PCZero

Well-Known Member
Dec 13, 2003
735
92
178
Earth
I just ran security advisor and got the KernelCare warning/suggestion. I clicked the link and subscribed to the $3.00 month subscription. At the end after entering my CC info I was told the charged processed and I was redirected back to my server WHM. Ran Security advisor again and not8ing changed. Do I need to do some sort of install at this point, do I need to be patient and let the system process the install automatically, or am I just being a total DFU and cluelsss?
 

PCZero

Well-Known Member
Dec 13, 2003
735
92
178
Earth
The key word is SHOULD. IN my case, the error still exists when I run security advisr even after paying for the subscription and getting an email receipt. The auto install seems to not have taken place. I have no idea how to proceed at this point.
 

PCZero

Well-Known Member
Dec 13, 2003
735
92
178
Earth
There is a lot of information on that page and several links. None however address what to do in a situation such as mine where the purchase processed correctly but the error messages still appear in Security Advisor. The question i asked was do I need to

1) Perform a manual install
2) Just be patient and let the system process the install automatically.
3) Something else that I am missing.

That link told me what is supposed to happen (which I actually already read) and the link therein described the manual install process, but it never address what to do in case the auto install fails to process.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,884
2,245
463
Hello @PCZero,

I believe the issue you described relates to an open internal case (Ref: CPANEL-25873) where Security Advisor fails to detect the use of the Extra patchset after KernelCare is purchased through Web Host Manager.

Can you share the output from the commands below so I can confirm if the issue you reported relates to this case?

Code:
kcarectl --info
cat /usr/local/cpanel/version
cat /etc/redhat-release
Additionally, can you share a screenshot of the specific warning message that appears in WHM >> Security Advisor?

Thank you.
 
Last edited:

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,884
2,245
463
Hello @PCZero,

Thanks for sharing the additional information. This is fixed in cPanel & WHM version 80 as part of internal case CPANEL-25769 (note that case CPANEL-25873 is the specific case that solves the issue, and it's bundled with this update):

Fixed case CPANEL-25769: Updated Security Advisor to the latest version.

In the meantime, you can run the following command to manually enable the extra patchset:

Code:
kcarectl --set-patch-type extra --update
Let me know if this helps.

Thank you.
 

PCZero

Well-Known Member
Dec 13, 2003
735
92
178
Earth
Michael I am now running 78.0.21 and the error message still appears. Is it safe to assume when major version 80.x.x hits release this issue will be resolved?

Also as far as the screen shot goes, I tied to embed it in the post but the forum software would only allow me to link.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,884
2,245
463
I am now running 78.0.21 and the error message still appears. Is it safe to assume when major version 80.x.x hits release this issue will be resolved?
Hello @PCZero,

That's correct (assuming your server uses the RELEASE tier). You can also temporarily upgrade Security Advisor to the latest version published to it's GitHub page if you want to verify the issue is solved. Here are the instructions from CpanelInc/addon_securityadvisor:

Installing from the GitHub repository is only needed if you want to contribute to the development of the security advisor, or you simply want the latest changes before they are distributed with cPanel & WHM. To install from here, you need to clone the repository, then run the installer.

  1. /usr/local/cpanel/3rdparty/bin/git clone CpanelInc/addon_securityadvisor
  2. cd addon_securityadvisor/pkg
  3. ./install
The next time cPanel & WHM updates it will over write your changes. To keep the GitHub version you need to create a postupcp hook that re-runs the installer at the end of the update.
Let me know if you have any questions.

Thanks!