Symantec Enterprise Security Manager Patch Policy Release Notes

Transcription

1 Symantec Enterprise Security Manager Patch Policy Release Notes

2 Symantec Enterprise Security Manager Patch Policy Release Notes The software described in this book is furnished under a license agreement and may be used only in accordance with the terms of the agreement. Documentation version: Legal Notice Copyright 2013 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, the Checkmark Logo, ActiveAdmin, BindView, BV-Control, and LiveUpdate are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. The product described in this document is distributed under licenses restricting its use, copying, distribution, and decompilation/reverse engineering. No part of this document may be reproduced in any form by any means without prior written authorization of Symantec Corporation and its licensors, if any. THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE. The Licensed Software and Documentation are deemed to be commercial computer software as defined in FAR and subject to restricted rights as defined in FAR Section "Commercial Computer Software - Restricted Rights" and DFARS , "Rights in Commercial Computer Software or Commercial Computer Software Documentation", as applicable, and any successor regulations. Any use, modification, reproduction release, performance, display or disclosure of the Licensed Software and Documentation by the U.S. Government shall be solely in accordance with the terms of this Agreement.

3 Symantec Corporation 350 Ellis Street Mountain View, CA

4 Technical Support Contacting Technical Support Symantec Technical Support maintains support centers globally. Technical Support s primary role is to respond to specific queries about product features and functionality. The Technical Support group also creates content for our online Knowledge Base. The Technical Support group works collaboratively with the other functional areas within Symantec to answer your questions in a timely fashion. For example, the Technical Support group works with Product Engineering and Symantec Security Response to provide alerting services and virus definition updates. Symantec s support offerings include the following: A range of support options that give you the flexibility to select the right amount of service for any size organization Telephone and/or Web-based support that provides rapid response and up-to-the-minute information Upgrade assurance that delivers software upgrades Global support purchased on a regional business hours or 24 hours a day, 7 days a week basis Premium service offerings that include Account Management Services For information about Symantec s support offerings, you can visit our website at the following URL: All support services will be delivered in accordance with your support agreement and the then-current enterprise technical support policy. Customers with a current support agreement may access Technical Support information at the following URL: Before contacting Technical Support, make sure you have satisfied the system requirements that are listed in your product documentation. Also, you should be at the computer on which the problem occurred, in case it is necessary to replicate the problem. When you contact Technical Support, please have the following information available: Product release level Hardware information

5 Available memory, disk space, and NIC information Operating system Version and patch level Network topology Licensing and registration Customer service Router, gateway, and IP address information Problem description: Error messages and log files Troubleshooting that was performed before contacting Symantec Recent software configuration changes and network changes If your Symantec product requires registration or a license key, access our technical support Web page at the following URL: Customer service information is available at the following URL: Customer Service is available to assist with non-technical questions, such as the following types of issues: Questions regarding product licensing or serialization Product registration updates, such as address or name changes General product information (features, language availability, local dealers) Latest information about product updates and upgrades Information about upgrade assurance and support contracts Information about the Symantec Buying Programs Advice about Symantec's technical support options Nontechnical presales questions Issues that are related to CD-ROMs, DVDs, or manuals

6 Support agreement resources If you want to contact Symantec regarding an existing support agreement, please contact the support agreement administration team for your region as follows: Asia-Pacific and Japan Europe, Middle-East, and Africa North America and Latin America

7 Contents Technical Support... 4 Chapter 1 Introducing Patch Policy updates... 8 About the Patch Policy updates... 8 Getting Patch Policy updates through LiveUpdate... 8 Enhancements to the Patch module in Security Updates... 9 Chapter 2 About the Patch policy release What is new Template updates New patches for Windows New patches for UNIX Red Hat Linux Oracle Enterprise Linux SUSE Solaris... 34

8 Chapter 1 Introducing Patch Policy updates This chapter includes the following topics: About the Patch Policy updates Getting Patch Policy updates through LiveUpdate Enhancements to the Patch module in Security Updates About the Patch Policy updates The Patch Policy updates are released twice a month. These updates add, enhance, and update the Patch policy and the associated template files on the Symantec ESM manager. Symantec updates the patch templates with the Symantec ESM policy installer. Getting Patch Policy updates through LiveUpdate To get Patch policy updates through LiveUpdate for 6.5 or later managers, select the Patch Policies - OS Comprehensive LiveUpdate package in the Enterprise Security Manager 6.5 or later Content Updates section. The Comprehensive package contains the checks that apply to the platforms that are supported only on ESM 6.5 or later. The policy installer executable applies to all versions of ESM and is available at the following location:

