I'm in the process of upgrading to KACE version 6.2. I just updated to 5.5 last night. I see the Shellshock bug is patched with KB 133716. If I apply that to my system, will I need to apply it again when I update to 6.0 and again to 6.2?
Answer Summary:
Cancel
0 Comments   [ + ] Show Comments

Comments

Please log in to comment

Answers

1
I just upgraded from 6 to 6.2 and it held.  Does not hurt to reapply after to make sure

----K1000 Bash ShellShock HotFix # 20141002----

[Wed Oct 8 9:40:12 PDT 2014] [notice] Bash ShellShock HotFix already applied
[Wed Oct 8 9:40:12 PDT 2014] [notice] End KBOX Server Patch Complete.
Answered 10/08/2014 by: SMal.tmcc
Red Belt

  • Thanks. I looked back over the KB and it doesn't show how to confirm if it has been applied or not. How would you do that?
    • you need to look thru the updates log on the date you applied it or just run it again to check, it does not require a restart of the kbox
      • I'll check there. Thanks. The KB indicates that "Once this hotfix has been applied. reboot the server from the maintenance page." Do you only need to do that the first time? Thanks again
      • you do not need to restart even the first time, the patch stopped services, patched bash and restarted the services without a reboot, not sure why the KB tells you to restart. If you reapply the patch and see the entries in the log like I posted above, there was no action taken so no reboot would be needed.

        Here are the original logs of the patch process, you will see it stops and starts itself, All patches in the past that require a restart do that automatically without choice. This one did not.

        [Mon Oct 6 7:03:14 PDT 2014] [notice] Begin KBOX Server Patch
        ----K1000 Bash ShellShock HotFix # 20141002----

