I-Juniper NETWORKS CTPView Umhlahlandlela Womsebenzisi Wesofthiwe Yeseva

Idatha ye-CTPView i-software version 9.2R1 yakhelwe ukusiza ukuphatha nokuqapha amadivayisi e-CTP. Ihlinzeka ngezithombe ezinhle kakhulu zokukhishwa, ixazulula izinkinga ezaziwayo, futhi ibhekane nokuba sengozini kwezokuvikela.

Imiyalelo yokufaka

Ukuthuthukiswa kwe-CTPOS: Ungakwazi ukuthuthukela ku-CTPOS 9.2R1 isithombe esikabili kusukela ezinguqulweni ezishiwo usebenzisa i-CTPView.
Inkinga Eyaziwayo: Ngemva kokuthuthukisa okukabili inodi ye-CTP151 ku-CTPOS 9.2R1, i-SSH kuNodi ye-CTP ngeke isebenze. Ukuze uxazulule, qalisa kabusha inodi ye-CTP151 noma ushintshe ukucushwa kwe-IP kumenyu ye-CTPOS CLI.

Faka Files: Faka i-CentOS 7.5.1804 ku-VM ukuze ubambe i-CTPView iseva.
Ukufakwa Kwesofthiwe: Sebenzisa i-CTP enikeziweView-9.2R-1.0.el7.x86_64.rpm file ukufakwa.

Ukucushwa Kwesistimu Kunconyiwe
Landela imihlahlandlela yokusingatha i-CTPView iseva ene-CentOS 7.5 ngokusho kwe-CTPView Umhlahlandlela Wokuphatha Uhlelo Lwenethiwekhi.

Ama-CVE kanye nokuba sengcupheni kwezokuvikela
Idatha ye-CTPView 9.2R1 ukukhishwa kwamakheli ama-CVE abalulekile ezingxenyeni ezihlukahlukene ezifana ne-bind, glibc, grub2, ne-kernel. Bheka imibhalo ukuze uthole imininingwane eyengeziwe.

Mayelana nalo mhlahlandlela

Lawa manothi okukhishwa ahambisana nokukhishwa okungu-9.2R1 kwe-CTPView isofthiwe. Bachaza imibhalo yedivayisi nezinkinga ezaziwayo ngesofthiwe.
Ungathola futhi lawa manothi okukhululwa kumadokhumenti esoftware ye-Juniper Networks CTP webikhasi, elitholakala ku-CTP Series Release Notes.

Khipha Okuvelele

Izici ezilandelayo noma izithuthukisi zengeziwe ku-CTPView Ikhishwe 9.2R1.

Ukukhishwa kwe-CTPOS 9.2R1 kusekelwa kumadivayisi e-CTP151 kuphela.

Ungakwazi ukuthuthukela ku-CTPOS 9.2R1 isithombe esimbaxambili ukusuka ku-CTPOS 9.1R1/9.1R2/9.1R3-x/9.1R5/9.1R6-x usebenzisa i-CTPView.

Ithebula 1: Indlela Yokuthuthukisa ye-CTPOS

Imodeli / Inkundla	Inguqulo ye-CTPOS ekhona	Indlela Yenguqulo
I-CTP151	9.1R1/9.1R2/9.1R3-x/ 9.1R5/9.1R6-x	9.1R1/9.1R2/9.1R3-x/ 9.1R5/9.1R6-x> 9.2R1

Ukuthuthukisa isithombe esikabili usebenzisa i-CTPView 9.2R1

Ukuze uthuthukise kusuka ku-CTPView, kopisha okuthi ctp_complete_9.2R1_240809.tgz ku-/ctp ye-CTPView 9.2R1.
Khetha I-Node Maintenance > Thuthukisa Isofthiwe ye-CTP.

QAPHELA: Ngemva kokuphinda uthuthukise inodi yakho ye-CTP151 ibe yi-CTPOS 9.2R1 ukusuka ku-CTPView, I-SSH ukuya kuNodi ye-CTP ngeke isebenze. [PR 1830027].
Indlela yokusebenza: Qala kabusha i-node ye-CTP151 futhi noma uye kumenyu ye-CTPOS CLI kukhonsoli futhi ushintshe ukucushwa kwe-IP kube eth4.

