vRealize Operations 8.6 Hot Fix 1

Products

VMware Aria Suite

Issue/Introduction

vRealize Operations 8.6 Hot Fix 1 is a public Hot Fix that addresses the following issues:

Apache log4j has been updated to version 2.17.0.
Synchronization issue during upgrade of CA setups
"Dismiss this reminder" action doesn't work properly on Home page
Multi node Tenant's vRealize Operations UI is not Available
Prevent cyclic relationships
'Other' properties / metrics unavailable for selection when creating Custom Email Payload template
[Webhook] Entire URI is encoded
vRealize Operations Client UI fails to load after upgrading to 8.6
Nightly API data pull went from 4 minutes on 8.2 to 15-19 after 8.4 Hot Fix 1 upgrade

The following CVEs have been resolved as of vRealize Operations 8.6 Hot Fix 1:

Component Name	CVE
log4j	CVE-2021-45105 Note: Not Exploitable, Updating as a part of security process.
apache	CVE-2021-44790
vim	CVE-2021-3903
	CVE-2021-3928
	CVE-2021-3927
	CVE-2021-3974
	CVE-2021-3984
	CVE-2021-4019
	CVE-2021-3973
nss	CVE-2021-43527
linux_kernel	CVE-2021-42739
linux_kernel	CVE-2020-36385
runc	CVE-2021-43784

Environment

VMware vRealize Operations 8.6.x

Resolution

vRealize Operations 8.6 Hot Fix 1 can be applied to any 8.6.x environment, including 8.6.1 and 8.6.2.
Note: Upgrading from older versions directly to this Hot Fix is not supported. You must upgrade to 8.6.x before applying this Hot Fix.

Important: Take snapshots of each of the vRealize Operations nodes before applying the Hot Fix by following How to take a Snapshot of vRealize Operations.

Download the vRealize Operations 8.6 Hot Fix 1 PAK file from the VMware Patch Portal.

Note: Select vRealize Operations Manager as the Product and select 8.6 as the version and click Search.
Select the option below.

Release Name	Release Date	Build Number	File Name
vROps-8.6-HF1	1/18/2022	19197285	vRealize_Operations_Manager_With_CP-8.x-to-8.6.2.19197285.pak

Log in to the primary node vRealize Operations Manager Administrator interface of your cluster at https://master-node-FQDN-or-IP-address/admin.
Click Software Update in the left panel.
Click Install a Software Update in the main panel.
Follow the steps in the wizard to locate and install your PAK file.
Install the product update PAK file.
Wait for the software update to complete. When it does, the Administrator interface logs you out.
Log back into the primary node Administrator interface.
The main Cluster Status page appears and cluster goes online automatically. The status page also displays the Bring Online button, but do not click it.
Clear the browser caches and if the browser page does not refresh automatically, refresh the page.
The cluster status changes to Going Online. When the cluster status changes to Online, the upgrade is complete.

Note: If a cluster fails and the status changes to offline during the installation process of a PAK file update then some nodes become unavailable. To fix this, you can access the Administrator interface and manually take the cluster offline and click Finish Installation to continue the installation process.
Click Software Update to check that the update is done.
A message indicating that the update completed successfully appears in the main pane.

Once the update is complete delete the snapshots you made before the software update.

Additional Information

Impact/Risks:
Take snapshots of each of the vRealize Operations nodes before applying the Hot Fix.
See How to take a Snapshot of vRealize Operations for more information.