Installing the ksmg_upgrade_2.1.0.7854_openssh_cve_2024_6387 on the Control node
10 July 2024
ID 279382
To install a system update on the Control node:
- In the web interface of the Control node, go to the Message queue section, click Manage settings for sending/receiving, select the Control node, and disable the reception of messages on that node. For details, see Enabling and disabling the transmission and reception of messages.
- Wait until messages from all queues are sent.
- Remove the load from the node in the load balancer settings.
- In the web interface of the node being updated, select the Settings → General → Install patch section and install the update package: ksmg_upgrade_2.1.0.7854_openssh_cve_2024_6387.
If restarting the node is necessary for installing the update package, wait until the restart is completed.
- Make sure the update package is installed successfully. To do so, perform the following:
- Sign in to the web interface of the Control node. Make sure the status of the updated node has changed to Synchronized.
- Sign in to the updated node over SSH and run the following commands:
rpm -q openssh
The output of the command must be as follows:
openssh-8.7p1-38.1.el9_4.security.0.7.x86_64
rpm -q openssh-clients
The output of the command must be as follows:
openssh-clients-8.7p1-38.1.el9_4.security.0.7.x86_64
rpm -q openssh-server
The output of the command must be as follows:
openssh-server-8.7p1-38.1.el9_4.security.0.7.x86_64
tail -n 30 /var/log/kaspersky/ksmg/patch.log
As a result of running the command, the following lines from the patch.log file should be displayed, with the following line among them:
Upgrade finished, automatic system reboot initiated
- Restore traffic to the updated node.
The update package is installed on the Control node of the cluster.