Latest CentOS 7 operating system upgrade
Upgrading to BMC Discovery 23.3
This OSU is not compatible with an earlier upgrade to BMC Discovery 23.3, the earlier upgrade included the versioning string _v004.
The current upgrade package is: Discovery_OS_Upgrade_CentOSRHEL7_OL9_v006.nnnnnn.tgz. On EPD, the upgrade package is labelled BMC Discovery 23.3.00 OL9 Upgrade.
If you apply this OSU, you must only install the _v005 version (or later) of the upgrade package. Installing the _v004 version is blocked by an additional package intentionally placed on the appliance by this OSU to prevent an unrecoverable error state. This package appears in the log files as an unwanted packages called ERROR-Please-See-Release-Notes. When installing the _v005 version (or later) of the package you must also remove the dummy RPM installed as part of the November OSU. To check for the presence, and to remove the dummy RPM, enter the following commands:
[tideway@appliance01 ~]$ rpm -q ERROR-Please-See-Release-Notes-1-1.noarch ERROR-Please-See-Release-Notes-1-1.noarch [tideway@appliance01 ~]$ sudo rpm -ev ERROR-Please-See-Release-Notes-1-1.noarch Preparing packages... ERROR-Please-See-Release-Notes-1-1.noarch [tideway@appliance01 ~]$ rpm -q ERROR-Please-See-Release-Notes-1-1.noarch package ERROR-Please-See-Release-Notes-1-1.noarch is not installed [tideway@appliance01 ~]$
You must not remove the dummy package and attempt to install the _v004 version of the upgrade package. Doing so will result in an unrecoverable BMC Discovery system.
This BMC Discovery CentOS 7 OS upgrade includes all applicable CentOS 7 updates to mitigate an issue in OpenSSH (CVE-2023-38408).
"The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) Note: this issue exists because of an incomplete fix for CVE-2016-10009."
(Source: https://nvd.nist.gov/vuln/detail/CVE-2023-38408)
TKU and OSU release timing
To provide a more predictable release cadence for our customers, where possible, BMC will publish the latest TKU and OSU on the first Wednesday of the month.
When you upgrade to this OSU on CentOS 7, if your link.conf file contains errors, the upgrade will fail its pre-upgrade checks with a message stating, Upgrade check failed: The OS upgrade script did not recognize the "--managed-upgrade-checks" option, and will proceed no further. you must correct the errors and run the OS upgrade again.
The link.conf file is formatted with entries like:
#== Backup Archive Files Location ==========================================BACKUP_LOGICAL="${TIDEWAY}/var/backup"BACKUP_PHYSICAL="${TIDEWAY}/var/localdisk/backup"
The most common errors are missing or unbalanced double quotes.
The OS upgrade supports the installed BMC Discovery (64-bit architecture) virtual appliances on CentOS 7. The following file is available from the BMC Electronic Product Distribution (EPD) site for 64-bit architecture:
ADDM_OS_Upgrade_CentOS_64_7.24.03.21_875902_ga.sh.gz
Packages which have been updated since the previous OS upgrade are listed below, with version numbers:
- kernel-3.10.0-1160.114.2.el7
- kernel-headers-3.10.0-1160.114.2.el7
- kmod-drbd90-9.1.19-1.el7_9.elrepo
- libX11-1.6.7-5.el7_9
- libX11-common-1.6.7-5.el7_9
- lm_sensors-libs-3.4.0-8.20160601gitf9185e5.el7_9
JDK packages included:
tw-jdk8-999-2.openjdk.centos7.x86_64.rpm#1 tw-tbumin-006-1.noarch.rpm#1
OS release included in this version:
- The OS release included in this update is 7.9
This is unchanged from the previous release.
The following table shows the complete list of the OS-specific packages that will be present on a 64-bit Enterprise Edition of BMC Discovery after the latest OS upgrade has been installed.