9 Introducing Patch Policy updates Enhancements to the Patch module in Security Updates 9 Note: As per the End of Life product support policy, ESM Patch policy updates on ESM 6.0 or earlier are not supported from Patch Policy (Windows) Update Note: If Java is installed on a Solaris 9 agent, install the JDK using the tar archive file containing packages, available from Sun. If you install the JDK using a selfextracting shell archive file, the module will not report vulnerability information for it because no specific packages are installed. Note: SU 26 now supports Solaris x86. If you do not have the current modules for SU 26, you will see duplicate messages for patches. To remove these duplicate messages, you must update your modules to SU 26 or newer. Enhancements to the Patch module in Security Updates Every Security Update includes updates to the Patch module. Upgrading to the latest Security Update provides you with the most accurate patch detection. Table 1-1 describes the enhancements to the Patch module in the latest Security Updates. Table 1-1 Security Update Security Update 20 Support and enhancements in Security Updates Upgraded support and enhancements Added support for Windows Server Bit Itanium-based systems Added support for SUSE Linux Enterprise Server 8 Security Update 21 Added support for HP-UX 11i v2 Added regular expression support for the file version field for Windows patches utilized in checking Windows Media Player patches

10 Introducing Patch Policy updates Enhancements to the Patch module in Security Updates 10 Table 1-1 Security Update Security Update 22 Support and enhancements in Security Updates (continued) Upgraded support and enhancements Added support for AIX maintenance releases and superseding patches. Added support for the following operating systems: IBM AIX 5.3 Red Hat Enterprise Linux AS 3.0 on Itanium, EM64T, and AMD64 Red Hat Enterprise Linux WS 3.0 on AMD64 SUSE Linux Enterprise Server 9 for x86 Security Update 23 Added support for SUSE Linux Enterprise Server 9 on Itanium Added support for Red Hat Linux Workstation 3 for Xeon (EM64T) Added wildcard support for registry keys Added patch results summary support Added list installed patches support Added service state messages support Security Update 24 Added support for Red Hat Enterprise Linux 4 ES (x86) Added Veritas Backup Exec product support Added script transfer to agent support Added Solaris Role Based Access Control support Added Solaris 2.10 zone support Security Update 25 Added support for the following operating systems: Red Hat Enterprise Linux 4 AS on Opteron and Itanium Windows Server 2003 Enterprise 64-bit on Opteron and Xeon Added UNICODE support for AIX 433 Security Update 26 Added support for Solaris 10 on x86, x64 Added File System Entitlement module Security Update 27 Added support for the following systems: Red Hat Enterprise Linux 4 AS (Xeon) Windows Server 2003 R2 (x86, x64) Security Update 28 Security Update 30 Added support for SUSE Linux Enterprise Server version 10 Added support for Microsoft Windows Vista (x86, x64) Editions

11 Introducing Patch Policy updates Enhancements to the Patch module in Security Updates 11 Table 1-1 Security Update Security Update 31 Support and enhancements in Security Updates (continued) Upgraded support and enhancements Added support for Red Hat Enterprise Linux 5 (x86, x86_64, and IA64-bit) Security Update Security Update 32 Security Update 34 Added support for Red Hat Enterprise Linux 5.x on IBM z-series (s390x) Added support for SUSE Linux Enterprise Server 9/10 (x86_64) and ESX Server (x86, Opteron) Added support for the following operating systems: Microsoft Windows Server 2008 (x86) Microsoft Windows Server bit (x64 ) Microsoft Windows Server Bit Itanium HP-UX on PA-RISC Security Update 35 Added support for the following operating systems: HP-UX on Itanium HP-UX on PA-RISC IBM AIX 6.1 Added support to handle Service Pack Entry for Windows Server bit (x64) and Windows Vista 64-bit (x64) template file. Added support to handle template size greater than 3MB for HP-UX. Security Update 36 Added support for the following operating systems: SUSE Linux 9 on IBM zseries (s390x) SUSE Linux 10 on IBM zseries (s390x) Security Update 37 Added support for the following operating systems: Red Hat Enterprise Linux Server 5 on PPC e-server Security Update 38 Added support for the following operating systems: AIX VIO Server 2.1 on AIX 6.1 SUSE 11 on x86, x86_64, Itanium, zlinux, and PPC e-server Oracle Enterprise Linux 5.2, 5.3 on x86, x86_64 Security Update 39 Added the support for the following operating systems: Windows 7 on x86 and Opteron Windows 2008 R2 on Itanium, Opteron, and Xeon

12 Introducing Patch Policy updates Enhancements to the Patch module in Security Updates 12 Table 1-1 Security Update Security Update 40 Support and enhancements in Security Updates (continued) Upgraded support and enhancements Added the support for the following operating systems: Red Hat Enterprise Linux 5.5 on x86, x86_64, Itanium, zlinux (s390x), and PPC e-server Red Hat Enterprise Linux Advanced Server 5.5 on x86, x86_64, Itanium, and PPC e-server Oracle Enterprise Linux 5.5 on x86 and x86_64 Security Update 41 Added the support for the following operating system: Red Hat Enterprise Linux 6.0 on x86, x86_64, PPC64, and zlinux (s390x) Security Update 42 Added the support for the following operating systems: Red Hat Enterprise Linux 6.1 on x86, x86_64, PPC64, and zlinux (s390x) Oracle Solaris 11 Express on x86 and SPARC Security Update 43 Added the support for the following operating system: Oracle Enterprise Linux 5.x and 6.x on x86 and x86_64 Security Update 44 All previously supported operating systems continue to be supported.

