Sign In
Forgot Password

Don’t have an account? Create One.

NetBackup CloudPoint 9.1.0.1 Hotfix - 9.1.0.1.9424

HotFix Critical

Abstract

NetBackup CloudPoint 9.1.0.1 Hotfix - 9.1.0.1.9424

Description

Bug Fix: Veritas CloudPoint 9.1.0.1.9424
 

Patch Date: 2022-10-14

 

This document provides the following information:
   * PATCH NAME
   * OPERATING SYSTEMS SUPPORTED BY THE PATCH
   * BASE PRODUCT VERSION FOR THE PATCH
   * SUMMARY OF INCIDENTS FIXED BY THE PATCH
   * DETAILS OF INCIDENTS FIXED BY THE PATCH
   * INSTALLING THE PATCH
   * IMPORTANT NOTES
   * KNOWN ISSUES
   * NOTE
 
PATCH NAME
Veritas CloudPoint 9.1.0.1.9424
 
OPERATING SYSTEMS SUPPORTED BY THE PATCH
Ubuntu 18.04 and 20.04 Server LTS
Red Hat Enterprise Linux (RHEL) 8.3, 8.4 and 7.x
Note: CloudPoint deployment for RHEL 8.3 and 8.4 over IPV6 is not supported.
SUSE Linux Enterprise Server (SLES) 15 SP2
 
BASE PRODUCT VERSION FOR THE PATCH
Veritas CloudPoint 9.1.0.1.9406
 

SUMMARY OF INCIDENTS FIXED BY PREVIOUS PATCH INCLUDED IN THE CURRENT PATCH

 

Patch 9.1.0.1.9412
Etrack: e4063375

 

SYMPTOM:

Fix Apache logging vulnerability (CVE-2021-45105, CVE-2021-44832) for common-objects and IDM.
Service flexsnap-api-gateway allows TLSv1.0 on port 8472
 

DESCRIPTION:

IDM and common-objects contains vulnerable apache logging library (Log4j)

 

RESOLUTION:  

Updated vulnerable Apache logging library to recommended version 2.17.1
Enforced TLSv1.2 for flexsnap-api-gateway service.


SUMMARY OF INCIDENTS FIXED BY THE PATCH

Patch 9.1.0.1.9424
Etrack 4087850: Fix to support Backup of share data only.
 
DETAILS OF INCIDENTS FIXED BY THE PATCH

This patch fixes the following etrack incidents:
 
Patch 9.1.0.1.9424
Etrack: e4087850
 

SYMPTOM

Backup-from-Snapshot taking more data backup than available on Share.

 

DESCRIPTION

Backup-from-snapshot takes backup of complete filesystem even if a single share of that NAS filesystem is specified in the policy.
 

RESOLUTION

Code changes have been made to identify the share path from the NAS filesystem and when a particular share is specified in the policy, backup would take place for the specified share only and not the complete filesystem. 
 

INSTALLING THE BUILD

A. For CloudPoint server with docker based installations
  I. Take backup of the complete data of /cloudpoint at a different location
 
  II. Uploaded the new bulid:
      # docker load -i VRTScloudpoint-docker-9.1.0.1.9424.img.gz
 
  II. Run the following command as root.
      docker run --rm -it -v /cloudpoint:/cloudpoint -v /var/run/docker.sock:/var/run/docker.sock veritas/flexsnap-cloudpoint:<installed_cp_version> stop
      docker run --rm -it -v /cloudpoint:/cloudpoint -v /var/run/docker.sock:/var/run/docker.sock veritas/flexsnap-cloudpoint:9.1.0.1.9424 install
 
B. For CloudPoint server with podman based installations
  I. Take backup of the complete data of /cloudpoint at a different location
 
  II. Unzip and un-tar the binaries and list the contents:
    # gunzip VRTScloudpoint-podman-9.1.0.1.9424.tar.gz
 
    # tar -xvf VRTScloudpoint-podman-9.1.0.1.9424.tar
 
  III. Run flexsnap_preinstall.sh script
    # ./flexsnap_preinstall.sh
 
  IV. Run the following command as root.
    #podman run -it --rm --privileged -v /cloudpoint:/cloudpoint -v /run/podman/podman.sock:/run/podman/podman.sock veritas/flexsnap-cloudpoint:<installed_cp_version> stop
    #podman run -it --rm --privileged -v /cloudpoint:/cloudpoint -v /run/podman/podman.sock:/run/podman/podman.sock veritas/flexsnap-cloudpoint:9.1.0.1.9424 install
 
KNOWN ISSUES
NA
 
IMPORTANT NOTE

1. Before applying this patch please make sure that there aren't any active snapshots created by NetBackup and make sure to clean-up all the snapshots before applying this patch.

 

2. Please make sure that you protect the /cloudpoint directory from the CloudPoint host on regular basis. This is required in a disaster recovery situation.

 

3. Roll back to the previous version if needed.
  a. Log in to CloudPoint host
  b. Run the following commands as root.
    For CloudPoint server with docker based installations:
      #docker run --rm -it -v /cloudpoint:/cloudpoint -v /var/run/docker.sock:/var/run/docker.sock veritas/flexsnap-cloudpoint:9.1.0.1.9424 stop
      Restore the data that we backed of /cloudpoint in the cloud point host in /cloudpoint
      #docker run --rm -it -v /cloudpoint:/cloudpoint -v /var/run/docker.sock:/var/run/docker.sock veritas/flexsnap-cloudpoint:<previous_cp_version> install
 
    For CloudPoint server with podman based installations
      #podman run -it --rm --privileged -v /cloudpoint:/cloudpoint -v /run/podman/podman.sock:/run/podman/podman.sock veritas/flexsnap-cloudpoint:9.1.0.1.9424 stop
      Restore the data that we backed of /cloudpoint in the cloud point host in /cloudpoint
      #podman run -it --rm --privileged -v /cloudpoint:/cloudpoint -v /run/podman/podman.sock:/run/podman/podman.sock veritas/flexsnap-cloudpoint:<previous_cp_version> install

 

4. The previous version(s) of Docker/Podman container images are not removed. You can remove them to save your CloudPoint instance disk space.

Applies to the following product releases

Update files

File name Description Version Platform Size