Difference between revisions of "Security Updates"

From OSNEXUS Online Documentation Site
Jump to: navigation, search
m (Fix for Heartbleed)
m (QuantaStor Security Notifications)
 
(59 intermediate revisions by the same user not shown)
Line 1: Line 1:
QuantaStor uses the Ubuntu Server linux distribution as a basis and uses the security patches packaged by Canonical to address the need to patch various parts of the operating system for security and stability of the system. To apply these updates you need to login to the system as the administrator 'qadmin' account and then run the following command:
+
[[Category:support_guide]]
 +
QuantaStor ISO images uses Ubuntu Server LTS Linux distributions as an OS basis but RHEL based installation options with RHEL/RockyLinux/AlmaLinux are available for specialized environments.  QuantaStor has monthly updates to include security patches to the underlying operating system to ensure the security and stability of the system.
  
<pre>
+
The [https://services.osnexus.com/security QuantaStor Security Notice (QSN) server] processes published Linux CVE and indicates which ones affect packages used by QuantaStor.  OSNexus recommends running an upgrade via the 'Upgrade Manager' on a monthly or quarterly basis to keep current with the latest security patches which address the issues noted in QSNs.
sudo apt-get update
+
sudo apt-get upgrade
+
</pre>
+
  
 +
== QuantaStor Security Notifications ==
 +
On this page we maintain a summary of all the product changes made to QuantaStor which are security related and we post specific notices about Linux security issues that effect packages distributed with QuantaStor such as the openssl libraries.
  
== Fix for Heartbleed CVE-2014-0160 CVE-2014-0076 ==
+
For details on the all the latest security notifications for the Ubuntu LTS release used by QuantaStor please see (https://services.osnexus.com/security). 
  
Ubuntu Security update notification:
+
We recommend that system administrators perform periodic auditing of their systems and install any and all security updates by using the QuantaStor 'Upgrade Manager' via the QuantaStor web management interface or script this using the QuantaStor CLI or API.
http://www.ubuntu.com/usn/usn-2165-1/
+
This will automatically apply the latest updates and security updates.  Our package servers are updated with the latest security updates at least once per month as part of standard maintenance updates.  To see more detail on when the most recent product update was published please see our [https://wiki.osnexus.com/index.php?title=QuantaStor_Version_ChangeLog product change log].
 
+
You can upgrade your OpenSSL release to the latest which includes the fixes for heartbleed with the below console commands as the 'qadmin' administrative user:
+
 
+
<pre>
+
sudo apt-get update
+
sudo apt-get install openssl
+
</pre>
+
 
+
== Fix for Bash ==
+
 
+
TBD
+

Latest revision as of 08:53, 5 April 2024

QuantaStor ISO images uses Ubuntu Server LTS Linux distributions as an OS basis but RHEL based installation options with RHEL/RockyLinux/AlmaLinux are available for specialized environments. QuantaStor has monthly updates to include security patches to the underlying operating system to ensure the security and stability of the system.

The QuantaStor Security Notice (QSN) server processes published Linux CVE and indicates which ones affect packages used by QuantaStor. OSNexus recommends running an upgrade via the 'Upgrade Manager' on a monthly or quarterly basis to keep current with the latest security patches which address the issues noted in QSNs.

QuantaStor Security Notifications

On this page we maintain a summary of all the product changes made to QuantaStor which are security related and we post specific notices about Linux security issues that effect packages distributed with QuantaStor such as the openssl libraries.

For details on the all the latest security notifications for the Ubuntu LTS release used by QuantaStor please see (https://services.osnexus.com/security).

We recommend that system administrators perform periodic auditing of their systems and install any and all security updates by using the QuantaStor 'Upgrade Manager' via the QuantaStor web management interface or script this using the QuantaStor CLI or API. This will automatically apply the latest updates and security updates. Our package servers are updated with the latest security updates at least once per month as part of standard maintenance updates. To see more detail on when the most recent product update was published please see our product change log.