Will Hotfix 133716 stay when upgrading KACE versions?
I'm in the process of upgrading to KACE version 6.2. I just updated to 5.5 last night. I see the Shellshock bug is patched with KB 133716. If I apply that to my system, will I need to apply it again when I update to 6.0 and again to 6.2?
0 Comments
[ + ] Show comments
Answers (1)
Answer Summary:
Please log in to answer
Posted by:
SMal.tmcc
9 years ago
I just upgraded from 6 to 6.2 and it held. Does not hurt to reapply after to make sure
----K1000 Bash ShellShock HotFix # 20141002----
[Wed Oct 8 9:40:12 PDT 2014] [notice] Bash ShellShock HotFix already applied
[Wed Oct 8 9:40:12 PDT 2014] [notice] End KBOX Server Patch Complete.
----K1000 Bash ShellShock HotFix # 20141002----
[Wed Oct 8 9:40:12 PDT 2014] [notice] Bash ShellShock HotFix already applied
[Wed Oct 8 9:40:12 PDT 2014] [notice] End KBOX Server Patch Complete.
Comments:
-
Thanks. I looked back over the KB and it doesn't show how to confirm if it has been applied or not. How would you do that? - nixphoe 9 years ago
-
you need to look thru the updates log on the date you applied it or just run it again to check, it does not require a restart of the kbox - SMal.tmcc 9 years ago
-
I'll check there. Thanks. The KB indicates that "Once this hotfix has been applied. reboot the server from the maintenance page." Do you only need to do that the first time? Thanks again - nixphoe 9 years ago
-
you do not need to restart even the first time, the patch stopped services, patched bash and restarted the services without a reboot, not sure why the KB tells you to restart. If you reapply the patch and see the entries in the log like I posted above, there was no action taken so no reboot would be needed.
Here are the original logs of the patch process, you will see it stops and starts itself, All patches in the past that require a restart do that automatically without choice. This one did not.
[Mon Oct 6 7:03:14 PDT 2014] [notice] Begin KBOX Server Patch
----K1000 Bash ShellShock HotFix # 20141002----
[Mon Oct 6 7:03:17 PDT 2014] [notice] /usr/local/etc/rc.d/z.sudo_server.sh stop
[Mon Oct 6 7:03:21 PDT 2014] [notice] /usr/local/etc/rc.d/z.sso.sh stop
[Mon Oct 6 7:03:21 PDT 2014] [notice] /usr/local/etc/rc.d/z.smarty_server.sh stop
[Mon Oct 6 7:03:23 PDT 2014] [notice] /usr/local/etc/rc.d/z.konductor.sh stop
[Mon Oct 6 7:03:25 PDT 2014] [notice] /usr/local/etc/rc.d/z.kmsgr.sh stop
[Mon Oct 6 7:03:25 PDT 2014] [notice] /usr/local/etc/rc.d/z.kmsgprocess.sh stop
[Mon Oct 6 7:03:27 PDT 2014] [notice] /usr/local/etc/rc.d/z.khelpdeskmailnotifier.sh stop
[Mon Oct 6 7:03:29 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbwaker.sh stop
[Mon Oct 6 7:03:31 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbsoftwareinventory_cron.sh stop
[Mon Oct 6 7:03:33 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbsoftwareinventory.sh stop
[Mon Oct 6 7:03:35 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbscanner_cron.sh stop
[Mon Oct 6 7:03:37 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbscanner.sh stop
[Mon Oct 6 7:03:39 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbpusher.sh stop
[Mon Oct 6 7:03:41 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbprovisioner_cron.sh stop
[Mon Oct 6 7:03:41 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbprovisioner.sh stop
[Mon Oct 6 7:03:43 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbinventory_cron.sh stop
[Mon Oct 6 7:03:45 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbinventory.sh stop
[Mon Oct 6 7:03:47 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbautoagentupdatecheck.sh stop
[Mon Oct 6 7:03:47 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbagentless_cron.sh stop
[Mon Oct 6 7:03:47 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbagentless.sh stop
[Mon Oct 6 7:03:49 PDT 2014] [notice] /usr/local/etc/rc.d/z.inventory_cron.sh stop
[Mon Oct 6 7:03:49 PDT 2014] [notice] /usr/local/etc/rc.d/z.inventory.sh stop
[Mon Oct 6 7:03:49 PDT 2014] [notice] /usr/local/etc/rc.d/z.cron_server.sh stop
[Mon Oct 6 7:03:53 PDT 2014] [notice] Running on FreeBSD 7
[Mon Oct 6 7:03:53 PDT 2014] [notice] ************************************************************************
[Mon Oct 6 7:03:53 PDT 2014] [notice] * Removing old packages *
[Mon Oct 6 7:03:53 PDT 2014] [notice] ************************************************************************
[Mon Oct 6 7:03:53 PDT 2014] [notice] FORCE uninstalling bash-3.2.25
[Mon Oct 6 7:03:53 PDT 2014] [notice] done
[Mon Oct 6 7:03:53 PDT 2014] [notice]
[Mon Oct 6 7:03:53 PDT 2014] [notice] ************************************************************************
[Mon Oct 6 7:03:53 PDT 2014] [notice] * Installing new packages *
[Mon Oct 6 7:03:53 PDT 2014] [notice] ************************************************************************
[Mon Oct 6 7:03:53 PDT 2014] [notice] installing bash-3.2.54
[Mon Oct 6 7:03:53 PDT 2014] [notice] + /usr/bin/env BATCH=1 /usr/sbin/pkg_add -f /kbackup/upgrade/packs64/bash-3.2.54.tbz
[Mon Oct 6 7:03:53 PDT 2014] [notice] done
[Mon Oct 6 7:03:53 PDT 2014] [notice]
[Mon Oct 6 7:03:53 PDT 2014] [notice] Done!