13 Chapter 2 About the Patch policy release This chapter includes the following topics: What is new Template updates New patches for Windows New patches for UNIX What is new This patch update for Symantec Enterprise Security Manager reports the operating system and application patches for Windows and UNIX operating system. There are a total of 1408 new patch signatures and 267 updated patch signatures in 27 templates. The following is a summary of the updates: exchg2k10.px7 (Microsoft Exchange Server 2010 on Microsoft Windows 2007 for x64-based Systems - 2 new) exchg2k10.p2s8 (Microsoft Exchange Server 2010 on Microsoft Windows 2008 R2 for x64-based Systems - 4 new) exchg2k10.ps12 (Microsoft Exchange Server 2010 on Microsoft Windows 2012 for x64-based Systems - 1 new) exchg2k10.ps8 (Microsoft Exchange Server 2010 on Microsoft Windows 2008 for x64-based Systems - 3 new)

14 What is new 14 exchg2k7.p2s8 (Microsoft Exchange Server 2007 on Microsoft Windows 2008 R2 for x64-based Systems - 1 new) exchg2k7.ps8 (Microsoft Exchange Server 2007 on Microsoft Windows 2008 for x64-based Systems - 1 new) exchg2k7.ps12 (Microsoft Exchange Server 2007 on Microsoft Windows 2012 for x64-based Systems - 1 new) ie.p28i (Microsoft Internet Explorer on Microsoft Windows 2008 R2 for 64-Bit Itanium-based Systems - 1 new) ie.p2s8 (Microsoft Internet Explorer on Microsoft Windows 2008 R2 for x64-based Systems - 3 new) ie.p3i (Microsoft Internet Explorer on Microsoft Windows Server 2003 for 64-Bit Itanium-based Systems - 2 new) ie.p64 (Microsoft Internet Explorer on Microsoft Windows Server 2003 for x64-based Systems - 3 new) ie.p6s (Microsoft Internet Explorer on Microsoft Windows Server new) ie.p8i (Microsoft Internet Explorer on Microsoft Windows 2008 for 64-Bit Itanium-based Systems - 1 new) ie.p8s (Microsoft Internet Explorer on Microsoft Windows Server new) ie.ps12 (Microsoft Internet Explorer on Windows 2012 for x64-based Systems - 1 new) ie.ps8 (Microsoft Internet Explorer on Microsoft Windows 2008 for x64-based Systems - 3 new) ie.pw7 (Microsoft Internet Explorer on Microsoft Windows 7-3 new) ie.pwv (Microsoft Internet Explorer on Microsoft Windows Vista - 3 new) ie.pwx (Microsoft Internet Explorer on Microsoft Windows XP Professional - 3 new) ie.px7 (Microsoft Internet Explorer on Microsoft Windows 7 for x64-based Systems - 3 new) ie.pxw (Microsoft Internet Explorer on Microsoft Windows Vista for x64-based Systems - 3 new) oel-patch.plx (Oracle Enterprise Linux new) patch.p6s (Microsoft Windows Server new) patch.plx (RedHat Enterprise Linux new) patch.ps6 (Sun Solaris new)

15 Template updates 15 patch.psl (SUSE Linux new, 267 updated) patch.pwx (Microsoft Windows XP Professional - 1 new) Template updates Table 2-1 lists the information about the templates that have been updated or added for various applications and operating systems. Table 2-1 Templates information for Windows and UNIX operating systems Template version Template file exchg2k.ps5 exchg2k3.p6s exchg2k3.ps5 exchg2k7.p6s exchg2k7.p8s exchg2k7.ps8 exchg2k7.p64 exchg2k7.p2s8 exchg2k10.ps8 exchg2k10.p2s8 exchg2k10.px7 Application on operating system Microsoft Exchange Server 2000 on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Exchange Server 2003 on Microsoft Windows Server 2003 Microsoft Exchange Server 2003 on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Exchange Server 2007 on Microsoft Windows Server 2003 Microsoft Exchange Server 2003 on Microsoft Windows 2008 Microsoft Exchange Server 2007 on Microsoft Windows Server 2008 (x64) Editions Microsoft Exchange Server 2007 on Microsoft Windows Server bit (x64) Microsoft Exchange Server 2007 on Microsoft Windows 2008 R2 Server 64-bit (x64) Microsoft Exchange Server 2010 on Microsoft Windows 2008 Server 64-bit (x64) Microsoft Exchange Server 2010 on Microsoft Windows 2008 R2 Server 64-bit (x64) Microsoft Exchange Server 2010 on Microsoft Windows 7 (x64)

