27 January 2018 on CentOS 6

The latest BMC Discovery CentOS 6 OS upgrade includes all applicable CentOS updates up to 27th January, 2018.

Important

This OS Update (OSU) contains fixes and mitigations for the Meltdown and Spectre vulnerabilities. As a single-use restricted appliance, the risk of these vulnerabilities to BMC Discovery is low, but to follow security best practices we would recommend applying the update in most cases.

This update also contains the Red Hat fix for the issue, noted in the previous (23-January-2018-on-CentOS-6) OSU where a paravirtualized guest on XEN, including AWS and other cloud platforms, could be rendered unbootable.

The OS upgrade supports the installed BMC Discovery (64 bit architecture) virtual appliances on CentSO 6. The following file is available from the BMC Electronic Product Distribution (EPD) site for 64 bit architecture:

  • ADDM_OS_Upgrade_CentOS_64_6.18.01.27_725556_ga.sh.gz 

Packages which have been updated since the previous OS upgrade are listed below, with version numbers:

  • kernel-2.6.32-696.20.1.el6
  • kernel-firmware-2.6.32-696.20.1.el6
  • kernel-headers-2.6.32-696.20.1.el6
  • libblkid-2.17.2-12.28.el6_9.2
  • libuuid-2.17.2-12.28.el6_9.2
  • ntp-4.2.6p5-12.el6.centos.2
  • ntpdate-4.2.6p5-12.el6.centos.2
  • samba-client-0:3.6.23-46el6_9
  • samba-common-0:3.6.23-46el6_9
  • samba-winbind-0:3.6.23-46el6_9
  • samba-winbind-clients-0:3.6.23-46el6_9
  • selinux-policy-3.7.19-307el6_9.3
  • selinux-policy-targeted-3.7.19-307el6_9.3
  • sysstat-9.0.4-33el6_9.1
  • util-linux-ng-2.17.2-12.28.el6_9.2


JDK package included:

  • tw-jdk5-22-11
  • tw-jdk8-162-1

This is unchanged from the previous release.

The OS release included in this update is 6.9. This is unchanged from the previous release.


Note

The openssl-1.0.1e-cve-2015-4000.patch has been excluded from the openssl RPM to prevent compatibility issues in existing BMC Discovery deployments. 

The patch prevents OpenSSL allowing connections with DH parameters fewer than 768 bits. OpenSSL is used in BMC Discovery for communication between appliances for consolidation and clustering, and between appliances and Windows proxies. All these channels currently use 512 bit DH parameters. If the patch was included, no communication between appliances and proxies would be possible until all were upgraded. 

Future releases of BMC Discovery will increase the DH parameters to 2048 bits. Excluding the patch at present allows planned roll-out of updates rather than a forced immediate upgrade of all systems.

The following table shows the complete list of the OS specific packages that will be present on a 64 bit Enterprise Edition of BMC Discovery after the latest OS upgrade has been installed.

