CONTENTS ABOUT THIS RELEASE. Release date: October 10, This release was developed and tested with: DAT Version:

Transcription

1 Release Notes for McAfee(R) Security (TM) for Lotus Domino, version 7.5 on Microsoft Windows. Patch 1 Copyright (C) 2011 McAfee, Inc. All Rights Reserved CONTENTS - About this Release - Purpose - Resolved issues - Important notes for this release - Files included with this release - Installation - Finding product documentation - Other information - Copyright - Trademark Attributions - License Information ABOUT THIS RELEASE Release date: October 10, 2011 This release was developed and tested with: DAT Version: Engine Version: Thank you for using our software. This file contains important information about this release. We recommend that you read the entire document. The attached files are provided as is, and with no warranty either expressed or implied as to their suitability for any particular use or purpose. McAfee, Inc. assumes no liability for damages incurred either directly or indirectly as a result of the use of these files, including but not limited to the loss or damage of data or systems, loss of business or revenue, or incidental damages arising from their use. Patch files should be applied only on the advice of McAfee Technical Support, and only when you are actually experiencing the issue being addressed by the Patch. Patch files should not be proactively applied in order to prevent potential product issues. You are responsible for reading and following all instructions for preparation, configuration and installation of Patch files. Patch files are not a substitute or replacement for product Service Packs which may be released by McAfee, Inc. It is a violation of your software license agreement to distribute or share these files with any other person or entity without written permission from McAfee, Inc. Further, posting of McAfee Patch files to publicly available Internet sites is prohibited. McAfee, Inc. reserves the right to refuse distribution of Patch files to any company or person guilty of unlawful distribution of McAfee software products. Questions or issues with McAfee Patch files should be directed to McAfee Technical Support.

2 PURPOSE This Patch 1 includes files for use with McAfee(R)Security for Lotus Domino, version 7.5 (Windows). This new file resolves the issues that are listed in the "RESOLVED ISSUES" section. RESOLVED ISSUES 1. ISSUE: When certain samples were scanned on a 64-bit Domino server, the MailboxScanner stopped responding. All samples will be scanned successfully. Reference ID: ISSUE: MailboxScanner process stopped responding after exceeding a memory usage of 2GB. This issue is a potential fix. After installing this Patch 1, the MailboxScanner process does not stop responding when the memory usage exceeds 2GB. Reference ID: ISSUE: When an was released from the quarantine database, the released reached the user's Mailbox in a "Draft" mode. s released from the quarantine database will be sent to the user's Mailbox. Reference ID: ISSUE: Scan failure occurred while parsing the rich text item of certain s. This was due to the incorrect format of the rich text item. Scan failure will not occur while scanning rich text items with incorrect format. Reference ID: ISSUE: When "File Filtering" rule was enabled for outbound/inbound s, the "File Name" column in the GroupShield "Detected Items" database was blank for the File Filter rule. The "File Name" will appear for the File Filter rule in the GroupShield "Detected Items" database. Reference ID:

3 6. ISSUE: When MailboxScanner was enabled, the Domino rules did not work. The Domino rules will work. Reference ID: ISSUE: McAfee Security for Lotus Domino fails to release Bcc s from the quarantine database. Bcc s are now released from quarantine database. Reference ID: ISSUE: Spam rules are not displayed under Anti-spam settings. Spam rules are now displayed under Anti-spam settings. Reference ID: ISSUE: Mailbox Scanner causes dead mail on certain rich text objects that do not contain Lotus script/formula. This fix ignores the rich text objects that do not contain Lotus Script/Formula for checking and loading script/formula. It loads them from Rich Text objects that are known to have script/formula. Reference ID: ISSUE: Mailbox Scanner process stops responding while extracting the attachment sequence number from an invalid memory location. After installing this Patch 1, the Mailbox Scanner process does not stop responding while extracting the attachment sequence number from invalid memory location. Reference ID: ISSUE: McAfee Security for Lotus Domino's debug logging was enabled automatically without user intervention. After installing this Patch 1, automatic enabling of the debug log was disabled. Reference ID:

4 12. ISSUE: Unable to change the action for File Filtering rule, when the Web user interface was accessed using Microsoft Internet Explorer 8.0. After installing this Patch 1, you can change the action for File Filtering rule in the Web user interface using Microsoft Internet Explorer 8.0. Reference ID: ISSUE: McAfee Security for Lotus Domino's POSTGRES process failed to start in one or both of the following circumstances: - In a Locked-Down secure environment. - If more than one Domain Controller is in the same Active Directory forest. After applying this Patch 1, the McAfee Security for Lotus Domino's: - POSTGRES process starts successfully. - POSTGRES version will be Reference ID: ISSUE: When Content Scanning was enabled, certain items were marked as "Dead". Reference ID: ISSUE: McAfee Security for Lotus Domino does not substitute "%db%" token value with database name in the notification . After applying this Patch 1, the "%db%" token value is substituted with database name in the notification . Reference ID: ISSUE: a. When Events with the ID 8xxx were triggered, McAfee Security for Lotus Domino generated event files with a "Low" severity rating. As a result the McAfee Agent priority forward action may not have uploaded these Events immediately to the epolicy Orchestrator server. After applying the Patch 1, Events with the ID 8xxx are generated with "Major" severity rating and will be uploaded to the epolicy Orchestrator server on priority.