16 Template updates 16 Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file exchg2k7.px7 exchg2k10.pxw exchg2k7.pxw exchg2k7.ps12 exchg55.ps5 ie.p3i ie.p64 ie.p6s ie.p8i ie.p8s ie.ps8 ie.ps5 ie.pw5 ie.pwx Application on operating system Microsoft Exchange Server 2007 on Microsoft Windows 7 (x64) Microsoft Exchange Server 2010 on Microsoft Vista (x64) Microsoft Exchange Server 2007 on Microsoft Vista (x64) Microsoft Exchange Server 2007 on Microsoft Windows 2012 (x64) Microsoft Exchange Server 5.5 on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Internet Explorer on Microsoft Windows Server 2003 for 64-Bit Itanium-based Systems Microsoft Internet Explorer on Microsoft Windows Server bit (x64) Microsoft Internet Explorer on Microsoft Windows Server 2003 Microsoft Internet Explorer on Microsoft Windows Server 2008 for 64-bit Itanium-based Systems Microsoft Internet Explorer on Microsoft Windows Server 2008 Microsoft Internet Explorer on Microsoft Windows Server bit (x64) Microsoft Internet Explorer on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Internet Explorer on Microsoft Windows 2000 Professional Microsoft Internet Explorer on Microsoft Windows XP Professional

17 Template updates 17 Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file ie.p28i ie.p2s8 ie.pw7 ie.px7 ie.pwv ie.pxw ie.ps12 iis.p3i iis.p64 iis.p6s iis.p8i iis.p8s iis.ps5 iis.ps8 iis.pw5 Application on operating system Microsoft Internet Explorer on Microsoft Windows 2008 R2 (x64) Microsoft Internet Explorer on Microsoft Windows 2008 R2 (x64)editions Microsoft Internet Explorer on Microsoft Windows 7 Microsoft Internet Explorer on Microsoft Windows 7 (x64) Microsoft Internet Explorer on Microsoft Windows Vista Microsoft Internet Explorer on Microsoft Windows Vista 64-bit (x64) Microsoft Internet Explorer on Microsoft Windows bit (x64) Microsoft Internet Information Services on Microsoft Windows Server 2003 for 64-Bit Itanium-based Systems Microsoft Internet Information Services on Microsoft Windows Server bit (x64) Microsoft Internet Information Services on Microsoft Windows Server 2003 Microsoft Internet Information Services on Microsoft 2008 for Itanium-based Systems Microsoft Internet Information Services on Microsoft Windows Server 2008 Microsoft Internet Information Services on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Internet Information Services on Microsoft Windows 2008 x64 Editions Microsoft Internet Information Services on Microsoft Windows 2000 Professional

18 Template updates 18 Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file iis.pw7 iis.px7 iis.pwv iis.pwx iis.pxw iis5.ps5 iis.p28i iis.p2s8 isa2k.p6s isa2k.ps5 isa.p6s isa.ps5 mdac.p6s mdac.ps5 Application on operating system Microsoft Internet Information Services on Microsoft Windows 2000 Professional Microsoft Internet Information Services on Microsoft Windows 7 (x64) Microsoft Internet Information Services on Microsoft Windows Vista Microsoft Internet Information Services on Microsoft Windows XP Professional Microsoft Internet Information Services on Microsoft Windows Vista 64-bit (x64) Microsoft Internet Information Services on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Internet Information Services on Microsoft 2008 for Itanium-based Systems Microsoft Internet Information Services on Microsoft Windows 2008 R2 (x64) Microsoft Internet Security and Acceleration Server on Microsoft Windows Server 2003 Microsoft Internet Security and Acceleration Server on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Internet Security and Acceleration Server on Microsoft Windows Server 2003 Microsoft Internet Security and Acceleration Server on Microsoft Windows 2000 Server Microsoft Data Access Components on Microsoft Windows Server 2003 Microsoft Data Access Components on Microsoft Windows 2000 Server and Windows 2000 Advanced Server