Package name

Package name

Package name

acl-2.2.49-7.el6_9.1

apr-1.3.9-5.el6_9.1

apr-devel-1.3.9-5.el6_9.1

apr-util-1.3.9-3.el6_0.1

apr-util-devel-1.3.9-3.el6_0.1

apr-util-ldap-1.3.9-3.el6_0.1

attr-2.4.44-7.el6

audit-2.4.5-6.el6

audit-libs-2.4.5-6.el6

basesystem-10.0-4.el6

bash-4.1.2-48.el6

bc-1.06.95-1.el6

bind-libs-32:9.8.2-0.62.rc1.el6_9.5

bind-utils-32:9.8.2-0.62.rc1.el6_9.5

binutils-2.20.51.0.2-5.47.el6_9.1

busybox-1:1.15.1-21.el6_6

bzip2-1.0.5-7.el6_0

bzip2-libs-1.0.5-7.el6_0

ca-certificates-2017.2.14-65.0.1.el6_9

centos-release-6-9.el6.12.3

checkpolicy-2.0.22-1.el6

chkconfig-1.3.49.5-1.el6

cifs-utils-4.8.1-20.el6

cloog-ppl-0.15.7-1.2.el6

compat-libstdc++-33-3.2.3-69.el6

coreutils-8.4-46.el6

coreutils-libs-8.4-46.el6

cpio-2.10-13.el6

cpp-4.4.7-18.el6

cracklib-2.8.16-4.el6

cracklib-dicts-2.8.16-4.el6

cronie-1.4.4-16.el6_8.2

cronie-anacron-1.4.4-16.el6_8.2

crontabs-1.10-33.el6

curl-7.19.7-53.el6_9

cyrus-sasl-2.1.23-15.el6_6.2

cyrus-sasl-devel-2.1.23-15.el6_6.2

cyrus-sasl-lib-2.1.23-15.el6_6.2

dash-0.5.5.1-4.el6

db4-4.7.25-22.el6

db4-cxx-4.7.25-22.el6

db4-devel-4.7.25-22.el6

db4-utils-4.7.25-22.el6

dbus-glib-0.86-6.el6

dbus-libs-1:1.2.24-8.el6_6

device-mapper-1.02.117-12.el6_9.1

device-mapper-event-1.02.117-12.el6_9.1

device-mapper-event-libs-1.02.117-12.el6_9.1

device-mapper-libs-1.02.117-12.el6_9.1

device-mapper-multipath-0.4.9-100.el6_9.1

device-mapper-multipath-libs-0.4.9-100.el6_9.1

device-mapper-persistent-data-0.6.2-0.1.rc7.el6

dhclient-12:4.1.1-53.P1.el6.centos.1

dhcp-common-12:4.1.1-53.P1.el6.centos.1

diffutils-2.8.1-28.el6

dmidecode-1:2.12-7.el6

dos2unix-3.1-37.el6

dracut-004-409.el6_8.2

dracut-fips-004-409.el6_8.2

dracut-kernel-004-409.el6_8.2

e2fsprogs-1.41.12-23.el6

e2fsprogs-libs-1.41.12-23.el6

eject-2.1.5-17.el6

elfutils-libelf-0.164-2.el6

elfutils-libs-0.164-2.el6

ethtool-2:3.5-6.el6

expat-2.0.1-13.el6_8

expat-devel-2.0.1-13.el6_8

file-5.04-30.el6

file-libs-5.04-30.el6

filesystem-2.4.30-3.el6

findutils-1:4.4.2-9.el6

fipscheck-1.2.0-7.el6

fipscheck-lib-1.2.0-7.el6

fontconfig-2.8.0-5.el6

freetype-2.3.11-17.el6

ftp-0.17-54.el6

gamin-0.1.10-9.el6

gawk-3.1.7-10.el6_7.3

gcc-4.4.7-18.el6

gdb-7.2-92.el6

gdbm-1.8.0-39.el6

glib2-2.28.8-9.el6

glibc-2.12-1.209.el6_9.2

glibc-common-2.12-1.209.el6_9.2

glibc-devel-2.12-1.209.el6_9.2

glibc-headers-2.12-1.209.el6_9.2

gmp-4.3.1-12.el6

gnupg2-2.0.14-8.el6

gnutls-2.12.23-21.el6

grep-2.20-6.el6

groff-1.18.1.4-21.el6

