Cumulative Security update for vRealize Automation 7.6 and vRealize Orchestrator 7.6

Products

• VMware Aria Suite

Issue/Introduction

This patch updates several platform components to the latest version available.

Current Patch Version

August 2022

Filename

vra-vro76-platform-update-August2022.pl

MD5 Checksum

a787257327fbcf2f5fcdbe38f49a5db1

SHA1 Checksum

4ab915a6242de434da61e2670d351862db59e37d

Symptoms:

Security scanners flag multiple platform vulnerabilities on Virtual Appliance(s)

Environment

VMware vRealize Automation 7.6.x

Resolution

Prerequisites

• Please take simultaneous non-memory snapshots of each virtual appliance(s) in the cluster.
• You have access to root user and password
• You have SSH or console access to each virtual appliance.

Installation

1. Create a backup of the vRealize appliance(s) (Back Up Your Existing vRealize Automation 7.6 Environment)
2. Download the latest cumulative monthly security patch from the Broadcom Support Portal.
   • The file name will follow a format of Month Year:  vra-vro76-platform-update-MonthYear.pl

Note:  The file downloaded may have an abbreviated month, such as Aug for August.

Note:  Update the italicized text with the proper filename for each command referenced below.

For example:  vra-vro76-platform-update-August2022.pl

3. Upload the file to the appliance through SCP such as WinSCP or another FTP method.
4. Update the file to be executable

chmod +x vra-vro76-platform-update-August2022.pl

5. Run the patch and follow the on-screen instructions

perl vra-vro76-platform-update-August2022.pl

6. Reboot the Virtual Appliance.

Note: For High Availability vRealize Automation configurations, follow the reboot order in Restart vRealize Automation.

7. Repeat Steps # 3 - 6 on each Virtual Appliance.