        [Mon Oct 6 7:03:17 PDT 2014] [notice] /usr/local/etc/rc.d/z.sudo_server.sh stop
        [Mon Oct 6 7:03:21 PDT 2014] [notice] /usr/local/etc/rc.d/z.sso.sh stop
        [Mon Oct 6 7:03:21 PDT 2014] [notice] /usr/local/etc/rc.d/z.smarty_server.sh stop
        [Mon Oct 6 7:03:23 PDT 2014] [notice] /usr/local/etc/rc.d/z.konductor.sh stop
        [Mon Oct 6 7:03:25 PDT 2014] [notice] /usr/local/etc/rc.d/z.kmsgr.sh stop
        [Mon Oct 6 7:03:25 PDT 2014] [notice] /usr/local/etc/rc.d/z.kmsgprocess.sh stop
        [Mon Oct 6 7:03:27 PDT 2014] [notice] /usr/local/etc/rc.d/z.khelpdeskmailnotifier.sh stop
        [Mon Oct 6 7:03:29 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbwaker.sh stop
        [Mon Oct 6 7:03:31 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbsoftwareinventory_cron.sh stop
        [Mon Oct 6 7:03:33 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbsoftwareinventory.sh stop
        [Mon Oct 6 7:03:35 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbscanner_cron.sh stop
        [Mon Oct 6 7:03:37 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbscanner.sh stop
        [Mon Oct 6 7:03:39 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbpusher.sh stop
        [Mon Oct 6 7:03:41 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbprovisioner_cron.sh stop
        [Mon Oct 6 7:03:41 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbprovisioner.sh stop
        [Mon Oct 6 7:03:43 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbinventory_cron.sh stop
        [Mon Oct 6 7:03:45 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbinventory.sh stop
        [Mon Oct 6 7:03:47 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbautoagentupdatecheck.sh stop
        [Mon Oct 6 7:03:47 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbagentless_cron.sh stop
        [Mon Oct 6 7:03:47 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbagentless.sh stop
        [Mon Oct 6 7:03:49 PDT 2014] [notice] /usr/local/etc/rc.d/z.inventory_cron.sh stop
        [Mon Oct 6 7:03:49 PDT 2014] [notice] /usr/local/etc/rc.d/z.inventory.sh stop
        [Mon Oct 6 7:03:49 PDT 2014] [notice] /usr/local/etc/rc.d/z.cron_server.sh stop
        [Mon Oct 6 7:03:53 PDT 2014] [notice] Running on FreeBSD 7
        [Mon Oct 6 7:03:53 PDT 2014] [notice] ************************************************************************
        [Mon Oct 6 7:03:53 PDT 2014] [notice] * Removing old packages *
        [Mon Oct 6 7:03:53 PDT 2014] [notice] ************************************************************************
        [Mon Oct 6 7:03:53 PDT 2014] [notice] FORCE uninstalling bash-3.2.25
        [Mon Oct 6 7:03:53 PDT 2014] [notice] done
        [Mon Oct 6 7:03:53 PDT 2014] [notice]
        [Mon Oct 6 7:03:53 PDT 2014] [notice] ************************************************************************
        [Mon Oct 6 7:03:53 PDT 2014] [notice] * Installing new packages *
        [Mon Oct 6 7:03:53 PDT 2014] [notice] ************************************************************************
        [Mon Oct 6 7:03:53 PDT 2014] [notice] installing bash-3.2.54
        [Mon Oct 6 7:03:53 PDT 2014] [notice] + /usr/bin/env BATCH=1 /usr/sbin/pkg_add -f /kbackup/upgrade/packs64/bash-3.2.54.tbz
        [Mon Oct 6 7:03:53 PDT 2014] [notice] done
        [Mon Oct 6 7:03:53 PDT 2014] [notice]
        [Mon Oct 6 7:03:53 PDT 2014] [notice] Done!
        [Mon Oct 6 7:03:53 PDT 2014] [notice] copying bash to /bin
        [Mon Oct 6 7:04:03 PDT 2014] [notice] /usr/local/etc/rc.d/z.cron_server.sh start
        [Mon Oct 6 7:04:03 PDT 2014] [notice] /usr/local/etc/rc.d/z.inventory.sh start
        [Mon Oct 6 7:04:03 PDT 2014] [notice] /usr/local/etc/rc.d/z.inventory_cron.sh start
        [Mon Oct 6 7:04:03 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbagentless.sh start
        [Mon Oct 6 7:04:04 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbagentless_cron.sh start
        [Mon Oct 6 7:04:04 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbautoagentupdatecheck.sh start
        [Mon Oct 6 7:04:04 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbinventory.sh start
        [Mon Oct 6 7:04:04 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbinventory_cron.sh start
        [Mon Oct 6 7:04:04 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbprovisioner.sh start
        [Mon Oct 6 7:04:04 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbprovisioner_cron.sh start
        [Mon Oct 6 7:04:04 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbpusher.sh start
        [Mon Oct 6 7:04:04 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbscanner.sh start
        [Mon Oct 6 7:04:05 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbscanner_cron.sh start
        [Mon Oct 6 7:04:05 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbsoftwareinventory.sh start
        [Mon Oct 6 7:04:05 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbsoftwareinventory_cron.sh start
        [Mon Oct 6 7:04:05 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbwaker.sh start
        [Mon Oct 6 7:04:06 PDT 2014] [notice] /usr/local/etc/rc.d/z.khelpdeskmailnotifier.sh start
        [Mon Oct 6 7:04:06 PDT 2014] [notice] /usr/local/etc/rc.d/z.kmsgprocess.sh start
        [Mon Oct 6 7:04:06 PDT 2014] [notice] /usr/local/etc/rc.d/z.kmsgr.sh start
        [Mon Oct 6 7:04:06 PDT 2014] [notice] /usr/local/etc/rc.d/z.konductor.sh start
        [Mon Oct 6 7:04:06 PDT 2014] [notice] /usr/local/etc/rc.d/z.smarty_server.sh start
        [Mon Oct 6 7:04:07 PDT 2014] [notice] /usr/local/etc/rc.d/z.sso.sh start
        [Mon Oct 6 7:04:07 PDT 2014] [notice] /usr/local/etc/rc.d/z.sudo_server.sh start
        [Mon Oct 6 7:04:07 PDT 2014] [notice] End KBOX Server Patch Complete.
      • I am going to email support to why they say a reboot is required in the KB.
    • found out they made it a manual reboot because of the extended time it could take on the reboot. they updated the KB with a better explanation. But if you run it again and it says it has been applied you are done.
      • Thanks! I saw that last night when I applied the patch! Thanks for following up!
      • I went to 6.2 after applying the hotfix so I had to change the ip to do that which forced my reboot, now I know why it took the server 30-40 minutes to come back to life when it typically is 15-20
Please log in to comment
Answer this question or Comment on this question for clarity

Share