Package name | Package name | Package name |
|---|---|---|
acl-2.2.51-15.el7 | apr-1.4.8-7.el7 | apr-devel-1.4.8-7.el7 |
apr-util-1.5.2-6.el7_9.1 | apr-util-devel-1.5.2-6.el7_9.1 | audit-2.8.5-4.el7 |
audit-libs-2.8.5-4.el7 | authconfig-6.2.8-30.el7 | autogen-libopts-5.18-5.el7 |
avahi-libs-0.6.31-20.el7 | basesystem-10.0-7.el7.centos | bash-4.2.46-35.el7_9 |
bc-1.06.95-13.el7 | bind-export-libs-9.11.4-26.P2.el7_9.15 | bind-libs-9.11.4-26.P2.el7_9.15 |
bind-libs-lite-9.11.4-26.P2.el7_9.15 | bind-license-9.11.4-26.P2.el7_9.15 | bind-utils-9.11.4-26.P2.el7_9.15 |
binutils-2.27-44.base.el7_9.1 | biosdevname-0.7.3-2.el7 | boost-iostreams-1.53.0-28.el7 |
boost-random-1.53.0-28.el7 | boost-system-1.53.0-28.el7 | boost-thread-1.53.0-28.el7 |
bzip2-1.0.6-13.el7 | bzip2-libs-1.0.6-13.el7 | ca-certificates-2023.2.60_v7.0.306-72.el7_9 |
centos-logos-70.0.6-3.el7.centos | centos-release-7-9.2009.1.el7.centos | chkconfig-1.7.6-1.el7 |
chrony-3.4-1.el7 | cifs-utils-6.2-10.el7 | compat-libstdc++-33-3.2.3-72.el7 |
copy-jdk-configs-3.3-11.el7_9 | coreutils-8.22-24.el7_9.2 | cpio-2.11-28.el7 |
cpp-4.8.5-44.el7 | cracklib-2.9.0-11.el7 | cracklib-dicts-2.9.0-11.el7 |
cronie-1.4.11-25.el7_9 | cronie-anacron-1.4.11-25.el7_9 | crontabs-1.11-6.20121102git.el7 |
cryptsetup-2.0.3-6.el7 | cryptsetup-libs-2.0.3-6.el7 | cups-libs-1:1.6.3-52.el7_9 |
curl-7.29.0-59.el7_9.2 | cyrus-sasl-2.1.26-24.el7_9 | cyrus-sasl-devel-2.1.26-24.el7_9 |
cyrus-sasl-lib-2.1.26-24.el7_9 | dbus-1:1.10.24-15.el7 | dbus-libs-1:1.10.24-15.el7 |
dejavu-fonts-common-2.33-6.el7 | dejavu-sans-fonts-2.33-6.el7 | device-mapper-7:1.02.170-6.el7_9.5 |
device-mapper-event-7:1.02.170-6.el7_9.5 | device-mapper-event-libs-7:1.02.170-6.el7_9.5 | device-mapper-libs-7:1.02.170-6.el7_9.5 |
device-mapper-multipath-0.4.9-136.el7_9 | device-mapper-multipath-libs-0.4.9-136.el7_9 | device-mapper-persistent-data-0.8.5-3.el7_9.2 |
dhclient-12:4.2.5-83.el7.centos.1 | dhcp-common-12:4.2.5-83.el7.centos.1 | dhcp-libs-12:4.2.5-83.el7.centos.1 |
diffutils-3.3-6.el7_9 | dmidecode-1:3.2-5.el7_9.1 | dos2unix-6.0.3-7.el7 |
dracut-033-572.el7 | dracut-config-rescue-033-572.el7 | dracut-fips-033-572.el7 |
dracut-network-033-572.el7 | drbd90-utils-9.27.0-1.el7.elrepo | e2fsprogs-1.42.9-19.el7 |
e2fsprogs-libs-1.42.9-19.el7 | elfutils-0.176-5.el7 | elfutils-default-yama-scope-0.176-5.el7 |