Izinkinga ezixazululiwe ku-CTPView Ikhishwe 9.2R1

Izinkinga ezilandelayo zixazululiwe ku-CTPView Ikhishwe 9.2R1.

Qala ukusebenzisa i-OpenSSL 3.0 [PR 1580060]

Udinga ukusekela i-TLS 1.3 [PR 1626634]
I/var/www/ partition iba ngo-100%. [PR 1627434]

Buyekeza i-Zlib ukuze ukhulume ne-CVE-2018-25032. [PR 1658343]
Udinga imiyalelo yokuvuselela i-CTPView I-Self Cert. [PR 1670216]

Iphutha ngenkathi kuthunyelwa ukulungiselelwa kwenodi. [PR 1695689]
Imbobo yezibalo ze-Buffer fileIkhula ibe yinkulu futhi igcwalise /var/www/ [PR 1716742]

Ushintsho lokucushwa kwenqwaba lumisa isikrini se-GUI. [PR 1727332]
I-CTPView kufanele ivimbele ukulungiselelwa okudala okungu-7.3 ukuthi kungabuyiselwa ku-9.1 CTP. [PR 1730056]

I-CTPView I-CVE hotfix iyadingeka. [PR 1732911]
Iphutha ngenkathi kuthunyelwa i-CESoPSN Bundle embobeni ye-FXS eneziteshi eziningi ezinamathiselwe ku-CTPView.[PR 1733949]
Ukungena ngemvume kwe-Radius SSH akubuyi emuva ku-auth yendawo ngo-9.1R3.1. [PR 1737280]
Engeza usekelo lwe-Ext Ref 10MHz ku-9. x ukukhishwa ku-CTPView Ikhasi lokuvumelanisa leNodi. [PR 1737507]
Ukufinyelela kwe-GUI kwenqatshelwe i-CTPView 9.1R3.1 I-Server-Cert iphelelwe yisikhathi. [PR 1740443]
Izinguqulo ze-Hotfix zidinga ukufakwa ohlwini ne-CTPView inguqulo. [PR 1740796]
Ezinye i-CTPView Izikrini ze-Netmon azigcwali. [PR 1749436]
Ukuhlolwa Kokungena: Umjovo ongagunyaziwe we-OS Command kanye nomjovo we-SQL kutholwe ku-CTPView. [PR 1750343]
Ukuhlolwa Kokungena: Amalungelo amaningi anikezwe umsebenzisi we-Postgres SQL kanye /etc/sudoers ukucushwa file ku-CTPView. [PR 1750345]
Susa umyalo we-yum ku-CTPView. [PR 1755263]
Amaqembu e-CTP angase angabi nalutho uma kwenzeka inkinga enkulu yembobo. [PR 1758167]
Engeza ukusekelwa kokuthuthukiswa kwe-CTP Node kusuka ku-CTPView usebenzisa i-acorn_310_9.1Rx_xxxxxx.tgz. [PR 1766296]
I-CTPView_9.1R5 RPM ayifakwa kahle ku-Centos7. [PR 1766787]
Ukuhlolwa Kokungena: CTPView i-SELinux ikhutshaziwe futhi ayinaso Isihloko se-CSP. [PR 1775838]
Ayikwazi ukulungiselela izinqwaba kumachweba we-M/S wamakhadi we-NPI SE. [PR 1781039]
Ukuhlolwa Kokungena: CTPView inekhodi yokususa iphutha, izihloko zeseva ye-verbose, i-CSRF engekho kanye nokungafaneleki files zidalwe ngesikhathi sokuvulwa kohla lwemibhalo. [PR 1783061]
Ukuhlolwa Kokungena: Ikhukhi iveza indlela egcwele yohlelo lokusebenza futhi ayinayo Imfanelo yeSamesite. [PR 1783064]

I-CTPView_9.1Ukuthuthukisa i-R6 usebenzisa iphakheji ye-RPM yehluleka ku-9.1R5 CTPView izinhlelo. [PR 1783448]
I-CTPView: Ikhodi ihlanganisa kusuka ku-9.1x kuya ku-10.x [PR 1820891]
I-CVE-2024-6387 - I-OpenSSH Remote Code Execution (RCE) [PR 1821683]

