Software update 10.7.0-5

[Marko Plavšić]

Hi all,

 

I had software version 10.6.6-5 and SMG offered me 10.7.0-5 version. I chose to download and install. It took awhile (500+ packages) but eventually finished it. It took all prerequisites before reboot, and it passed it all. After 2-3 reboot it gave me update error. After 4th reboot system crashed, linux couldn't boot... Kernel panic, boot failure. Ofcourse I didn't have backup, so I have to install it from scratch. But lesson learned...

 

Anyway, is something wrong with this update? Anyone else having this type of issue, that software update f***s up system boot?

[Geri San]

Looks like I'm not the only one. Two of our SMG's failed the similar way.

Do you get "Cannot find init!" message on console?

[Almir Karastanovic]

I just downloaded new version through SMG CC, but after this post I will postpone the installation.

[Marko Plavšić]

Yes, that message also, besides already mentioned... It looks like that is some serious failure from Symantec!

[Sascha Lödl]

Just wanna inform you that the upgrade went for us without any troubles:

10.6.6-5 to10.7.0-5

[Almir Karastanovic]

There is no official release notes for a new version. This is unusual.

[Yves Lefever]

Updated this morning from 10.6.6-5 to 10.7.0-5 

 

Update went well but LiveUpdate is stopped and will not restart.

Reboot nor 'service connector restart' is resolving the issue.

 

 

[Gregory Sabretache]

Here is the release notes doc:

https://support.symantec.com/en_US/article.ALERT2656.html

[Paul Maechler]

Tried an update right now. GW is not working anymore.
Cannot ping the interface.

Console login does not work anymore either.

At the moment the restore is running....

Keep your hands off this update !!!

 

[Ahmed Sief]

At first all went fine as shown in attached picture but after I restart it gave me a Kernel panic error while rebooting.

I'm restoring the SMG (Virtual Machine) back from the backup and I hope to not redo all settings or any other failures ocurre.

FYI:- SMG running on (Virtual Machine) on Windows Srever 2008 R2 (Hyper-V) on a DELL POWER EDGE R710 Server Hardware.

UPDATE:- I successfully restored the SMG (Virtual Machine) to the previous stable version 10.6.6-5.

NOTE:- Stay away from this release for now atleast we know what's wrong.

[KJW281]

Thanks for the post.  I encountered the same "update error" message after the first upgrade attempt.  Since it failed and remains at 10.6.6-5 and is working, it seems best to leave it as is for now.

[JASON LINDSEY]

Same issues as everyone here.  Tried updating through the GUI and got the "Cannot find init!" kernel panic message in the console after it tried to reboot.  Luckily this was ran on our backup gateway so I am doing a restore right now. 

[ReynaldoSys]

yes, it failed horribly

me too.

10.6.6

Hyper-v configuration

reinstall from media requires Generation 1 virtual machine

I'm on it

any idea if I reinstall via iso on the same virtual machine.

How to recover my backup before crash

[Jacek Kochan]

I have the same issue on Hyper-V platform. So I think we have to wait for next release

[Oguz KARABUBER]

I did not accept the 10.7.0 version migration I did not give the error but now I can not log in from the console does not accept the user name and password:

[Giorgos Pardalakis]

yes, it failed horribly, me too. 10.6.6-5 to 10.7.0-5 , Hyper-v configuration

 

kernel panic !!

and in the command interface I got the following errors : 

"installing package grub2-efi-...  needs 2mb on the boot /filesystem" 

I believe there must be a space issue on the boot partition 

Thank God I had a working full backup from DPM !!

 

Attachment(s)

symantec_error.docx   465 KB 1 version

[alexander smg]

I installed a test on a Dell 730 using the 10.7.0 iso media. It took 45 min to install. Seems okay. Dell 720 hardware is no longer supported. The new antivirus features seem to be good (from what I read). But I don't know for sure.

[Mike Howell]

Update from 10.6.6 to 10.7.0-5 appeared successful, except the local admin account could not login (invalid password).  I could log in from an alternate account, but I could not change the admin password.  Password was not changed to any known default.  I reverted the appliance back to 10.6.6.

[sr3000]

Same here. Errors after update attempt. Catostrophic failure after reboot. Had to restore from backup. Where is Symantec QA on this stuff?