elfutils-libelf-0.176-5.el7 | elfutils-libs-0.176-5.el7 | ethtool-2:4.8-10.el7 |
expat-2.1.0-15.el7_9 | expat-devel-2.1.0-15.el7_9 | file-5.11-37.el7 |
file-libs-5.11-37.el7 | filesystem-3.2-25.el7 | findutils-1:4.5.11-6.el7 |
fipscheck-1.4.1-6.el7 | fipscheck-lib-1.4.1-6.el7 | fontconfig-2.13.0-4.3.el7 |
fontpackages-filesystem-1.44-8.el7 | freetype-2.8-14.el7_9.1 | fuse-2.9.2-11.el7 |
fuse-libs-2.9.2-11.el7 | gawk-4.0.2-4.el7_3.1 | gcc-4.8.5-44.el7 |
gdb-7.6.1-120.el7 | gdbm-1.10-8.el7 | GeoIP-1.5.0-14.el7 |
geoipupdate-2.5.0-2.el7 | gettext-0.19.8.1-3.el7 | gettext-libs-0.19.8.1-3.el7 |
glib2-2.56.1-9.el7_9 | glibc-2.17-326.el7_9 | glibc-common-2.17-326.el7_9 |
glibc-devel-2.17-326.el7_9 | glibc-headers-2.17-326.el7_9 | gmp-1:6.0.0-15.el7 |
gnupg2-2.0.22-5.el7_5 | gnutls-3.3.29-9.el7_6 | grep-2.20-3.el7 |
groff-base-1.22.2-8.el7 | grub2-1:2.02-0.87.0.2.el7.centos.11 | grub2-common-1:2.02-0.87.0.2.el7.centos.11 |
grub2-pc-1:2.02-0.87.0.2.el7.centos.11 | grub2-pc-modules-1:2.02-0.87.0.2.el7.centos.11 | grub2-tools-1:2.02-0.87.0.2.el7.centos.11 |
grub2-tools-extra-1:2.02-0.87.0.2.el7.centos.11 | grub2-tools-minimal-1:2.02-0.87.0.2.el7.centos.11 | grubby-8.28-26.el7 |
gzip-1.5-11.el7_9 | hardlink-1:1.0-19.el7 | hmaccalc-0.9.13-4.el7 |
hostname-3.13-3.el7_7.1 | httpd-2.4.6-99.el7.centos.1 | httpd-devel-2.4.6-99.el7.centos.1 |
httpd-tools-2.4.6-99.el7.centos.1 | hwdata-0.252-9.7.el7 | info-5.1-5.el7 |
initscripts-9.49.53-1.el7_9.1 | iproute-4.11.0-30.el7 | iprutils-2.4.17.1-3.el7_7 |
iptables-1.4.21-35.el7 | iptables-services-1.4.21-35.el7 | iputils-20160308-10.el7 |
irqbalance-3:1.0.7-12.el7 | iscsi-initiator-utils-6.2.0.874-22.el7_9 | iscsi-initiator-utils-iscsiuio-6.2.0.874-22.el7_9 |
jansson-2.10-1.el7 | java-1.8.0-openjdk-headless-1:1.8.0.402.b06-1.el7_9 | javapackages-tools-3.4.1-11.el7 |
jbigkit-libs-2.0-11.el7 | json-c-0.11-4.el7_0 | kbd-1.15.5-16.el7_9 |
kbd-legacy-1.15.5-16.el7_9 | kbd-misc-1.15.5-16.el7_9 | kernel-3.10.0-1160.114.2.el7 |
kernel-headers-3.10.0-1160.114.2.el7 | kexec-tools-2.0.15-51.el7_9.3 | keyutils-1.5.8-3.el7 |
keyutils-libs-1.5.8-3.el7 | kmod-20-28.el7 | kmod-drbd90-9.1.19-1.el7_9.elrepo |
kmod-libs-20-28.el7 | kpartx-0.4.9-136.el7_9 | krb5-libs-1.15.1-55.el7_9 |
