of FME Desktop with a floating license, and FME Server 2015 and earlier as well as versions of FlexLM 11.14 and earlier.

Problem

A security vulnerability was identified in versions of FlexLM 11.14 and earlier. Details on the vulnerability are outlined at National Vulnerability Database Issue CVE-2016-10395 .

This security issue only impacts organizations whose networks are accessible to the public, therefore installing the update may be done at your own discretion depending on your licensing environment.

In response to this issue, we have developed FlexLM installers for Safe Software that will run on version 11.15 which contains the security patch. To upgrade your version of FlexLM please perform the following steps (the whole process takes approximately 5 mins from start to finish):

Downloads

Floating License Installer Download

Solution

Steps for Windows Systems

1. Download the updated installer

Download the floating license installer (License Manager) for Safe Software from https://www.safe.com/support/support-resources/fme-downloads/

2. Stop your license server

Stop your license server, by opening LMTOOLS on your license server (this application is located in the FlexServer folder), navigating to the Start/Stop/Reread tab and clicking on “Stop Server

3. Uninstall existing License Manager

Once you've stopped your license server you can then uninstall the existing License Manager.

4. Install the newly downloaded License Manager

Next, please install the new version of the License Manager.

(Note: that your previous settings and license file for FlexLM will still be referenced in the registry so you don't need to re-configure FlexLM or re-license the server again).

5. Start license server

Open LMTOOLS from the FlexServer directory again, and in the Start/Stop/Reread tab, please click on “Start Server” and “Reread license file”.

6. Run FME Workbench to test licensing

Once the license server is running once again, please test that FME can be successfully licensed by trying to run FME Workbench on a client machine.

Steps for Linux Systems

Please note that your system administrator may have configured automatic start-up of your floating license server after system restart and therefore you will need to either restart the system after these steps or restart the license server using the same command used in the start-up script.

1. Download the updated installer

Download the appropriate floating license installer (License Manager) for Safe Software from https://www.safe.com/support/support-resources/fme-downloads/

2. Locate the FlexServer directory

Locate the FlexServer directory. In the original documentation this directory was defined as /opt/FlexServerbut it could be user-defined.

3. Stop the floating license server

Stop the floating license server with the command % ./lmutil lmdown -c <path_to_safe.lic>

4. Replace the FlexServer files

Backup and then replace the files in your <FlexServer> directory with the files in the downloaded package.

5. Restart the floating license server

Restart the floating license server using the same command used initially to start the license server. By default the command is % ./lmgrd -c ./safe.lic -l safe.log but your system administrator may have modified the path to the license file or to the floating license log to suit your own environment and may have placed this command in a start-up script.

Additional Notes

Please consult the FME Administrator guide for detailed steps on installing new FME Floating License Servers.

FlexServer is used for FME Desktop Floating (concurrent) licenses as well as licensing FME Server 2015 and older. FME Server 2016+ is not affected nor are fixed (node-locked) FME Desktop installations.

If you have questions about this article, please comment below. If you run into issues with your new installation please report a defect through our support form: https://www.safe.com/support/report-a-problem/ or contact your local partner