grub-1:0.97-99.el6

grubby-7.0.15-7.el6

gzip-1.3.12-24.el6

hmaccalc-0.9.12-2.el6

httpd-2.2.15-60.el6.centos.6

httpd-devel-2.2.15-60.el6.centos.6

httpd-tools-2.2.15-60.el6.centos.6

hwdata-0.233-18.1.el6

info-4.13a-8.el6

initscripts-9.03.58-1.el6.centos.2

iproute-2.6.32-54.el6

iptables-1.4.7-16.el6

iptables-ipv6-1.4.7-16.el6

iputils-20071127-24.el6

iscsi-initiator-utils-6.2.0.873-27.el6_9

kbd-1.15-11.el6

kbd-misc-1.15-11.el6

kernel-2.6.32-696.20.1.el6

kernel-firmware-2.6.32-696.20.1.el6

kernel-headers-2.6.32-696.20.1.el6

kexec-tools-2.0.0-307.el6_9.1

keyutils-1.4-5.el6

keyutils-libs-1.4-5.el6

kpartx-0.4.9-100.el6_9.1

krb5-appl-clients-1.0.1-7.el6_2.1

krb5-libs-1.10.3-65.el6

krb5-workstation-1.10.3-65.el6

less-436-13.el6

libacl-2.2.49-7.el6_9.1

libaio-0.3.107-10.el6

libart_lgpl-2.3.20-5.1.el6

libattr-2.4.44-7.el6

libblkid-2.17.2-12.28.el6_9.2

libcap-2.16-5.5.el6

libcap-ng-0.6.4-3.el6_0.1

libcom_err-1.41.12-23.el6

libcurl-7.19.7-53.el6_9

libdrm-2.4.65-2.el6

libedit-2.11-4.20080712cvs.1.el6

libffi-3.0.5-3.2.el6

libgcc-4.4.7-18.el6

libgcrypt-1.4.5-12.el6_8

libgomp-4.4.7-18.el6

libgpg-error-1.7-4.el6

libgssglue-0.1-11.el6

libicu-4.2.1-14.el6

libidn-1.18-2.el6

libjpeg-turbo-1.2.1-3.el6_5

libkadm5-1.10.3-65.el6

libnih-1.0.1-7.el6

libpcap-14:1.4.0-4.20130826git2dbcaa1.el6

libpciaccess-0.13.4-1.el6

libpng-2:1.2.49-2.el6_7

libselinux-2.0.94-7.el6

libselinux-utils-2.0.94-7.el6

libsemanage-2.0.43-5.1.el6

libsepol-2.0.41-4.el6

libss-1.41.12-23.el6

libssh2-1.4.2-2.el6_7.1

libstdc++-4.4.7-18.el6

libtalloc-2.1.5-1.el6_7

libtasn1-2.3-6.el6_5

libtdb-1.3.8-3.el6_8.2

libtevent-0.9.26-2.el6_7

libtirpc-0.2.1-13.el6_9

libudev-147-2.73.el6_8.2

libusb-0.1.12-23.el6

libuser-0.56.13-8.el6_7

libutempter-1.1.5-4.1.el6

libuuid-2.17.2-12.28.el6_9.2

libxml2-2.7.6-21.el6_8.1

libxslt-1.1.26-2.el6_3.1

lm_sensors-libs-3.1.1-17.el6

logrotate-3.7.8-28.el6

lua-5.1.4-4.1.el6

lvm2-2.02.143-12.el6_9.1

lvm2-libs-2.02.143-12.el6_9.1

lzo-2.03-3.1.el6_5.1

m4-1.4.13-5.el6

mailcap-2.1.31-2.el6

mailx-12.4-8.el6_6

make-1:3.81-23.el6

MAKEDEV-3.24-6.el6

man-1.6f-39.el6

mdadm-3.3.4-8.el6

microcode_ctl-1:1.17-25.4.el6_9

mingetty-1.08-5.el6

mod_nss-1.0.10-9.el6

mod_ssl-1:2.2.15-60.el6.centos.6

module-init-tools-3.9-26.el6

mpfr-2.4.1-6.el6

mysql-libs-5.1.73-8.el6_8

nano-2.0.9-7.el6

ncurses-5.7-4.20090207.el6

ncurses-base-5.7-4.20090207.el6

ncurses-libs-5.7-4.20090207.el6

net-snmp-1:5.5-60.el6

net-snmp-libs-1:5.5-60.el6

