On April 21, 2022, VMware released the April 2022 Cumulative Security update for vRealize Automation 7.6 and vRealize Orchestrator 7.6. This update includes patches for various platform components that may be flagged by vulnerability scanners while scanning the virtual appliances. Since this update is cumulative, all previously updated components are included in this release.
What’s Included
While VMware does not provide detailed release notes for these cumulative security updates, based on the contents of the update script, the following RPM packages will be deployed during the update process:
- bzip2-1.0.5-34.256.8.1.x86_64.rpm
- cpio-2.9-75.81.14.1.x86_64.rpm
- cpio-lang-2.9-75.81.14.1.x86_64.rpm
- cyrus-sasl-2.1.22-182.26.7.1.x86_64.rpm
- dbus-1-1.2.10-3.34.8.1.x86_64.rpm
- dhcp-4.2.4.P2-0.28.12.1.x86_64.rpm
- dhcp-client-4.2.4.P2-0.28.12.1.x86_64.rpm
- expat-2.0.1-88.42.22.1.x86_64.rpm
- glib2-2.22.5-0.8.39.1.x86_64.rpm
- glib2-lang-2.22.5-0.8.39.1.x86_64.rpm
- glibc-2.11.3-17.110.40.1.x86_64.rpm
- glibc-32bit-2.11.3-17.110.40.1.x86_64.rpm
- glibc-locale-2.11.3-17.110.40.1.x86_64.rpm
- kernel-default-3.0.101-108.135.1.x86_64.rpm
- kernel-default-base-3.0.101-108.135.1.x86_64.rpm
- libbz2-1-1.0.5-34.256.8.1.x86_64.rpm
- libexpat1-2.0.1-88.42.22.1.x86_64.rpm
- libgcrypt11-1.5.0-0.26.6.1.x86_64.rpm
- libglib-2_0-0-2.22.5-0.8.39.1.x86_64.rpm
- libgmodule-2_0-0-2.22.5-0.8.39.1.x86_64.rpm
- libgobject-2_0-0-2.22.5-0.8.39.1.x86_64.rpm
- libgthread-2_0-0-2.22.5-0.8.39.1.x86_64.rpm
- libopenssl1_0_1-1.0.2zd-1.vmw.sles.19584631.x86_64.rpm
- libsqlite3-0-3.7.6.3-1.4.7.15.1.x86_64.rpm
- ntp-4.2.8p15-64.16.1.vmw.16745171.x86_64.rpm
- openssh-8.8p1-1.vmw.18820953.x86_64.rpm
- openssl-1.0.2zd-1.vmw.sles.19584631.x86_64.rpm
- permissions-2013.1.7-0.6.12.1.x86_64.rpm
- tar-1.27.1-14.11.1.x86_64.rpm
- tomcat-template-8.5.78.0-1.vmw.19618365.x86_64.rpm
- unzip-6.00-11.18.8.1.x86_64.rpm
- vim-7.2-8.21.6.2.x86_64.rpm
- vim-base-7.2-8.21.6.2.x86_64.rpm
- vim-data-7.2-8.21.6.2.x86_64.rpm
- vmware-jre-1.8.0_321-1server.x86_64.rpm
- zlib-1.2.7-0.17.3.1.x86_64.rpm
Keep in mind that while VMware has continued to release hotfixes and cumulative updates for vRealize Automation 7.6 and vRealize Orchestrator 7.6, both products will reach End of General Support later this year on September 1, 2022. If you haven’t already started upgrading to vRealize Automation 8, you should get started as soon as possible!
How to Obtain and Deploy
For instructions on deploying the latest cumulative security update, please visit the VMware KB article https://kb.vmware.com/s/article/80044.
Download the update from the VMware Product Patches site at https://customerconnect.vmware.com/patch. Select vRealize Automation from the product selection list and 7.6.0 from the version selection list.