krb5-workstation-1.15.1-55.el7_9 | less-458-9.el7 | libacl-2.2.51-15.el7 |
libaio-0.3.109-13.el7 | libarchive-3.1.2-14.el7_7 | libassuan-2.1.0-3.el7 |
libattr-2.4.46-13.el7 | libblkid-2.23.2-65.el7_9.1 | libcap-2.22-11.el7 |
libcap-ng-0.7.5-4.el7 | libcom_err-1.42.9-19.el7 | libcom_err-devel-1.42.9-19.el7 |
libcroco-0.6.12-6.el7_9 | libcurl-7.29.0-59.el7_9.2 | libdaemon-0.14-7.el7 |
libdb-5.3.21-25.el7 | libdb-devel-5.3.21-25.el7 | libdb-utils-5.3.21-25.el7 |
libdnet-1.12-13.1.el7 | libdrm-2.4.97-2.el7 | libedit-3.0-12.20121213cvs.el7 |
libestr-0.1.9-2.el7 | libfastjson-0.99.4-3.el7 | libffi-3.0.13-19.el7 |
libgcc-4.8.5-44.el7 | libgcrypt-1.5.3-14.el7 | libgomp-4.8.5-44.el7 |
libgpg-error-1.12-3.el7 | libicu-50.2-4.el7_7 | libidn-1.28-4.el7 |
libjpeg-turbo-1.2.90-8.el7 | libkadm5-1.15.1-55.el7_9 | libldb-1.5.4-2.el7 |
libmnl-1.0.3-7.el7 | libmount-2.23.2-65.el7_9.1 | libmpc-1.0.1-3.el7 |
libmspack-0.5-0.8.alpha.el7 | libndp-1.2-9.el7 | libnetfilter_conntrack-1.0.6-1.el7_3 |
libnfnetlink-1.0.1-4.el7 | libnl3-3.2.28-4.el7 | libnl3-cli-3.2.28-4.el7 |
libpcap-14:1.5.3-13.el7_9 | libpciaccess-0.14-1.el7 | libpipeline-1.2.3-3.el7 |
libpng-2:1.5.13-8.el7 | libpwquality-1.2.3-5.el7 | librados2-1:10.2.5-4.el7 |
libreport-filesystem-2.1.11-53.el7.centos | libseccomp-2.3.1-4.el7 | libselinux-2.5-15.el7 |
libselinux-utils-2.5-15.el7 | libsemanage-2.5-14.el7 | libsepol-2.5-10.el7 |
libsmartcols-2.23.2-65.el7_9.1 | libsmbclient-0:4.10.16-25.el7_9 | libss-1.42.9-19.el7 |
libssh-0.7.1-7.el7 | libssh2-1.8.0-4.el7_9.1 | libstdc++-4.8.5-44.el7 |
libsysfs-2.1.0-16.el7 | libtalloc-2.1.16-1.el7 | libtasn1-4.10-1.el7 |
libtdb-1.3.18-1.el7 | libteam-1.29-3.el7 | libtevent-0.9.39-1.el7 |
libtiff-4.0.3-35.el7 | libtirpc-0.2.4-0.16.el7 | libtool-ltdl-2.4.2-22.el7_3 |
libunistring-0.9.3-9.el7 | libuser-0.60-9.el7 | libutempter-1.1.6-4.el7 |
libuuid-2.23.2-65.el7_9.1 | libverto-0.2.5-4.el7 | libwbclient-0:4.10.16-25.el7_9 |
libX11-1.6.7-5.el7_9 | libX11-common-1.6.7-5.el7_9 | libXau-1.0.8-2.1.el7 |
libxcb-1.13-1.el7 | libXft-2.3.2-2.el7 | libxml2-2.9.1-6.el7_9.6 |
libXrender-0.9.10-1.el7 | libxslt-1.1.28-6.el7 | libyaml-0.1.4-11.el7_0 |
libzstd-1.5.0-1.el7 | linux-firmware-20200421-82.git78c0348.el7_9 | lksctp-tools-1.0.17-2.el7 |
lm_sensors-libs-3.4.0-8.20160601gitf9185e5.el7_9.1 | logrotate-3.8.6-19.el7 | lsscsi-0.27-6.el7 |