19 Template updates 19 Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file mdac.pw5 mdac.pwx oel-patch.plx outlook.p3i outlook.p64 outlook.p6s outlook.p8i outlook.p8s outlook.ps5 outlook.ps8 outlook.pw5 outlook.pwv outlook.pwx outlook.pxw patch.p3i patch.p64 Application on operating system Microsoft Data Access Components on Microsoft Windows 2000 Professional Microsoft Data Access Components on Microsoft Windows XP Professional Oracle Enterprise Linux Microsoft Outlook on Microsoft Windows Server 2003 for 64-Bit Itanium-based Systems Microsoft Outlook on Microsoft Windows Server 2003 (x64) Microsoft Outlook on Microsoft Windows Server 2003 Microsoft Windows Mail on Microsoft Windows 2008 for Itanium-based Systems Microsoft Windows Mail on Microsoft Windows Server 2008 Microsoft Outlook on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Windows Mail on Microsoft Windows 2008 (x64) Microsoft Outlook on Microsoft Windows 2000 Professional Microsoft Windows Mail on Microsoft Windows Vista Microsoft Outlook on Microsoft Windows XP Professional Microsoft Windows Mail on Microsoft Windows Vista for 64-Bit Microsoft Windows Server 2003 for 64-Bit Itanium-based Systems Microsoft Windows Server bit (x64)

20 Template updates 20 Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file patch.p6s patch.p8i patch.p8s patch.pai patch.ph1 patch.ph2 patch.plx patch.ps5 patch.ps6 patch.ps8 patch.psl patch.pso patch.pvio patch.pw5 patch.pwx patch.pwv patch.pxw patch.p28i patch.p2s8 patch.pw7 patch.px7 patch_adv2k.ps5 Application on operating system Microsoft Windows Server 2003 Microsoft Windows Server 2008 for 64-bit Itanium-based Systems Microsoft Windows Server 2008 IBM AIX HP HP-UX PA-RISC HP HP-UX for Itanium-based systems Red Hat Linux and Enterprise Linux Microsoft Windows 2000 Server and Windows 2000 Advanced Server Sun Solaris 2.6+ Microsoft Windows Server bit (x64) SUSE Linux Sun Solaris IBM AIX VIOS Server Microsoft Windows 2000 Professional Microsoft Windows XP Professional Microsoft Windows Vista Enterprise 32-bit Microsoft Windows Vista Enterprise 64-bit (x64) Microsoft Windows 2008 R2 for Itanium-based systems Microsoft Windows 2008 R2 64 -bit (x64) Microsoft Windows 7 Microsoft Windows bit Microsoft Windows 2000 Advanced Server

21 Template updates 21 Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file patch.ps12 sharepoint.p6s sharepoint.p64 sharepoint.p8s sharepoint.ps8 sql.p3i sql.p64 sql.p6s sql.p8i sql.p8s sql.ps5 sql.ps8 sql.pw5 sql.pwx sql.pxw Application on operating system Microsoft Internet Explorer on Microsoft Windows bit (x64) Microsoft SharePoint Services on Microsoft Windows Server 2003 Microsoft SharePoint Services on Microsoft Windows 2003 (x64) Editions Microsoft SharePoint Services on Microsoft Windows 2008 Microsoft SharePoint Services on Microsoft Windows 2008 (x64) Editions Microsoft SQL Server on Microsoft Windows 2003 for Itanium-based systems Microsoft SQL Server on Microsoft Windows bit (x64) Microsoft SQL Server on Microsoft Windows 2003 Microsoft SQL Server on Microsoft Windows 2008 for Itanium-based Systems Microsoft SQL Server on Microsoft Windows 2008 Microsoft SQL Server on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft SQL Server on Microsoft Windows bit (x64) Microsoft SQL Server on Microsoft Windows 2000 Professional Microsoft SQL Server on Microsoft Windows XP Professional Microsoft SQL Server on Microsoft Windows Vista

22 Template updates 22 Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file sql.pwv sql.px7 sql.pw7 sql.p2s8 sql.p28i sql.ps12 visualstudio.p3i visualstudio.p64 visualstudio.p6s visualstudio.p8i visualstudio.p8s visualstudio.ps5 visualstudio.ps8 visualstudio.pw5 visualstudio.pwv Application on operating system Microsoft SQL Server on Microsoft Windows XP Professional Microsoft SQL Server on Microsoft Windows 7 64-bit (x64) Microsoft SQL Server on Microsoft Windows 7 32-bit (x86) Microsoft SQL Server on Microsoft Windows Server 2008 R2 64-bit (x64) Microsoft SQL Server on Microsoft Windows Server 2008 R2 for Itanium-based 64-bit Systems (ia64) Microsoft SQL Server on Microsoft Windows 2012 for x64-based Systems Microsoft Visual Studio on Microsoft Windows Server 2003 for Itanium-based Systems Microsoft Visual Studio on Microsoft Windows Server 2003 (x64) Editions Microsoft Visual Studio on Microsoft Windows Server 2003 Microsoft Visual Studio on Microsoft Windows Server 2008 for Itanium-based Systems Microsoft Visual Studio on Microsoft Windows Server 2008 Microsoft Visual Studio on Microsoft Windows 2000 Professional Microsoft Visual Studio on Microsoft Windows Server 2008 (x64) Editions Microsoft Visual Studio on Microsoft Windows Server 2000 Microsoft Visual Studio on Microsoft Windows Vista

