Difference between revisions of "Security Updates"

From OSNEXUS Online Documentation Site
Jump to: navigation, search
m (Fix for Bash CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187)
m (QuantaStor Security Notifications)
 
(54 intermediate revisions by the same user not shown)
Line 1: Line 1:
QuantaStor uses the Ubuntu Server linux distribution as a basis and utilizes the security patches packaged by Canonical to address the needs of customers to patch various parts of the operating system for security and stability of the system.
+
[[Category:support_guide]]
 +
QuantaStor ISO images uses Ubuntu Server LTS Linux distributions as an OS basis but RHEL based installation options with RHEL/RockyLinux/AlmaLinux are available for specialized environments.  QuantaStor has monthly updates to include security patches to the underlying operating system to ensure the security and stability of the system.
  
All Security Notifications for Ubuntu are provided at the below link:
+
The [https://services.osnexus.com/security QuantaStor Security Notice (QSN) server] processes published Linux CVE and indicates which ones affect packages used by QuantaStor.  OSNexus recommends running an upgrade via the 'Upgrade Manager' on a monthly or quarterly basis to keep current with the latest security patches which address the issues noted in QSNs.
http://www.ubuntu.com/usn/
+
  
We recommend customers perform periodic auditing of their systems and install any and all security updates. It is highly recommended that systems are updated to the latest patched before being initially deployed.  
+
== QuantaStor Security Notifications ==
 +
On this page we maintain a summary of all the product changes made to QuantaStor which are security related and we post specific notices about Linux security issues that effect packages distributed with QuantaStor such as the openssl libraries.
  
To apply these updates you should login to the system as the administrator 'qadmin' account and run the following commands:
+
For details on the all the latest security notifications for the Ubuntu LTS release used by QuantaStor please see (https://services.osnexus.com/security). 
  
<pre>
+
We recommend that system administrators perform periodic auditing of their systems and install any and all security updates by using the QuantaStor 'Upgrade Manager' via the QuantaStor web management interface or script this using the QuantaStor CLI or API.
sudo apt-get update
+
This will automatically apply the latest updates and security updates.  Our package servers are updated with the latest security updates at least once per month as part of standard maintenance updates.  To see more detail on when the most recent product update was published please see our [https://wiki.osnexus.com/index.php?title=QuantaStor_Version_ChangeLog product change log].
sudo apt-get upgrade
+
</pre>
+
 
+
 
+
== Fix for Heartbleed CVE-2014-0076, CVE-2014-0160 ==
+
 
+
Ubuntu Security update notification:
+
http://www.ubuntu.com/usn/usn-2165-1/
+
 
+
You can upgrade your OpenSSL release to the latest which includes the fixes for CVE-2014-0076, CVE-2014-0160 'heartbleed' with the below console commands as the 'qadmin' administrative user:
+
 
+
<pre>
+
sudo apt-get update
+
sudo apt-get install openssl
+
</pre>
+
 
+
== Fix for Bash CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187 ==
+
 
+
Ubuntu Security update notification:
+
http://www.ubuntu.com/usn/usn-2362-1/
+
http://www.ubuntu.com/usn/usn-2363-2/
+
http://www.ubuntu.com/usn/usn-2364-1/
+
 
+
You can upgrade your Bash release to the latest which includes the fix for CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187 'shellshock' with the below console commands as the 'qadmin' administrative user:
+
 
+
<pre>
+
sudo apt-get update
+
sudo apt-get install bash
+
</pre>
+

Latest revision as of 08:53, 5 April 2024

QuantaStor ISO images uses Ubuntu Server LTS Linux distributions as an OS basis but RHEL based installation options with RHEL/RockyLinux/AlmaLinux are available for specialized environments. QuantaStor has monthly updates to include security patches to the underlying operating system to ensure the security and stability of the system.

The QuantaStor Security Notice (QSN) server processes published Linux CVE and indicates which ones affect packages used by QuantaStor. OSNexus recommends running an upgrade via the 'Upgrade Manager' on a monthly or quarterly basis to keep current with the latest security patches which address the issues noted in QSNs.

QuantaStor Security Notifications

On this page we maintain a summary of all the product changes made to QuantaStor which are security related and we post specific notices about Linux security issues that effect packages distributed with QuantaStor such as the openssl libraries.

For details on the all the latest security notifications for the Ubuntu LTS release used by QuantaStor please see (https://services.osnexus.com/security).

We recommend that system administrators perform periodic auditing of their systems and install any and all security updates by using the QuantaStor 'Upgrade Manager' via the QuantaStor web management interface or script this using the QuantaStor CLI or API. This will automatically apply the latest updates and security updates. Our package servers are updated with the latest security updates at least once per month as part of standard maintenance updates. To see more detail on when the most recent product update was published please see our product change log.