check-circle-line exclamation-circle-line close-line

Horizon DaaS Platform 6.1.1 Release Notes

VMware Horizon DaaS Platform | 01 OCT 2014

Release notes last updated on 01 OCT 2014

Check for additions and updates to these release notes.

Links to release notes for other versions (* indicates DaaS Agent): 6.1.0 | 6.1.0 HF | 6.1.1* | 6.1.2 | 6.1.3 | 6.1.4 | 6.1.2* | 6.1.5 | 6.1.6 | 7.0.0 | 8.0.0

What's in the Release Notes

The release notes cover the following topics:

Patch Information

Patch Dependencies

All appliances must be migrated to the Ubuntu 12 template before you begin the patch installation. This patch should not be run on appliances that have been upgraded to Horizon DaaS 6.1 but have not been migrated to the new template. For more information on the migration process, see the Horizon DaaS Platform 6.1 Upgrade document.

Affected Horizon DaaS Versions

Horizon DaaS Platform 6.1.0 (Build 22210)

Patch Version

Horizon DaaS Platform 6.1.1 (Build 22355)

Resolved Issues

  • DT-6095 – Potential bash shell remote code execution vulnerability (Shellshock). Horizon DaaS appliances will be updated with a new version of bash when the patch is applied. This fix is inclusive of the following common vulnerabilities and exposures: CVE-2014-6277, CVE-2014-6278, CVE-2014-7169, CVE-2014-7186, and CVE-2014-7187. Additionally, bash function importing has been disabled to protect against any further Shellshock derivatives.]

  • DT-6096 – Buffer overflow vulnerability in the apt-get package in Ubuntu. Horizon DaaS appliances will be updated with a new version of apt when the patch is applied. This fix covers common vulnerabilities and exposures CVE-2014-6273.

  • DT- 5953 – The CIM_FileSystem provider was not returning any data from appliances. This has been remedied and the provider is now working correctly.

  • DT-5951 – The Desktone_NTPService provider was returning a FALSE value even though the NTP daemon was in sync with the time source. This has been remedied and the provider is now working correctly.

Installing the Patch

Pushing out software patches to all appliances in one or more Data Centers is a three step process:

  • Upload the patch. When you upload the patch file, it is automatically replicated to all appliances.

  • Install the patch file on all Service Provider appliances.

  • Install the patch file on all Tenant appliances.

These steps are described below.

Upload the Patch File

  1. In the Service Center, select appliances ► software updates. The Software Updates screen displays.

  2. Click Browse to browse for the patch file.

  3. Click Upload.

    The Service Center checks whether the file is the correct file type. The patch file is automatically replicated to all Service Provider appliances in each Data Center. The Replications column in the lower portion of the screen indicates the progress. For example, 2/2 means that the patch file has been replicated to both the primary and secondary Service Provider appliances in a single Data Center and 4/4 means that the patch file has been replicated to the primary and secondary Service Provider appliances in two Data Centers. It can take up to one minute for each appliance. You must wait until the patch file has been replicated to an appliance before installing the patch on that appliance.

Install the Patch on All Service Provider Appliances

Before you begin the installation, note the following:
  • If you have a staggered Horizon DaaS 6.1 environment (that is, with tenant appliances still running Horizon DaaS 6.0 or 6.0.1) it is recommended that you upgrade the tenant appliances to Horizon DaaS 6.1.1 if possible (as mentioned in the Horizon DaaS Platform 6.1 Upgrade document) or contact VMware Global Support for instructions on how to apply the 6.0.2 patch manually to the 6.0/6.0.1 appliances.

  • If you want the option to perform a rollback later, you must create manual snapshots of all Service Provider appliances using the VMware vSphere Client before you begin the patch installation.

  • If you start the installation before the patch file has been replicated to all Service Provider appliances, you are warned that replication is not complete on specific appliances. However, you can begin installation on those appliances where replication is complete.

Procedure

  1. In the Service Center, select appliances ► software updates. The Software Updates screen lists the available patches. Each patch name is a link.

  2. Click on the name of a patch. The Software Updates screen redisplays to show those organizations that have appliances that have not been patched.

  3. Mark the checkbox for organization 1000.

  4. To install the patch in a single Data Center, select a Data Center from the drop-down. To install the patch on all appliances in all Data Centers, accept the default value “All”.

  5. Click Install.

Install the Patch on All Tenant Appliances

  1. In the Service Center, select appliances ► software updates. The Software Updates screen lists the available patches. Each patch name is a link.

  2. Click on the name of a patch. The Software Updates screen redisplays to show those organizations that have appliances that have not been patched.

  3. For each Tenant:

    1. Mark the checkbox for the organizations you need to patch.
    2. The Data Center drop-down default value is All, which installs the patch on all appliances in all Data Centers. To install in a single Data Center, select that Data Center from the drop-down.
  4. Click Install.

Uninstalling the Patch

This patch cannot be uninstalled using the usual methods. If you need to uninstall, contact VMware Global Support for Instructions.