23 Template updates 23 Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file visualstudio.pwx visualstudio.pxw visualstudio.px7 visualstudio.pw7 visualstudio.p2s8 visualstudio.p28i wmplayer.p64 wmplayer.p6s wmplayer.p8s wmplayer.ps5 wmplayer.ps8 wmplayer.pw5 wmplayer.pwx wmplayer.pwv wmplayer.pxw Application on operating system Microsoft Visual Studio on Microsoft Windows XP Professional Microsoft Visual Studio on Microsoft Windows Vista (x64) Editions Microsoft Visual Studio on Microsoft Windows 7 (x64) Microsoft Visual Studio on Microsoft Windows 7 Microsoft Visual Studio on Microsoft Windows Server 2008 R2 64-bit (x64) Microsoft Visual Studio on Microsoft Windows Server 2008 R2 for Itanium-based 64-bit Systems (ia64) Microsoft Windows Media Player on Microsoft Windows Server bit (x64) Microsoft Windows Media Player on Microsoft Windows Server 2003 Microsoft Windows 2008 Microsoft Windows Media Player on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Windows Media Player on Microsoft Windows Server 2008 (x64) Editions Microsoft Windows Media Player on Microsoft Windows 2000 Professional Microsoft Windows Media Player on Microsoft Windows XP Professional Microsoft Windows Media Player on Microsoft Windows Vista (32-bit) Microsoft Windows Media Player on Microsoft Windows Vista (64-bit)

24 New patches for Windows 24 Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file wmplayer.p2s8 wmplayer.px7 wmplayer.pw7 wmplayer.ps12 Application on operating system Microsoft SharePoint Services on Microsoft Windows 2008 (x64) Microsoft SharePoint Services on Microsoft Windows 7 Microsoft SharePoint Services on Microsoft Windows 7 Microsoft Windows Media Player on Microsoft Windows Windows 2012 (x64-bit) New patches for Windows The following new patch is added in this release: MS MS MS New patches for UNIX Red Hat Linux New patches have been added for Oracle Enterprise Linux, Red Hat Linux, SUSE, and Solaris. Table 2-2 lists the new patches that have been added for Red Hat Linux operating systems. Table 2-2 New patches for Red Hat Linux curl-debuginfo el5_9 curl el5_9 curl-debuginfo el6_4 curl el6_4 curl-devel el5_9 firefox-debuginfo el5_9

25 New patches for UNIX 25 Table 2-2 New patches for Red Hat Linux (continued) firefox-debuginfo el6_4 java openjdk-d ebuginfo el5_9 java openjdk-d emo el6_4 java openjdk-j avadoc el5_9 java openjdk-s rc el6_4 kernel-bootwrapper el6 kernel-debug-devel el5 kernel-debuginfo-com mon-s390x el6 kernel-debuginfo el5 kernel-debug el6 kernel-doc el5 kernel-headers el5 kernel-kdump-debugin fo el6 firefox el5_9 java openjdk-d ebuginfo el6_4 java openjdk-d evel el5_9 java openjdk-j avadoc el6_4 java openjdk el5_9 kernel-debug-debugin fo el5 kernel-debug-devel el6 kernel-debuginfo-com mon-x86_ el6 kernel-debuginfo el6 kernel-devel el5 kernel-doc el6 kernel-headers el6 kernel-kdump-devel el5 firefox el6_4 java openjdk-d emo el5_9 java openjdk-d evel el6_4 java openjdk-s rc el5_9 java openjdk el6_4 kernel-debug-debugin fo el6 kernel-debuginfo-com mon-ppc el6 kernel-debuginfo-com mon el5 kernel-debug el5 kernel-devel el6 kernel-firmware el6 kernel-kdump-debugin fo el5 kernel-kdump-devel el6

26 New patches for UNIX 26 Table 2-2 New patches for Red Hat Linux (continued) kernel-kdump el5 kernel-xen-devel el5 kernel el6 perf-debuginfo el6 php-bcmath el6_4 php-common el5_9 php-dba el6_4 php-devel el5_9 php-enchant el6_4 php-gd el6_4 php-intl el6_4 php-mbstring el5_9 php-mysql el6_4 php-odbc el6_4 php-pgsql el5_9 php-pspell el6_4 php-snmp el6_4 php-tidy el6_4 php-xml el5_9 php53-bcmath el5_9.1 php53-dba el5_9.1 kernel-kdump el6 kernel-xen el5 libcurl-devel el6_4 perf el6 php-cli el5_9 php-common el6_4 php-debuginfo el5_9 php-devel el6_4 php-fpm el6_4 php-imap el5_9 php-ldap el5_9 php-mbstring el6_4 php-ncurses el5_9 php-pdo el5_9 php-pgsql el6_4 php-recode el6_4 php-soap el5_9 php-xmlrpc el5_9 php-xml el6_4 php53-cli el5_9.1 php53-debuginfo el5_9.1 kernel-xen-debuginfo el5 kernel el5 libcurl el6_4 php-bcmath el5_9 php-cli el6_4 php-dba el5_9 php-debuginfo el6_4 php-embedded el6_4 php-gd el5_9 php-imap el6_4 php-ldap el6_4 php-mysql el5_9 php-odbc el5_9 php-pdo el6_4 php-process el6_4 php-snmp el5_9 php-soap el6_4 php-xmlrpc el6_4 php-zts el6_4 php53-common el5_9.1 php53-devel el5_9.1

