QRadar XDR

Expand all | Collapse all

Flash: QRadar 7.4.3 & 7.4.3 Fix Pack 1 issue under investigation

  • 1.  Flash: QRadar 7.4.3 & 7.4.3 Fix Pack 1 issue under investigation

    Posted Thu August 12, 2021 02:02 PM
    Edited by Jonathan Pechta Thu August 12, 2021 07:01 PM
    IBM is notifying administrators that an upgrade issue might affect a small number of Consoles in QRadar 7.4.3 and QRadar 7.4.3 Fix Pack 1 that is under investigation. QRadar Development temporarily removed the SFS files for QRadar 7.4.3 and 7.4.3 Fix Pack 1 from IBM Fix Central and administrators are advised to delay QRadar 7.4.3 or 7.4.3 Fix Pack 1 upgrades. If you upgraded to QRadar 7.4.3 or 7.4.3 Fix Pack 1, administrators must review this support notice and open a case for support to review your Console.

    Flash Notice: https://www.ibm.com/support/pages/node/6480739

    If you've upgraded to either of these versions, open a case as described in the flash notice and we can quickly review your QRadar Console. Be sure to use a case title of: 7.4.3 Upgrade QR29880.QRadar on Cloud Console appliances are being reviewed by DevOps teams. There is no reason for QRadar on Cloud admins to open a case if they are using QRadar on Cloud 7.4.3.
    Note: The ISO for QRadar 7.4.3 is still available on IBM Fix Central as new installs are not impacted by this upgrade issue. ISO files are only used for new appliance installations, therefore this issue does not impact users who complete new installs of QRadar 7.4.3 using the ISO file.


    ------------------------------
    Jonathan Pechta
    QRadar Support Content Lead
    Support forums: ibm.biz/qradarforums
    jonathan.pechta1@ibm.com
    ------------------------------


  • 2.  RE: Flash: QRadar 7.4.3 & 7.4.3 Fix Pack 1 issue under investigation

    Posted Thu August 12, 2021 09:47 PM
    Edited by Jonathan Pechta Thu August 12, 2021 09:59 PM
    The initial flash notice has been updated to include more information. This issue relates to CVE -2021-29880 for users with domains configured. A Security Bulletin was issued to all users to identify this issue. If you do not have domains configured, you are not affected. If you have domains configured, we are asking those users to open a QRadar Support case so we can confirm the issue as described in the updated flash notice text.

    ------------------------------
    Jonathan Pechta
    QRadar Support Content Lead
    Support forums: ibm.biz/qradarforums
    jonathan.pechta1@ibm.com
    ------------------------------