5 b. In an epolicy Orchestrator "Threat Event Log", the Event description for ID 8000 always appeared as "McAfee Security for Lotus Domino" for all McAfee products. After applying this Patch 1, the Event description for ID 8000 appears as "Virus detected" for all McAfee products. Reference ID: ISSUE: When action is set to "Allow through item", McAfee Security for Lotus Domino replaces an attachment containing a filename with accented characters with a "Warning.txt" file. Reference ID: ISSUE: When Content Scanning was enabled, certain items were marked as "Dead". Reference ID: ISSUE: McAfee Security for Lotus Domino does not trigger the file filtering rule when s are sent using Lotus inotes. Reference ID: ISSUE: When a user replies to an with an attachment that triggers a blocking rule, the sender does not receive a notification. Reference ID: ISSUE: When certain samples were scanned on a 64-bit Domino server, the MailboxScanner stopped responding. All samples will be scanned successfully. Reference ID: ISSUE: Scan failure occurred due to an improper update of extra DAT. POTENTIAL FIX: After applying this potential Patch 1, scan failure may not occur. Reference ID:

6 23. ISSUE: Scan failure occurred while parsing the rich text item of certain s. This was due to the incorrect format of the rich text item. Reference ID: ISSUE: Checking in the McAfee Security for Lotus Domino, v7.5 (Windows) Reports extension failed, when epolicy Orchestrator 4.0 was installed with Microsoft SQL Server Reference ID: ISSUE: McAfee Security for Lotus Domino failed to scan certain samples with empty rich text objects. After applying this Patch 1, the McAfee Security for Lotus Domino scans samples with empty rich text objects. Reference ID: ISSUE: JavaScript error occurred while creating a sub-policy based on "Domino Group" name with a single quotation(s). After applying this Patch 1, the JavaScript error will not occur. Reference ID: ISSUE: After installing McAfee Security for Lotus Domino Reports extension, Event 8000 in the epolicy Orchestrator database has its severity redefined from High to Informational. After applying this Patch 1, Event 8000 shows severity as High in the epolicy Orchestrator database. Reference ID: ISSUE: Oracle Outside In contains an exploitable vulnerability in the CorelDRAW file. Reference ID: ISSUE: Oracle Outside In contains exploitable vulnerabilities in Lotus 123 and Microsoft CAB file parsers. Reference ID:

7 30. ISSUE: Unable to log off from Windows when the Framework Service is running on Windows 2008 Server. The computer stops responding and the message "Waiting for MS Event Notification Service" appears. (This is a potential fix). Reference ID: ISSUE: MSDW always downloads the full DAT when it is in the managed mode and has extra DAT installed along with the MA policy enabled for DAT file downgrades at epolicy Orchestrator. Reference ID: ISSUE: Lotus Domino crashes after running On Demand Scan. (This is a potential fix). Reference ID: ISSUE: The size of an attachment with an inbound is getting changed to 0KB. Reference ID: IMPORTANT NOTES FOR THIS RELEASE - In a standalone Patch1 installation, if the Groupshield process is locked, the Client machine will display a dialog for reboot to replace the Patch1 binaries. Click Yes to complete the installation. - In an epolicy Orchestrator based Patch1 installation, if the Groupshield process is locked, the client machine will reboot automatically. FILES INCLUDED WITH THIS RELEASE This release consists of a package called MSDW75Patch1.ZIP, which contains the following files: - MSDW75Patch1.EXE = Patch 1 executable file. - MSDW75Patch1_for_ePO.ZIP = epolicy Orchestrator deployment package. - MSDWIN 7500_040A.ZIP Product Extension file (Spanish). - MSDWIN 7500_040C.ZIP Product Extension file (French). - MSDWIN 7500_0407.ZIP Product Extension file (German).