Update error

error inserting crc32c_intel

Kernel Panic

 

[Thomas Teupen CEDS Duradrive]

Same error here on SMG 8340 (OEMR XL 220)! Tried to update from 10.6.6 to 10.7.x! Failed after reboot! Grub error! Had to rebuild/restore from Fullbackup.

 

  

[SoporteF]

Hello,

We also had the crash in our SMG virtual appliance installed in the Hyper-V 2008 R2. We had to reinstall version 10.6.6-5 and restore the last backup.

Then we read that the release notes mention the end of support for the Hyper-V 2008, requires 2012 or higher:

https://support.symantec.com/en_US/article.DOC11437.html

Best regards

[SimonE80]

https://support.symantec.com/en_US/article.TECH254647.html

[Mubashshir Shaikh]

Hi Everyone,

We are successfully Update 10.7.0-5. still we are not facing any type of error. we are also able to login in console  

 

Kind Regard 

Mubashshir Shaikh

Attachment(s)

Screen short.docx   45 KB 1 version

[alexander smg]

In my dev environment the esx VM's upgraded flawlessly. The issue is that any dell server from may 2015 onward, has to have the latest bios and firmware updates. I will say that when a policy is applied or modified, my dev environment takes longer to process the change.

[alexander smg]

I looked at my virus defs age, the control center is telling me the defs are like 18000 days old. But the actual defs in the folder on smg are accurate. Weird.

[alexander smg]

So now beast rears it's ugly head. There's a folder in the root called /dev/sda2. This folder is now full and MTA is won't start. I have no idea why this folder is getting full. I have a support ticket in.

[Jeronimo Arigos]

We have the same error, after 3 tries we decide postpone upgrade.

Really disappointing. How could it be that a large company would miss this?

 

 

 

 

[alexander-smg]

I'm still waiting for support to get back to me about my /dev/sda2 folder being full.

[SYMC_KrisG]

@alexander-smg, call in. There's a fix, but we need to have you call in to do it.

[alexander smg]

you kick ass.  Thanks for saving my bacon yesterday.  Shout out to symantec.  thanks

[avram]

Same problem system not start after failed update to 10.70.5 .Hyper-v 2012

[Kremlar]

I can't believe they didn't pull this update yet.  It killed my SMG install.  I downloaded a fresh copy of the 10.6.6 ISO (didn't see a newer one on there) and installed from scratch, and during the setup it prompted me to update to 10.7.0-5 and I said yes.  It then proceeded to kill my clean install of 10.6.6.

 

Running on Hyper-V 2012 R2 here.

[alexander smg]

Mine are working great now. Keep the logging keep low.

[Jerrybike]

I´m preparing also to upgrade from 10.6.6-5  to 10.7.0-5, but I found that only supported upgrade path is from 10.6.6-6 and higher

(You cannot update to SMG 10.7 from versions earlier than 10.6.6) infor from https://support.symantec.com/en_US/article.DOC11437.html

So I plan to manually download 10.6.6-6 from shell and upgrade to 10.6.6-6 and than to 10.7.0-5

[alexander smg]

Isn't it 10.6.6-5??

[jordanhayes]

Still no published fix for this problem?  On reboot it goes directly to grub.  If you set the kernel to the "right" path, it panics.

[OutdoorWI]

I had this same issue going from 10.6.6.  Ours is in a VMware environment. We reverted back to 10.6.6 after not being able to login as admin.

[Domain Manager]

Just wanted to post the fix that worked for us.  Symantec support recommended this article:

https://support.symantec.com/en_US/article.TECH254710.html

[Ashley Lee]

I also encounter startup problem after upgrading from 10.6.6-5 to 10.7.0-5. My environment is Hyper-V on Windows2012R2. No luck even tried a clean ISO installation on 10.7.0-5. Temporary give up on this version, if anyone has any idea, please help.

[Paul Maechler]

2nd try on VM ESXi 6.7. Does not boot anymore. Had to restore 10.6 from backup.

I give up.

[BRUCE TOMS]

The upgrade process was disastrous for us. Besides rendering unusable the server, causing a vast amount of work to build/configure a new VM, there's another issue: There is no backup option offered during the process. Please withdraw the upgrade to prevent further damage to customers. 