lua-5.1.4-15.el7 | lvm2-7:2.02.187-6.el7_9.5 | lvm2-libs-7:2.02.187-6.el7_9.5 |
lz4-1.8.3-1.el7 | lzo-2.06-8.el7 | mailcap-2.1.41-2.el7 |
mailx-12.5-19.el7 | make-1:3.82-24.el7 | man-db-2.6.3-11.el7 |
mariadb-libs-1:5.5.68-1.el7 | mdadm-4.1-9.el7_9 | microcode_ctl-2:2.1-73.20.el7_9 |
mod_nss-1.0.14-12.el7 | mod_ssl-1:2.4.6-99.el7.centos.1 | mozjs17-17.0.0-20.el7 |
mpfr-3.1.1-4.el7 | nano-2.3.1-10.el7 | ncurses-5.9-14.20130511.el7_4 |
ncurses-base-5.9-14.20130511.el7_4 | ncurses-libs-5.9-14.20130511.el7_4 | net-snmp-1:5.7.2-49.el7_9.4 |
net-snmp-agent-libs-1:5.7.2-49.el7_9.4 | net-snmp-libs-1:5.7.2-49.el7_9.4 | nettle-2.7.1-9.el7_9 |
net-tools-2.0-0.25.20131004git.el7 | NetworkManager-1:1.18.8-2.el7_9 | NetworkManager-libnm-1:1.18.8-2.el7_9 |
NetworkManager-team-1:1.18.8-2.el7_9 | NetworkManager-tui-1:1.18.8-2.el7_9 | NetworkManager-wifi-1:1.18.8-2.el7_9 |
newt-0.52.15-4.el7 | newt-python-0.52.15-4.el7 | nspr-4.35.0-1.el7_9 |
nss-3.90.0-2.el7_9 | nss-pem-1.0.3-7.el7_9.1 | nss-softokn-3.90.0-6.el7_9 |
nss-softokn-freebl-3.90.0-6.el7_9 | nss-sysinit-3.90.0-2.el7_9 | nss-tools-3.90.0-2.el7_9 |
nss-util-3.90.0-1.el7_9 | numactl-libs-2.0.12-5.el7 | openldap-2.4.44-25.el7_9 |
openldap-clients-2.4.44-25.el7_9 | openldap-devel-2.4.44-25.el7_9 | openssh-7.4p1-23.el7_9 |
openssh-clients-7.4p1-23.el7_9 | openssh-server-7.4p1-23.el7_9 | openssl-1:1.0.2k-26.el7_9 |
openssl-libs-1:1.0.2k-26.el7_9 | open-vm-tools-11.0.5-3.el7_9.9 | os-prober-1.58-9.el7 |
p11-kit-0.23.5-3.el7 | p11-kit-trust-0.23.5-3.el7 | pam-1.1.8-23.el7 |
parted-3.1-32.el7 | passwd-0.79-6.el7 | pciutils-3.5.1-3.el7 |
pciutils-libs-3.5.1-3.el7 | pcre-8.32-17.el7 | pcsc-lite-libs-1.8.8-8.el7 |
perl-4:5.16.3-299.el7_9 | perl-Carp-1.26-244.el7 | perl-constant-1.27-2.el7 |
perl-Data-Dumper-2.145-3.el7 | perl-Encode-2.51-7.el7 | perl-Exporter-5.68-3.el7 |
perl-File-Path-2.09-2.el7 | perl-File-Temp-0.23.01-3.el7 | perl-Filter-1.49-3.el7 |
perl-Getopt-Long-2.40-3.el7 | perl-HTTP-Tiny-0.033-3.el7 | perl-libs-4:5.16.3-299.el7_9 |
perl-macros-4:5.16.3-299.el7_9 | perl-parent-1:0.225-244.el7 | perl-PathTools-3.40-5.el7 |
perl-Pod-Escapes-1:1.04-299.el7_9 | perl-podlators-2.5.1-3.el7 | perl-Pod-Perldoc-3.20-4.el7 |
perl-Pod-Simple-1:3.28-4.el7 | perl-Pod-Usage-1.63-3.el7 | perl-Scalar-List-Utils-1.27-248.el7 |
