Patch Assessment Content Update Release Notes for CCS Version: Update

Transcription

1 Patch Assessment Content Update Release Notes for CCS 11.0 Version: Update

2 Patch Assessment Content Update Release Notes for CCS 11.0 Legal Notice Copyright 2012 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. The Licensed Software and Documentation are deemed to be commercial computer software as defined in FAR and subject to restricted rights as defined in FAR Section "Commercial Computer Software - Restricted Rights" and DFARS , "Rights in Commercial Computer Software or Commercial Computer Software Documentation", as applicable, and any successor regulations. Any use, modification, reproduction release, performance, display or disclosure of the Licensed Software and Documentation by the U.S. Government shall be solely in accordance with the terms of this Agreement.

3 Patch Assessment Content Updates This document includes the following topics: What's New in Updates in PACU What's New in Patch Assessment Content Update (PACU) is a cumulative update of the PACU PACU contains the following update: Comprehensive standard for Windows and UNIX on Message Based Content See Comprehensive standard for Windows and UNIX on Message Based Content on page 3. Comprehensive standard for Windows and UNIX on Message Based Content PACU contains the comprehensive standard for the policy that was released in PACU

4 4 Patch Assessment Content Updates Updates in PACU Table 1-1 Message based data content patch policy and standard Updates for Windows and UNIX File Name ESM_OSPatches_Comprehensive.xml Standard Version OS Patch Policy Version Updates in PACU PACU contains the following updates: Patch Assessment Content Updates for Windows in See Patch Assessment Content Updates for Windows in on page 4. Patch Assessment Content Updates for UNIX in See Patch Assessment Content Updates for UNIX in on page 5. Patch Assessment Content Updates for Windows in PACU contains checks for updates released by Microsoft in June The following are the Microsoft updates on raw-data content and message based content for patch policy. Updates for Raw-data Content MS12-036: Vulnerability in Remote Desktop Could Allow Remote Code Execution( ) MS12-037: Cumulative Security Update for Internet Explorer( ) MS12-038: Vulnerability in.net Framework Could Allow Remote Code Execution ( ) MS12-039: Vulnerabilities in Lync Could Allow Remote Code Execution( ) MS12-041: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege( ) MS12-042: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege( )

5 Patch Assessment Content Updates Updates in PACU Updates for Message Based Content for Patch policy MS12-036: Vulnerability in Remote Desktop Could Allow Remote Code Execution MS (IE): Cumulative Security Update for Internet Explorer MS (.Net) Vulnerability in.net Framework Could Allow Remote Code Execution ( ) MS12-041: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege( ) MS12-042: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege( ) Patch Assessment Content Updates for UNIX in PACU updates the operating system and application patches for UNIX operating systems for raw based content. There are a total of 1382 new patch bulletins and 8954 updated patch bulletins in 4 dat(template) files. Updates for Raw-data Content HP-UX PA-RISC HP-UX for Itanium-based systems Red Hat Enterprise Linux SUSE Linux IBM AIX Sun Solaris Updates for Message Based Content Patch Policy Updates for Message Based Content Patch Policy Solaris OEL HPUX Parisc

6 6 Patch Assessment Content Updates HPUX IA64 RHEL SuSE AIX VIOS PACU contains the following files: Table 1-2 Name SEForMSPatches.xml SEForMSPatches_Less.xml LinuxRecommendedPatches.dat HP-UXRecommendedPatches.dat AIXRecommendedPatches.dat SunOSRecommendedPatches.dat ESM_OSPatches_Comprehensive.xml bvmssecure.xml hfnetchk6b.xml BestPractice_OS_Patch_Updates_ exe Description Raw-data content standard for Windows Raw-data content standard for Windows Raw-data content updates for Linux Raw-data content updates for HP-UX Raw-data content updates for AIX Raw-data content updates for Sun OS Message based content updates for Windows and UNIX Raw-data content file for Windows data collection Raw-data content file for Windows data collection Updates for Message Based Content Patch Policy on Windows and UNIX.