[Sulman Mushtaq Mushtaq Hussain]

any update from Symantec on this? Did they fixed the issue?

[alexander smg]

They are releasing a patch soon.

[jonathan sellors]

We have 2 SMG servers, each are on 2 different networks.

Both are running on Hyper-V 2012 R2

The 1st server updated successfully, the 2nd did not and exhibits all the problems people have stated in this thread ie intermittent access and unable to ping from or to the SMG host.

[jonathan sellors]

Thats great to hear that they're releasing a patch soon. Will they also be publicly listing the bugs in the current version and the cause? I only ask because it might make me feel more confident in running the next update/patch if they do.

[alexander smg]

New patch coming soon

[Amar Bissoonee]

Hi i have been getting an issue since i've updated to version 10.0.7-5. PDF that have js embedded are trigerring my attachment being strip off message "your attachment has been stripped off because it contains files that are not acceptable ..." However the attachment goes through.. 

It is triggering the executable files rule. I want to block .js attachment and not js in PDF. 

This was not the case before i upgraded. Any idea where should i start looking? 

Also do you people have a link where i can look when the next release will be available?

Thank you for your time.

[jordanhayes]

How soon is "coming soon" ...?

[alexander smg]

a few weeks

[Martin McCool]

My attempted update from 10.6.6-5 to 10..7.0-5 was not successfull.  I used the SSH terminal session and command line process.which I copied the results below from the upgrade attempt:

 

Transaction Summary
=================================================================================
Install     204 Package(s)
Upgrade     364 Package(s)

Total size: 1.0 G
Downloading Packages:
Initializing sym_output
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
Warning: RPMDB altered outside of yum.
    This is a in-place-update case
Transaction couldn't start:
installing package grub2-efi-x64-1:2.02-0.65.el7.centos.2.x86_64 needs 2MB on the /boot filesystem
installing package shim-x64-12-2.el7.x86_64 needs 10MB on the /boot filesystem

[('installing package grub2-efi-x64-1:2.02-0.65.el7.centos.2.x86_64 needs 2MB on the /boot filesystem', (9, '/boot', 1574912L)), ('installing package shim-x64-12-2.el7.x86_64 needs 10MB on the /boot filesystem', (9, '/boot', 9858048L))]
1
Script done, file is /data/logs/update.log
2019-06-22 02:00:29 -0400  Not installing lsisnmp RPM.
2019-06-22 02:00:29 -0400 sms-appliance-release-10.7.0-5 was not installed.
Loaded plugins: fastestmirror, sym_check, sym_output, sym_proxy
Loading proxy configuration
Cleaning repos: symrepo_smg symrepo_smg_patches
4 metadata files removed
2 sqlite files removed
0 metadata files removed
Starting crond:                                            [  OK  ]
Starting Symantec Messaging Gateway Connector:             [  OK  ]
mail>

 

 

By all indications the update did not install and everyting says I am still on 10.6.6-5.  HOWEVER, I have not rebooted the SMG VM on Hyper-V 2008R2.  I am not sure I want to reboot based on comments above.  Mail is flowing and the system status seems normal.

@Alexander at SMG - Base on the above paste of my ssh terminal session, Do you think it is safe to reboot ?

Installed packaged still reports as:

sms-appliance-release.noarch  10.6.6-5  symrepo_smg

Thanks,

[Kremlar]

...and my clients continue to get notified to install this destructive version.  What is going on at Symantec?

[jonathan sellors]

Still no news from Symantec.

@Symantec- can you give us all an estimated date for the new version to be released? Also, can you provide a link to documentation that identifies the bugs we're all experiencing with v10.7.0-5 ? Im going to have to tell my clients something soon :/

[alexander smg]

Hopefully this week. To fix the pdf java thingy issue, turn your malware settings to low. That's what worked for me.

[DanFocus]

10.7.1-6 was released today. Attempting to update it via webui now.

 

[DanFocus]

10.7.1-6 was release a few hours ago. I have updated our control + scanner, and it seemed to apply successfully.

On the status page, the version shows 10.7.1-6, but it is red, and there is an 'X' next to it. However, when I click the version number, the update page shows that it is the current version. Email functionality seems normal.