Ubungozi bokuskena kwe-Nessus: I-Kernel, i-Linux firmware, i-Postgresql. [PR 1821688]
Ukuba sengozini kwe-OpenSSH (CVE-2024-6387) [PR 1821690]
I-SAToP interop ne-Cisco (imbobo yomthombo ofanayo/indawo okuyiwa kuyo ye-UDP) idinga ukwengezwa ku-CTPView. [PR 1826284]

Khubaza izinkambu ze-PBS ku-CTPView ukuvimbela ukuphahlazeka kwe-PBS ekukhubazeni ku-CTP 151 ngo-10.0R2. [PR 1826882]
Udinga i-hotfix ye-CTPView ubungozi ku-9.1R3 [PR 1827420]
I-CTPView amakhodi ashintsha ukusuka ku-10.0R2 ukuya ku-9.2R1 [PR 1829082]

Izinkinga ezaziwayo ku-CTPView Ikhishwe 9.2R1

I-PR elandelayo iyinkinga eyaziwayo.

I-SSH yehluleka ngemva kokuthuthukiswa okukabili kwe-CTP151 ku-CTPOS 9.2R1 ukusuka ku-CTPView. [PR 1830027]

Kudingeka Ukufakwa files

Kuyisibopho sakho ukufaka i-CentOS ku-VM, futhi inguqulo ye-CentOS kufanele ibe ngu-7.5.1804 (http://vault.centos.org/7.5.1804/isos/x86_64/).
Ukufaka ukukhishwa okusha kwe-Centos akusekelwa kuzomele usebenzise i-Centos 7.5.1804. Uma unemibuzo noma udinga usizo olwengeziwe, xhumana neJuniper Networks Technical Assistance Center (JTAC).
Okulandelayo file ihlinzekelwe ukufaka i-CTPView isofthiwe:

Ithebula 2:

File	I-CTPView Iseva ye-OS	Fileigama	I-Checksum
Isoftware kanye nezibuyekezo ze-Centos OS	Izinombolo 7.5	I-CTPView-9.2R-1.0.el7.x8 6_64.rpm	d7b1e282a0b2fbae963c 805972e7933b
Web Buyekeza		web_update_9.2R1_2408 05.tgz	2a5c039d6137385df55d 716cfcbd7da7

Ukucushwa Kwesistimu Okunconyiwe Kokusingatha i-CTPView Iseva

Okulandelayo ukulungiselelwa kwezingxenyekazi zekhompuyutha ezinconyiwe ukuze usethe i-CTPView 9.2R1 iseva:

I-CentOS 7.5.1804 (64-bit)
1x iphrosesa (ama-cores ama-4)
4 GB RAM

Inombolo yama-NIC - 2
Isikhala sediski esingu-80 GB

I-CTPView Inqubomgomo Yokufaka Nokunakekela
Kusukela ekukhululweni kwe-CTPView I-9.0R1, iJuniper Networks yamukele inqubomgomo yokufakwa nokugcinwa kwe-CTPView iseva. I-CTPView manje isatshalaliswa njengomkhiqizo “Wohlelo Lokusebenza kuphela”, ngendlela yephakheji ye-RPM. Manje usungakwazi ukufaka futhi ugcine i-OS (i-CentOS 7.5) ngokweziqondiso ezichazwe ku-CTPView Ukuphathwa Kwesistimu Yokuphatha Inethiwekhi. Lo mhlahlandlela wokuphatha nawo unenqubo yokufaka ephelele.

Ama-CVE kanye Nokukhubazeka Kokuvikela Kusingathwa ku-CTPView Ikhishwe 9.2R1
Amathebula alandelayo aklelisa ama-CVE nokuba sengozini kwezokuvikela okukhulunywe ngakho ku-CTPView 9.2R1. Ukuze uthole ulwazi olwengeziwe mayelana nama-CVE angawodwana, bheka http://web.nvd.nist.gov/view/vuln/search.

