6.7.0-5 Security Hotfix

Product: Stratusphere FIT/UX

Product Version: 6.7.0-5

Expires on: 365 days from publish date

Updated: April 1, 2025

Problem:

1. Stratusphere version 6.7.0-5 Appliances need updates to resolve security vulnerabilities:
   • • CVE-2025-1094, CVE-2019-12900, CVE-2024-11187, CVE-2020-11023, CVE-2022-49043, CVE-2024-1488, CVE-2024-8508, CVE-2024-53104, CVE-2024-26935, CVE-2024-50275, CVE-2025-1244, CVE-2024-56337, CVE-2024-56171, CVE-2025-24928, CVE-2024-53197, CVE-2024-57979, CVE-2024-57807, CVE-2024-50302, CVE-2025-24528, CVE-2025-0665, CVE-2023-38545, CVE-2017-9765
       
2. PowerShell scripts need to be removed from the Connector ID installer exe/msi

Possible resolution:

IMPORTANT: The following resolution applies ONLY to Stratusphere appliances running Stratusphere 6.7.0-5.  All appliances should show version 6.7.0-5 in the console status page and within the /etc/tnt-release file.  If a hub, database, or collector appliance shows a lower version, consult the Stratusphere Upgrade & Migration Guidance document for instructions and then return to this KB article.  The upgrade should automatically fail to apply if attempted to on any version besides 6.7.0-5.

Preparation

• On a local desktop with access to the Internet, download the Stratusphere upgrade image by clicking the following link : https://cdn.liquidware.com/stratusphere/hotfix/stratusphere-6.7.0-5.CID-202503.img
  
  • Once uploaded to the Hub, this hotfix image file will replace the GA image of 6.7.0-5 and you will not be able to upgrade attached Collector or Database appliances unless the are running version 6.7.0-5.  If needed, follow standard upgrade process and re-upload the GA 6.7.0-5 image found at Liquidware Downloads then return to this hotfix KB
• (Recommended) Shut down and take a snapshot of the Hub, Database, and Collector appliances.
• Power up all your Stratusphere appliances: Hub, Database, and Collectors.
• (Recommended) Keep the local appliance consoles of the Stratusphere Hub, Database, and Collector open during the upgrade process.  This is helpful because the user can observe the upgrades running and their status, reboot activity, and uptime on the console status screens.

Upload Update

To upload the update, complete the following steps:

• Log in to the Administration section of the Stratusphere Hub Web UI.
• Navigate to the Hub Administration > Upgrades > Offline tab.

The screen displays a page with either a Browse or Choose File button depending on your browser.

• Click the Browse or Choose File button, navigate to the location where the stratusphere-6.7.0-5.CID-202503.img file was stored when you downloaded it from the link above. Select the file, then open it.
• Click the Upload Update button. A progress bar with the message “Upload in Progress (This may take several minutes)” will be displayed as the upgrade image is uploaded to the Hub.

After the upload finishes, the progress bar displays the message “Download Completed. Verifying Image,” indicating that the Hub is verifying the integrity of image file that was uploaded.

After the image is verified, the message “Upload Completed Successfully" appears at the top of the page.

Install Update on Hub and Database

• Click the Install Update button to install the 6.x upgrade on the Stratusphere Hub.
• The UI displays a progress bar with the message “Install in Progress (This might take several minutes)."
• As soon as the upgrade starts, all services on the appliance are turned off. The UI then displays the message “Stratusphere is being upgraded after which the Hub will be rebooted. You will be logged out in 10 seconds. Please wait at least 15 minutes to log back in." The user is then logged out of the Web UI automatically and a generic “Stratusphere is down" message is displayed.
• At this point, you could close the browser tab and open the Hub and/or Database console windows and observe their status screens to see messages at the top like “Updates are Running”. On AWS & Azure, you can use your preferred SSH client to SSH into the appliance with your console credentials for your appliance and run watch -c cat /tmp/status command to view the console status screen. Alternatively, use the appliance console screen on AWS / Azure and refresh the appliance console web page to manually update the status screens to check whether the updates are running and for the uptime since a reboot.
• If a separate Database appliance is connected, its upgrade is initiated first and is rebooted automatically at the end of the upgrade.
• The Hub then upgrades itself and reboots as well. In some cases, the appliances might reboot again.
• Once the upgrade is completed and the appliance(s) reboot, use the uptime on the Hub appliance status screen at the top left of the screen next to top - to wait at least 15-30 minutes after the reboot of the Hub for all internal services to start before opening the web browser and accessing the UI again.
  • If the version number did not change, or if the login page did not load as expected, or the “Stratusphere is down” message does not clear, or if there are any “HTTP Status 404 – Not Found” errors once you log in, then refer to the After upgrade, the Web UI displays a 404 Error topic in the Troubleshooting KB article.

Install Update on Collectors

If there are any Collectors on this installation of Stratusphere, complete the following steps:

• Navigate to the Collector Administration > Collectors tab of the Web UI.
• Select each 6.7.0-5 Collector in the list one at a time and click the Upgrade button.
• The Collectors then upgrade and reboot themselves.
• After they reboot, wait about 15 minutes, then verify their Status is OK on the Collector Administration > Collectors tab

Validate and Complete the Update

This hotfix will increase the kernel version to 4.18.0-553.44.1.el8.  You may confirm that each appliance is updated by logging in and running uname -rv 

$ uname -rv
4.18.0-553.44.1.el8_10.x86_64 #1 SMP Mon Mar 10 04:51:32 PDT 2025

Connector ID installers at Hub Administration > Connector ID Keys > Connector ID Key Software will be updated to version 6.7.0-10

Update Connector ID agents

To update Connector ID Key agents for persistent machines, complete the following steps:

1. Log in to the Stratusphere Hub Web UI Administration section.
2. Navigate to Hub Administration > Connector ID Keys > Connector ID Keys Properties tab.
3. Select the appropriate machine group in the Configure properties for dropdown list.
4. Scroll down and select the Automatically update Connector ID Keys when new software versions are installed in the Stratusphere Hub checkbox.
5. Scroll down and click the Save button.
6. The CID Keys then automatically download the installer for the updated version and upgrade themselves on their next callback.

Machines with PowerShell disabled that need to install the Connector ID will need the new 6.7.0-10 Connector ID installer. As well, for non-persistent machines, your master or gold images need to be updated with the new CID Key software.  To update Connector ID Key agents for these machines, complete the following steps:

1. Log in to the Stratusphere Hub Web UI Administration section.
2. Navigate to the Hub Administration > Connector ID Keys > Connector ID Key Software tab.
3. Download the appropriate installer for your environment.

4. Open your gold image as an Administrator and follow the instructions outlined in the appendixes of the Stratusphere Installation & Configuration Guide to update agents on gold images.

Before completing the upgrade and removing the snapshots, Liquidware recommends waiting for a few hours to ensure that the CID Keys agents call back in a round robin manner through their list of Collectors. Make sure that the following are true:

• New data is being collected and saved within the database.
• New data is visible within the Web UI.

After you verify that the installation has upgraded and is working properly, remove the snapshots from the Stratusphere appliances.

The upgrade process is complete.

For troubleshooting, see the following KB article and/or contact Liquidware Support: Troubleshooting 6.7.0-x Hotfix upgrade