Attention : support for WAPT 1.8.2 ended on June the 30th 2022.

There are known vulnerabilities in WAPT dependencies in WAPT 1.8.2 branch. Please upgrade to the latest supported version. CVE listing (non exhaustive) :

• * python engine : python 2.7 (CVE-2020-10735, CVE-2015-20107, CVE-2022-0391, CVE-2021-23336, CVE-2021-3177, CVE-2020-27619, CVE-2020-26116, CVE-2019-20907, CVE-2020-8492, etc.)
• * cryptography : openssl : CVE-2022-2068, CVE-2022-1292, CVE-2022-0778, CVE-2021-4160, CVE-2021-3712, CVE-2021-23841, CVE-2021-23840, CVE-2021-23839, CVE-2020-1971, CVE-2020-1968, CVE-2019-1551
• * python dependencies : cryptography (CVE-2020-36242, CVE-2020-25659), eventlet (CVE-2021-21419), jinja2 (CVE-2020-28493), psutil (CVE-2019-18874), waitress (CVE-2022-31015), lxml (CVE-2021-4381, CVE-2021-28957, CVE-2020-27783, CVE-2018-19787), ujson (CVE-2022-31117, CVE-2022-31116, CVE-2021-45958), python-ldap (CVE-2021-46823)

Migrating more easily from WAPT 1.3 to 1.6

This procedure is simpler than a complete migration, but some non essential data may be lost, breaking the chain of traceability.

• backup the WAPT files in:

  • Linux: /var/www/wapt/ or /var/www/html/wapt/;

  • Windows: C:\waptwaptserver\repository\wapt;

Installing and re-importing the WAPT packages

If you are using a Windows based WAPT Server in 1.3.13, you must uninstall your 1.3.13 version before installing the 1.6 version.

You may now follow the same procedure to do a normal installation of the WAPT Server.

The WAPT Server must have the same DNS name as the previous WAPT Server (or the same IP if your WAPT agents find their WAPT Server using its IP address).

Hint

If you want the waptupgrade package to work, you will have to follow the procedure to generate the necessary keys.

Stop at the section on re-signing the packages on the repository.

Once the installation has finished, you may re-import all the WAPT packages that were saved using the Import from file button in the Private repository tab.

This operation will re-sign all the WAPT packages.

Installing the new WAPT agent 1.6 on your computers

• recreate the WAPT agent, which will automatically upload the waptupgrade package;

• then, update the GPO for deploying the WAPT agent;

• the waptupgrade package will then automatically install on the computers that already had the package and finally, the WAPT agent will automatically upgrade when the computer shuts down;