VMware Aria Operations 8.18 Hot Fix 2

Products

VMware Aria Suite

Issue/Introduction

VMware Aria Operations 8.18 Hot Fix 2 is a public Hot Fix that addresses the following issues:

The alerts table in the Alerts page no longer retains chosen columns, sorting within the column, and the order of columns.
Kubernetes cost metric not showing - TKGs.
Intermittent UI issues after upgrading to Aria Operations 8.18, including switching to 8.14 UI, black screens, and inconsistent loading.
The link is not working for the "Search Help" button which is placed in the Global Search.
The "Select Object" window does not suggest any metrics/properties after selecting the specific resource while creating a view.
String metric instance name is missing from symptom name in alert details page because of which the symptom was triggered.
In Policy settings, the DT state is deactivated for all attributes, on which there is no defined Symptom Definition.
Double serialization of resource cache in gemfire region.
Property discovery of a testbed with more than 100K objects took 12 hours.

The following CVEs have been resolved as of version 8.18 Hot Fix 2:

Note: Inclusion of a given CVE in the following table does not imply exploitability of said CVE.

Component Name	CVE
apache	CVE-2024-40725
apache	CVE-2024-40898
bind	CVE-2024-1975
bind	CVE-2024-4076
openssl	CVE-2023-0464
	CVE-2023-0465
	CVE-2023-0466

Environment

VMware Aria Operations 8.18

Resolution

VMware Aria Operations 8.18 Hot Fix 2 can only be applied to 8.18.0 environment.
Note: Upgrading from older versions directly to this Hotfix is not supported. You must upgrade to 8.18.0 before applying this HotFix.

Important: Take snapshots of each of the VMware Aria Operations nodes before applying the Hot Fix by following How to take a Snapshot of VMware Aria Operations.

Download the VMware Aria Operations 8.18 Hot Fix 2 PAK file from the Broadcom Support Portal.

Note: You will need to login to the portal first to allow download of the file using the direct links below.

Release Name	Release Date	Build Number	UI Build Number	File Name
VMware-Aria-Operations-8.18-HF2	8/21/2024	24227001	24226560	vRealize_Operations_Manager_With_CP-8.10.x-to-8.18.24227001.pak
vrlcm-vrops-8.18.0_HF2	8/22/2024	24227001		vrlcm-vrops-8.18.0-HF2.patch

* Aria Operations HF2 for version 8.18 to be used in Aria Suite Lifecycle.

Log in to the primary node VMware Aria Operations Administrator interface of your cluster at https://primary-node-FQDN-or-IP-address/admin .
Click Software Update in the left panel.
Click Install a Software Update in the main panel.
Follow the steps in the wizard to locate and install your PAK file.
Install the product update PAK file.
Wait for the software update to complete. When it does, the Administrator interface logs you out.
Log back into the primary node Administrator interface.
The main Cluster Status page appears and cluster goes online automatically. The status page also displays the Bring Online button, but do not click it.
Clear the browser caches and if the browser page does not refresh automatically, refresh the page.
The cluster status changes to Going Online. When the cluster status changes to Online, the upgrade is complete.

Note: If a cluster fails and the status changes to offline during the installation process of a PAK file update then some nodes become unavailable. To fix this, you can access the Administrator interface and manually take the cluster offline and click Finish Installation to continue the installation process.
Click Software Update to check that the update is done.
A message indicating that the update completed successfully appears in the main pane.

Once the update is complete delete the snapshots you made before the software update.

Additional Information

The patch is applicable only on Aria Operations 8.18.0 GA.
Applying the patch on 8.18.1 or 8.18.2 will throw below errors:

If we trying to check the box 'Install the PAK file even if it is already installed.'

It fails during Postgres DB upgrade.