[Mon Oct 6 7:03:53 PDT 2014] [notice] copying bash to /bin
[Mon Oct 6 7:04:03 PDT 2014] [notice] /usr/local/etc/rc.d/z.cron_server.sh start
[Mon Oct 6 7:04:03 PDT 2014] [notice] /usr/local/etc/rc.d/z.inventory.sh start
[Mon Oct 6 7:04:03 PDT 2014] [notice] /usr/local/etc/rc.d/z.inventory_cron.sh start
[Mon Oct 6 7:04:03 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbagentless.sh start
[Mon Oct 6 7:04:04 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbagentless_cron.sh start
[Mon Oct 6 7:04:04 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbautoagentupdatecheck.sh start
[Mon Oct 6 7:04:04 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbinventory.sh start
[Mon Oct 6 7:04:04 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbinventory_cron.sh start
[Mon Oct 6 7:04:04 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbprovisioner.sh start
[Mon Oct 6 7:04:04 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbprovisioner_cron.sh start
[Mon Oct 6 7:04:04 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbpusher.sh start
[Mon Oct 6 7:04:04 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbscanner.sh start
[Mon Oct 6 7:04:05 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbscanner_cron.sh start
[Mon Oct 6 7:04:05 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbsoftwareinventory.sh start
[Mon Oct 6 7:04:05 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbsoftwareinventory_cron.sh start
[Mon Oct 6 7:04:05 PDT 2014] [notice] /usr/local/etc/rc.d/z.kbwaker.sh start
[Mon Oct 6 7:04:06 PDT 2014] [notice] /usr/local/etc/rc.d/z.khelpdeskmailnotifier.sh start
[Mon Oct 6 7:04:06 PDT 2014] [notice] /usr/local/etc/rc.d/z.kmsgprocess.sh start
[Mon Oct 6 7:04:06 PDT 2014] [notice] /usr/local/etc/rc.d/z.kmsgr.sh start
[Mon Oct 6 7:04:06 PDT 2014] [notice] /usr/local/etc/rc.d/z.konductor.sh start
[Mon Oct 6 7:04:06 PDT 2014] [notice] /usr/local/etc/rc.d/z.smarty_server.sh start
[Mon Oct 6 7:04:07 PDT 2014] [notice] /usr/local/etc/rc.d/z.sso.sh start
[Mon Oct 6 7:04:07 PDT 2014] [notice] /usr/local/etc/rc.d/z.sudo_server.sh start
[Mon Oct 6 7:04:07 PDT 2014] [notice] End KBOX Server Patch Complete. - SMal.tmcc 9 years ago -
I am going to email support to why they say a reboot is required in the KB. - SMal.tmcc 9 years ago
-
found out they made it a manual reboot because of the extended time it could take on the reboot. they updated the KB with a better explanation. But if you run it again and it says it has been applied you are done. - SMal.tmcc 9 years ago
-
Thanks! I saw that last night when I applied the patch! Thanks for following up! - nixphoe 9 years ago
-
I went to 6.2 after applying the hotfix so I had to change the ip to do that which forced my reboot, now I know why it took the server 30-40 minutes to come back to life when it typically is 15-20 - SMal.tmcc 9 years ago