27 New patches for UNIX 27 Table 2-2 New patches for Red Hat Linux (continued) php53-gd el5_9.1 php53-ldap el5_9.1 php53-odbc el5_9.1 php53-process el5_9.1 php53-soap el5_9.1 php el5_9.1 python-perf-debuginf o el6 qemu-guest-agent el6_4.6 qemu-kvm-tools el6_4.6 ruby-debuginfo el6_4 ruby-docs el5_9 ruby-irb el6_4 ruby-mode el5_9 ruby-ri el5_9 ruby-tcltk el5_9 ruby el6_4 xulrunner-debuginfo el5_9 xulrunner-devel el6_4 php53-imap el5_9.1 php53-mbstring el5_9.1 php53-pdo el5_9.1 php53-pspell el5_9.1 php53-xmlrpc el5_9.1 php el5_9 python-perf el6 qemu-img el6_4.6 qemu-kvm el6_4.6 ruby-devel el5_9 ruby-docs el6_4 ruby-libs el5_9 ruby-rdoc el5_9 ruby-ri el6_4 ruby-tcltk el6_4 thunderbird-debuginf o el6_4 xulrunner-debuginfo el6_4 xulrunner el5_9 php53-intl el5_9.1 php53-mysql el5_9.1 php53-pgsql el5_9.1 php53-snmp el5_9.1 php53-xml el5_9.1 php el6_4 qemu-guest-agent-win el6_4.6 qemu-kvm-debuginfo el6_4.6 ruby-debuginfo el5_9 ruby-devel el6_4 ruby-irb el5_9 ruby-libs el6_4 ruby-rdoc el6_4 ruby-static el6_4 ruby el5_9 thunderbird el6_4 xulrunner-devel el5_9 xulrunner el6_4

28 New patches for UNIX 28 Oracle Enterprise Linux Table 2-3 lists the new patches that have been added for Oracle Enterprise Linux (OEL) operating systems Table 2-3 New patches for Oracle Enterprise Linux (OEL) curl-devel el5_9 firefox el5_9 java openjdk-d emo el6_4 java openjdk-j avadoc el5_9 java openjdk-s rc el6_4 kernel-debug-devel el5 kernel-debug el6 kernel-doc el5 kernel-headers el5 kernel-uek-debug-dev el el6uek kernel-uek-devel el5uek kernel-uek-doc el6uek kernel-uek-headers el5uek curl el5_9 firefox el6_4 java openjdk-d evel el5_9 java openjdk-j avadoc el6_4 java openjdk el5_9 kernel-debug-devel el6 kernel-devel el5 kernel-doc el6 kernel-headers el6 kernel-uek-debug el5uek kernel-uek-devel el6uek kernel-uek-firmware el5uek kernel-uek-headers el6uek curl el6_4 java openjdk-d emo el5_9 java openjdk-d evel el6_4 java openjdk-s rc el5_9 java openjdk el6_4 kernel-debug el5 kernel-devel el6 kernel-firmware el6 kernel-uek-debug-dev el el5uek kernel-uek-debug el6uek kernel-uek-doc el5uek kernel-uek-firmware el6uek kernel-uek el5uek

29 New patches for UNIX 29 Table 2-3 New patches for Oracle Enterprise Linux (OEL) (continued) kernel-uek el6uek kernel el5 libcurl el6_4 mlnx_en el6uekdebug ofa el5uek perf el6 php-cli el5_9 php-common el6_4 php-devel el5_9 php-enchant el6_4 php-gd el6_4 php-intl el6_4 php-mbstring el5_9 php-mysql el6_4 php-odbc el6_4 php-pgsql el5_9 php-pspell el6_4 php-snmp el6_4 php-tidy el6_4 php-xml el5_9 php53-bcmath el5_9.1 kernel-xen-devel el5 kernel el6 mlnx_en el5uekdebug mlnx_en el6uek ofa el6uekdebug php-bcmath el5_9 php-cli el6_4 php-dba el5_9 php-devel el6_4 php-fpm el6_4 php-imap el5_9 php-ldap el5_9 php-mbstring el6_4 php-ncurses el5_9 php-pdo el5_9 php-pgsql el6_4 php-recode el6_4 php-soap el5_9 php-xmlrpc el5_9 php-xml el6_4 php53-cli el5_9.1 kernel-xen el5 libcurl-devel el6_4 mlnx_en el5uek ofa el5uekdebug ofa el6uek php-bcmath el6_4 php-common el5_9 php-dba el6_4 php-embedded el6_4 php-gd el5_9 php-imap el6_4 php-ldap el6_4 php-mysql el5_9 php-odbc el5_9 php-pdo el6_4 php-process el6_4 php-snmp el5_9 php-soap el6_4 php-xmlrpc el6_4 php-zts el6_4 php53-common el5_9.1