Ithebula 3: Ama-CVE Abalulekile noma Abalulekile Afakwe Ku-Bind

I-CVE-2023-3341

I-CVE-2023-4408

I-CVE-2023-50387

I-CVE-2023-50868

Ithebula 4: Ama-CVE Abalulekile noma Abalulekile Afakwe ku-glibc

I-CVE-2024-2961

I-CVE-2024-33599

I-CVE-2024-33600

I-CVE-2024-33601

I-CVE-2024-33602

Ithebula 5: Ama-CVE Abalulekile noma Abalulekile Afakwe ku-grub2

I-CVE-2022-2601

I-CVE-2024-2961

I-CVE-2024-33599

I-CVE-2024-33600

I-CVE-2024-33601

I-CVE-2024-33602

Ithebula 6: Ama-CVE Abalulekile noma Abalulekile Afakwe ku-Kernel

I-CVE-2023-3609
I-CVE-2023-32233
I-CVE-2023-35001

I-CVE-2023-42753

Ithebula 7: Ama-CVE Abalulekile noma Abalulekile Afakwe ku-libssh2

I-CVE-2020-22218

Ithebula 8: Ama-CVE Abalulekile noma Abalulekile Afakwe ku-Linux-firmware

I-CVE-2020-12321

I-CVE-2023-20569

I-CVE-2023-20593

I-CVE-2023-20592

Ithebula 9: Ama-CVE Abalulekile noma Abalulekile Afakwe ku-Postgresql

I-CVE-2023-5869

Ithebula 10: Ama-CVE Abalulekile noma Abalulekile Afakwe Ku-Python

I-CVE-2023-40217

Ithebula 11: Ama-CVE Abalulekile noma Abalulekile Afakwe ku-OpenSSH

I-CVE-2023-48795

I-CVE-2023-51384

I-CVE-2023-51385

Umlando Wokubuyekeza

Agasti 2024—Isibuyekezo 1—CTPView Ikhishwe 9.2R1

I-Juniper Networks, ilogo ye-Juniper Networks, i-Juniper, ne-Junos yizimpawu zokuthengisa ezibhalisiwe ze-Juniper Networks, Inc. e-United States nakwamanye amazwe. Zonke ezinye izimpawu zokuthengisa, izimpawu zesevisi, amamaki abhalisiwe, noma izimpawu zesevisi ezibhalisiwe ziyimpahla yabanikazi bazo. IJuniper Networks ayinaso isibopho sanoma yikuphi ukungalungi kulo mbhalo. I-Juniper Networks igodla ilungelo lokushintsha, ukulungisa, ukudlulisa, noma ukubuyekeza lokhu kushicilelwa ngaphandle kwesaziso. Copyright © 2024 Juniper Networks, Inc. Wonke amalungelo agodliwe.

FAQ

Q: Ngingakwazi ukufaka ukukhishwa okusha kwe-CentOS kokusingatha i-CTPView iseva?
- A: Cha, ukufaka ukukhishwa okusha kwe-CentOS akusekelwa. Kufanele usebenzise inguqulo ye-CentOS 7.5.1804 ukuze uhambisane.
Q: Ngingazixazulula kanjani izinkinga ze-SSH ngemva kokuthuthukela ku-CTPOS 9.2R1?
- A: Uma i-SSH ukuya kuNodi ye-CTP ingasebenzi ngemva kokuthuthukiswa, qalisa kabusha indawo ye-CTP151 noma ushintshe ukucushwa kwe-IP kumenyu ye-CTPOS CLI.

Amadokhumenti / Izinsiza

	I-Juniper NETWORKS CTPView Isoftware Yesiphakeli [pdf] Umhlahlandlela Womsebenzisi I-CTPView Isofthiwe Yeseva, Isofthiwe Yeseva, Isofthiwe
	I-Juniper NETWORKS CTPView Isoftware Yesiphakeli [pdf] Umhlahlandlela Womsebenzisi I-CTPView Isofthiwe Yeseva, Isofthiwe Yeseva, Isofthiwe
	I-Juniper NETWORKS CTPView Isoftware Yesiphakeli [pdf] Umhlahlandlela Womsebenzisi 9.1R5-1, CTPView Isofthiwe Yeseva, Isofthiwe
	I-Juniper NETWORKS CTPView Isoftware Yesiphakeli [pdf] Umhlahlandlela Womsebenzisi I-CTPView, CTPView Iseva, iseva, i-CTPView Isofthiwe Yeseva, Isofthiwe
	I-Juniper NETWORKS CTPView Isoftware Yesiphakeli [pdf] Umhlahlandlela Womsebenzisi I-CTPView Isofthiwe Yeseva, Isofthiwe Yeseva, Isofthiwe