[jonathan sellors]

Thats great to hear, thanks Dan. @Symantec- can you confirm that the bugs we've been experiencing with 10.7.0-5 have been resolved with 10.7.0-6 ?

[THOMAS TEUPEN CEDS DURADRIVE GMBH]

Version 10.7.1-6 shown as available for download; anyone tested it on physiscal appliances like SMG 8340 (Dell R220) etc.?

[alexander smg]

I will test soon on new Dell hardware.

[Sulman Mushtaq Mushtaq Hussain]

Do we really need to upgrade to it if we are already running 10.7 on the physical appliances?

[alexander smg]

Oh my God yes. How in God's name could u not have any issues with 10.7???. My God man, upgrade, what r u waiting for???...

[Sulman Mushtaq Mushtaq Hussain]

Why should I upgrade if there are no issues ? Thses issues were only pertaining to virtual environments and when you were upgrading to 10.7 from 10.6.6 which was neither true in my case.

[alexander smg]

Security my main man. Upgrade and u will thank me later

[Sulman Mushtaq Mushtaq Hussain]

What kind of security? can you explain?

[alexander smg]

Forget explaining. Just do it. Read the Symantec release notes. Stop questioning, just update.

[jonathan sellors]

 

Regarding "Just do it", can you assure us all of stability as well as added security? I've not heard any feedback from Symantec regarding the issues surrounding 10.7.0-5

My SMG is still alerting me to upgrade from 10.6.6-5 to 10.7.0-5 even though 10.7.1-6 is available for download. Why is that? Its giving me cold feet, thats for sure :/

[alexander smg]

Yes, get the new 10.7.1-6. It addresses the bad things of 10.7. Better av, more secure, and new hardware support and vm support. Woohoo

[jonathan sellors]

Great, thanks Alex. I'll get on and install 10.7.1-6 and let you guys know how I get on when I get a chance to do it in 10 hours time. In case it helps anyone, our environment is HyperV 2012R2 for the host that failed to update to 10.7.0-5

[Sulman Mushtaq Mushtaq Hussain]

There isnt nothing new in 10.7.1. Only the fixes for issues Which people experienced after upgrading 10.6.6 which was running on VMs.

[Sulman Mushtaq Mushtaq Hussain]

There wasnt any issues if you were running it on physical appliances, these issues occured when you were running SMG on virtual infrastructure specially Hyper-V.

[alexander smg]

Just update to 10.7.1 and your life will be wonderful :)

[Sulman Mushtaq Mushtaq Hussain]

It is already wonderful :)/

[alexander smg]

With any version lower than 10.7.1 your life is hell not better / wonderful. You want greatness, then update to the latest. Lol

[Sulman Mushtaq Mushtaq Hussain]

Alexander, I gave up to your persuation and eventually upgraded to 10.7.1 :) 

Would my life gonna be better now :) ?

[alexander smg]

Yes, your life will be better. Woohoo

[Ashley Lee]

Today, just want to share an update to all of you:

 

Upgrade success from 10.6.6-5 to 10.7.1.6, same envoirnment as per my mentioned before (Hyper-V on Win2012R2).

[alexander smg]

Nicr

 

[Paul Maechler]

Update from 10.6.6 to 10.7.1.6 is still not working for me on ESXi 6.5

Console login works now. 

But there is no network adapters. netstat shows only loopback.

Any idea ?

Can I reset/reconfigure network parameter via command line ?

Or do I have to "delete scannerconfig" and start from scratch ?

Thanks fo any input.

Paul

[alexander smg]

I would make good notes of all config and redo it from scratch.

[Jack Gates]

I had grub issue with 10.6.6-5.  Currently trying to upgrade to version 10.7.1.6. And YES, I got the grub error again.  Tech support said this version fix it.  Well it did not.  Currently doing an OSRecover.  Symantec needs to better test their product before releasing.  Pretty upset. 

[alexander smg]

Me at 10.7.3. Perfect.

[Sulman Mushtaq Mushtaq Hussain]

Whats new in 10.7.3 Alex? apart from the new hardware support. 

[alexander smg]

New is that you should download it immediately as i did. It works great. Woohoo