Veritas Bug ID: ET 4002141

Problem:  Vulnerable JRE update 1.8U211 (Java 1.8.0_241) packaged as part of NBU 8.2 and this EEB installs JRE update package 1.8U251

Version:  NetBackup_8.2
 

Fix Details:

This will replace the NetBackup JRE with JRE 8u251.

The JRE can be replaced either automatically or manually.

A. Automatic method:

Users can use Vxupdate to replace the JRE.
While installing the EEB, All the NetBackup service needs to be shutdown.
This option is only available for Linux flavored Client and media server

#nbrepo -add <eeb_package_name>

# nbrepo -l

ID Type Version OS File Name
-- ------------ ------- ---------- -----------------------------------------
1 client eeb 8.2 redhat_x64 nbeeb.client_4002141.1_8.2_redhat_x64.sja

# nbrepo -pkgDetails 1
Package ID: 1
Package File Name: nbeeb.client_4002141.1_8.2_redhat_x64.sja
Package Type: client eeb
Operating System: redhat_x64
Release Version: 8.2
Installables: nbeeb.client_4002141.1_8.2
Package Size: 83.70 MB
Created Date/Time (UTC): 2020-05-01 15:48:30

nbinstallcmd -operation_type install -package nbeeb.client_4002141.1_8.2 -media_server <repo_host> -host_filelist <Client_Name>

B. Manual method:

Use -create,-extractonly option to use the manual method.

While using 'create/extractonly' option of the EEB, the NetBackup service can remain in 
the running state.

The nbcomponentupdate utility will stop and start all the services during upgrade.

Steps to follow for Manual upgrade:

1. Install the EEB using '-create' option extracts binary to /usr/openv/tmp or 
2. VERITAS\NetBackup\Temp\ '-extractonly' option to extract binaries to a different 
3. location mentioned by user.
4. After successful execution of step 1, it will deploy the jre-8u251-<platform>.tar.gz file at /usr/openv/tmp or jre1.8.0_251.zip at VERITAS\NetBackup\Temp\ folder.
5. Change directory to: 

            On Unix: /usr/openv/tmp
            On Windows: VERITAS\NetBackup\Temp\

            In the case of extract only option, please go to an appropriate location.

      6. Uncompress the tar / zip file

      7. Run the below command:

          On Unix: "/usr/openv/netbackup/bin/goodies/nbcomponentupdate -product NetBackup -component jre -path /usr/openv/tmp/jre1.8.0_251"

          On Windows: "C:\Program Files\Veritas\NetBackup\bin\goodies\nbcomponentupdate.exe" -product NetBackup -component jre -path "C:\Program Files\Veritas\NetBackup\Temp\jre1.8.0_251"

      8. Remove the uncompressed folder from the temporary location after the successful upgrade of the JRE.

Troubleshooting:

The log files generated at /usr/openv/pack/install_jre_eeb.log and 
/usr/openv/tmp/nbcomponentupdata_<date>_<time>.log.