perl-Socket-2.010-5.el7 | perl-Storable-2.45-3.el7 | perl-Text-ParseWords-3.29-4.el7 |
perl-threads-1.87-4.el7 | perl-threads-shared-1.43-6.el7 | perl-Time-HiRes-4:1.9725-3.el7 |
perl-Time-Local-1.2300-2.el7 | pinentry-0.8.1-17.el7 | pkgconfig-1:0.27.1-4.el7 |
plymouth-0.8.9-0.34.20140113.el7.centos | plymouth-core-libs-0.8.9-0.34.20140113.el7.centos | plymouth-scripts-0.8.9-0.34.20140113.el7.centos |
policycoreutils-2.5-34.el7 | polkit-0.112-26.el7_9.1 | polkit-pkla-compat-0.1-4.el7 |
popt-1.13-16.el7 | postfix-2:2.10.1-9.el7 | procps-ng-3.3.10-28.el7 |
psmisc-22.20-17.el7 | pth-2.0.7-23.el7 | pyldb-1.5.4-2.el7 |
pytalloc-2.1.16-1.el7 | python-2.7.5-94.el7_9 | python-javapackages-3.4.1-11.el7 |
python-libs-2.7.5-94.el7_9 | python-lxml-3.2.1-4.el7 | python-tdb-1.3.18-1.el7 |
qrencode-libs-3.4.1-3.el7 | readline-6.2-11.el7 | rootfiles-8.1-11.el7 |
rpm-4.11.3-48.el7_9 | rpm-build-libs-4.11.3-48.el7_9 | rpm-libs-4.11.3-48.el7_9 |
rsh-0.17-80.el7 | rsync-3.1.2-12.el7_9 | rsyslog-8.24.0-57.el7_9.3 |
samba-client-0:4.10.16-25.el7_9 | samba-client-libs-0:4.10.16-25.el7_9 | samba-common-0:4.10.16-25.el7_9 |
samba-common-libs-0:4.10.16-25.el7_9 | samba-libs-0:4.10.16-25.el7_9 | screen-4.1.0-0.27.20120314git3c2946.el7_9 |
sed-4.2.2-7.el7 | selinux-policy-3.13.1-268.el7_9.2 | selinux-policy-targeted-3.13.1-268.el7_9.2 |
setup-2.8.71-11.el7 | shadow-utils-2:4.6-5.el7 | shared-mime-info-1.8-5.el7 |
slang-2.2.4-11.el7 | snappy-1.1.0-3.el7 | sqlite-3.7.17-8.el7_7.1 |
stix-fonts-1.1.0-5.el7 | strace-4.24-7.el7_9 | sudo-1.8.23-10.el7_9.3 |
sysfsutils-2.1.0-16.el7 | sysstat-10.1.5-20.el7_9 | systemd-219-78.el7_9.9 |
systemd-libs-219-78.el7_9.9 | systemd-sysv-219-78.el7_9.9 | sysvinit-tools-2.88-14.dsf.el7 |
tar-2:1.26-35.el7 | tcl-1:8.5.13-8.el7 | tcpdump-14:4.9.2-4.el7_7.1 |
tcp_wrappers-libs-7.6-77.el7 | teamd-1.29-3.el7 | telnet-1:0.17-66.el7 |
tk-1:8.5.13-6.el7 | trousers-0.3.14-2.el7 | tzdata-2024a-1.el7 |
tzdata-java-2024a-1.el7 | unzip-6.0-24.el7_9 | ustr-1.0.4-16.el7 |
util-linux-2.23.2-65.el7_9.1 | vim-minimal-2:7.4.629-8.el7_9 | wget-1.14-18.el7_6.1 |
which-2.20-7.el7 | wpa_supplicant-1:2.6-12.el7_9.2 | xfsprogs-4.5.0-22.el7 |
xmlsec1-1.2.20-8.el7_9 | xmlsec1-openssl-1.2.20-8.el7_9 | xz-5.2.2-2.el7_9 |
xz-libs-5.2.2-2.el7_9 | zlib-1.2.7-21.el7_9 |
Comments
Log in or register to comment.