net-tools-1.60-114.el6

newt-0.52.11-4.el6

newt-python-0.52.11-4.el6

nspr-4.13.1-1.el6

nss-3.28.4-4.el6_9

nss-softokn-3.14.3-23.3.el6_8

nss-softokn-freebl-3.14.3-23.3.el6_8

nss-sysinit-3.28.4-4.el6_9

nss-tools-3.28.4-4.el6_9

nss-util-3.28.4-1.el6_9

ntp-4.2.6p5-12.el6.centos.2

ntpdate-4.2.6p5-12.el6.centos.2

openldap-2.4.40-16.el6

openldap-clients-2.4.40-16.el6

openldap-devel-2.4.40-16.el6

openssh-5.3p1-123.el6_9

openssh-clients-5.3p1-123.el6_9

openssh-server-5.3p1-123.el6_9

openssl-1.0.1e-57.el6.bmc

p11-kit-0.18.5-2.el6_5.2

p11-kit-trust-0.18.5-2.el6_5.2

pam-1.1.1-24.el6

parted-2.1-29.el6

passwd-0.77-7.el6

pcre-7.8-7.el6

perl-4:5.10.1-144.el6

perl-libs-4:5.10.1-144.el6

perl-Module-Pluggable-1:3.90-144.el6

perl-Pod-Escapes-1:1.04-144.el6

perl-Pod-Simple-1:3.13-144.el6

perl-version-3:0.77-144.el6

pinentry-0.7.6-8.el6

pkgconfig-1:0.23-9.1.el6

plymouth-0.8.3-29.el6.centos

plymouth-core-libs-0.8.3-29.el6.centos

plymouth-scripts-0.8.3-29.el6.centos

policycoreutils-2.0.83-30.1.el6_8

popt-1.13-7.el6

postfix-2:2.6.6-8.el6

ppl-0.10.2-11.el6

procps-3.2.8-45.el6_9.1

psmisc-22.6-24.el6

pth-2.0.7-9.3.el6

pyOpenSSL-0.13.1-2.el6

python-2.6.6-66.el6_8

python-libs-2.6.6-66.el6_8

readline-6.0-4.el6

redhat-logos-60.0.14-12.el6.centos

rootfiles-8.1-6.1.el6

rpcbind-0.2.0-13.el6_9.1

rpm-4.8.0-55.el6

rpm-libs-4.8.0-55.el6

rsh-0.17-64.el6_9.1

rsync-3.0.6-12.el6

rsyslog-5.8.10-10.el6_6

samba-client-0:3.6.23-46el6_9

samba-common-0:3.6.23-46el6_9

samba-winbind-0:3.6.23-46el6_9

samba-winbind-clients-0:3.6.23-46el6_9

screen-4.0.3-19.el6

sed-4.2.1-10.el6

selinux-policy-3.7.19-307el6_9.3

selinux-policy-targeted-3.7.19-307el6_9.3

setup-2.8.14-23.el6

shadow-utils-2:4.1.5.1-5.el6

shared-mime-info-0.70-6.el6

slang-2.2.1-1.el6

smartmontools-1:5.43-3.el6

snappy-1.1.0-1.el6

sqlite-3.6.20-1.el6_7.2

strace-4.8-11.el6

sudo-1.8.6p3-29.el6_9

sysstat-9.0.4-33el6_9.1

sysvinit-tools-2.87-6.dsf.el6

tar-2:1.23-15.el6_8

tcpdump-14:4.0.0-11.20090921gitdf3cb4.2.el6

tcp_wrappers-libs-7.6-58.el6

telnet-1:0.17-48.el6

traceroute-3:2.0.14-2.el6

tzdata-2017c-1.el6

udev-147-2.73.el6_8.2

unzip-6.0-5.el6

upstart-0.6.5-16.el6

ustr-1.0.4-9.1.el6

util-linux-ng-2.17.2-12.28.el6_9.2

vim-minimal-2:7.4.629-5.el6_8.1

wget-1.12-10.el6

which-2.19-6.el6

xz-4.999.9-0.5.beta.20091007git.el6

xz-libs-4.999.9-0.5.beta.20091007git.el6

xz-lzma-compat-4.999.9-0.5.beta.20091007git.el6

zlib-1.2.3-29.el6

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*