Installing the ksmg_upgrade_2.1.0.7854_openssh_cve_2024_6387 on the Secondary node

To install a system update on the Secondary node:

1. In the web interface of the Control node, go to the Message queue section, click Manage settings for sending/receiving, select the node which you want to update, and disable the reception of messages on that node. For details, see Enabling and disabling the transmission and reception of messages.
2. Wait until messages from all queues are sent.
3. Remove the load from the node in the load balancer settings.
4. In the web interface of the node being upgraded, click Install patch and install the upgrade package: ksmg_upgrade_2.1.0.7854_openssh_cve_2024_6387.

   If restarting the node is necessary for installing the update package, wait until the restart is completed.

5. Make sure the update package is installed successfully. To do so, perform the following:
   1. Sign in to the web interface of the Control node. Make sure the status of the updated node has changed to Synchronized.
   2. Sign in to the updated node over SSH and run the following commands:
      1. rpm -q openssh

         The output of the command must be as follows:

         openssh-8.7p1-38.1.el9_4.security.0.7.x86_64

      2. rpm -q openssh-clients

         The output of the command must be as follows:

         openssh-clients-8.7p1-38.1.el9_4.security.0.7.x86_64

      3. rpm -q openssh-server

         The output of the command must be as follows:

         openssh-server-8.7p1-38.1.el9_4.security.0.7.x86_64

      4. tail -n 30 /var/log/kaspersky/ksmg/patch.log

         As a result of running the command, the following lines from the patch.log file should be displayed, with the following line among them:

         Upgrade finished, automatic system reboot initiated

6. Restore traffic to the updated node.

The update package is installed on the Secondary node of the cluster.