8 - MSDWIN 7500_0409.ZIP Product Extension file (English). - MSDWIN 7500_0411.ZIP Product Extension file (Japanese). - MSDWREPORTS.ZIP Report Extension file. - README.PDF = This readme file. - VALIDATE.TXT = Validation codes for this release. INSTALLATION INSTALLATION REQUIREMENTS To use this Patch 1, you must have McAfee Security for Lotus Domino, version 7.5 (Windows) installed on the computer you intend to update with this Patch 1. This Patch 1 will not work with any earlier versions of the software. You will need to supply your customer grant number or user name and password to access this site. NOTE: The Patch 1 installation generates a SUPERDAT.LOG file if an error occurs or the SDAT stops prematurely and the reason will be mentioned in the log. STANDARD INSTALLATION 1. Download the package MSDW75Patch1.ZIP, and extract the files to a temporary location. 2. Quit the Lotus Domino server. 3. Run MSDW75Patch1.EXE 4. After the installation is complete, start the Lotus Domino Server. INSTALLATION THROUGH EPOLICY ORCHESTRATOR VERSION Quit the Lotus Domino server on the client computer. 2. Download the package MSDW75Patch1.ZIP, and extract the files to a temporary location on your epolicy Orchestrator computer. 3. Log on to epolicy Orchestrator 4.5 as an administrator. 4. Click Menu Software Extensions, then click "Install Extension".

9 5. Browse for the file MSDWIN 7500_0409.zip (for English) from the extracted package and click OK to install the product extension. 6. Browse for the file MSDWREPORTS.zip from the extracted package and click OK to install the report extension. 7. Click Menu Software Master Repository Actions Check In Package and add MSDW75Patch1_for_ePO.zip. 8. Create a new task to schedule an immediate update using the epolicy Orchestrator "Product Update" option from the "New Task" tab. Under "Patches and Service packs", select "McAfee Security for Lotus Domino (Windows) 7.5" and then run an agent wake-up call to deploy the Patch After the installation is complete, start the Lotus Domino Server. INSTALLATION THROUGH EPOLICY ORCHESTRATOR VERSION QUIT the Lotus Domino server on the client computer. 2. Download the package MSDW75Patch1.ZIP, and extract the files to a temporary location on your epolicy Orchestrator computer. 3. Log on to epolicy Orchestrator 4.6 as an administrator. 4. Click Menu Software Extensions, then click Install Extension. 5. Browse for the file MSDWIN 7500_0409.zip (for English) from the extracted package and click OK to install the product extension. 6. Browse for the file MSDWREPORTS.zip from the extracted package and click OK to install the report extension. 7. Click the Menu Software Master Repository Actions Check In Package and add MSDW75Patch1_for_ePO.zip 8. Create a new task to schedule an immediate update using epolicy Orchestrator "Product Update" option from the "New Client Task Assignment" tab. Under "Patches and Service packs", select "McAfee Security for Lotus Domino (Windows) 7.5" and then run an agent wake-up call to deploy the Patch. 9. After the installation is complete, start the Lotus Domino Server. TESTING YOUR INSTALLATION You can check if the Patch 1 is applied correctly by clicking Dashboard, and verifying the ProductInformation entries from the user interface: - Product Version: Hotfix: Patch1

10 FINDING PRODUCT DOCUMENTATION McAfee provides the information you need during each phase of the product implementation, from installation to daily use and troubleshooting. After a product is released, information about the product is entered into the McAfee online KnowledgeBase. 1. Go to the McAfee Technical Support ServicePortal at 2. Under Self Service, access the type of information you need: 3. For user documentation: 1. Click "Product Documentation." 2. Select a "Product," then select a "Version." 3. Select a product document. 4. For the KnowledgeBase: 1. Click "Search the KnowledgeBase" for answers to questions related to the product. 2. Click "Browse the KnowledgeBase" for articles listed by the product and version. OTHER INFORMATION To download new beta software or to read about the latest beta information, visit the beta website: To submit beta feedback on any McAfee product, send an to: mcafee_beta@mcafee.com For contact information, see: COPYRIGHT Copyright (C) 2011 McAfee, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of McAfee, Inc., or its suppliers or affiliate companies.

11 TRADEMARK ATTRIBUTIONS AVERT, EPO, EPOLICY ORCHESTRATOR, FOUNDSTONE, GROUPSHIELD, INTRUSHIELD, LINUXSHIELD, MAX (MCAFEE SECURITYALLIANCE EXCHANGE), MCAFEE, NETSHIELD, PORTALSHIELD, PREVENTSYS, SECURITYALLIANCE, SITEADVISOR, TOTAL PROTECTION, VIRUSSCAN, WEBSHIELD are registered trademarks or trademarks of McAfee, Inc. and/or its affiliates in the US and/or other countries. McAfee Red in connection with security is distinctive of McAfee brand products. All other registered and unregistered trademarks herein are the sole property of their respective owners. LICENSE INFORMATION LICENSE AGREEMENT NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANY YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND. DBN-001-EN V3.1.9