30 New patches for UNIX 30 Table 2-3 New patches for Oracle Enterprise Linux (OEL) (continued) php53-dba el5_9.1 php53-imap el5_9.1 php53-mbstring el5_9.1 php53-pdo el5_9.1 php53-pspell el5_9.1 php53-xmlrpc el5_9.1 php el5_9 qemu-guest-agent-win el6_4.6 qemu-kvm-tools el6_4.6 ruby-devel el6_4 ruby-irb el5_9 ruby-libs el6_4 ruby-rdoc el6_4 ruby-static el6_4 ruby el5_9 thunderbird el6_4 xulrunner el5_9 php53-devel el5_9.1 php53-intl el5_9.1 php53-mysql el5_9.1 php53-pgsql el5_9.1 php53-snmp el5_9.1 php53-xml el5_9.1 php el6_4 qemu-guest-agent el6_4.6 qemu-kvm el6_4.6 ruby-docs el5_9 ruby-irb el6_4 ruby-mode el5_9 ruby-ri el5_9 ruby-tcltk el5_9 ruby el6_4 xulrunner-devel el5_9 xulrunner el6_4 php53-gd el5_9.1 php53-ldap el5_9.1 php53-odbc el5_9.1 php53-process el5_9.1 php53-soap el5_9.1 php el5_9.1 python-perf el6 qemu-img el6_4.6 ruby-devel el5_9 ruby-docs el6_4 ruby-libs el5_9 ruby-rdoc el5_9 ruby-ri el6_4 ruby-tcltk el6_4 thunderbird el5_9 xulrunner-devel el6_4 SUSE Table 2-4 lists the new patches that have been added for SUSE operating systems.

31 New patches for UNIX 31 Table 2-4 New Patches for SUSE compat-curl2-32bit compat-curl curl-devel curl ibutils-64bit ibutils-devel-64bit ibutils java-1_4_2-ibm-jdbc _sr java-1_4_2-ibm-plugi n-1.4.2_sr java-1_5_0-ibm-32bit _sr java-1_5_0-ibm-alsa _sr java-1_5_0-ibm-fonts _sr java-1_5_0-ibm _sr java-1_6_0-ibm-alsa- 32bit-1.6.0_sr java-1_6_0-ibm-devel -32bit-1.6.0_sr java-1_6_0-ibm-fonts _sr java-1_6_0-ibm-plugi n-32bit-1.6.0_sr compat-curl2-64bit curl-32bit curl-x ibutils-32bit ibutils-debuginfo ibutils-devel ibutils java-1_4_2-ibm-jdbc _sr java-1_4_2-ibm _sr java-1_5_0-ibm-64bit _sr java-1_5_0-ibm-devel -32bit-1.5.0_sr java-1_5_0-ibm-jdbc _sr java-1_6_0-ibm-32bit _sr java-1_6_0-ibm-alsa _sr java-1_6_0-ibm-devel _sr java-1_6_0-ibm-jdbc _sr java-1_6_0-ibm-plugi n-1.6.0_sr compat-curl2-x curl-64bit curl ibutils-32bit ibutils-devel-32bit ibutils-x java-1_4_2-ibm-devel _sr java-1_4_2-ibm-plugi n-1.4.2_sr java-1_4_2-ibm _sr java-1_5_0-ibm-alsa- 32bit-1.5.0_sr java-1_5_0-ibm-devel _sr java-1_5_0-ibm-plugi n-1.5.0_sr java-1_6_0-ibm-64bit _sr java-1_6_0-ibm-alsa _sr java-1_6_0-ibm-fonts _sr java-1_6_0-ibm-jdbc _sr java-1_6_0-ibm-plugi n-1.6.0_sr

32 New patches for UNIX 32 Table 2-4 New Patches for SUSE (continued) java-1_6_0-ibm _sr java-1_7_0-ibm-jdbc _sr kernel-default-base kernel-default kernel-ec kernel-pae kernel-ppc kernel-trace-base kernel-xen-base krb5-32bit krb5-apps-clients krb5-apps-servers krb5-debuginfo krb5-devel krb5-x krb libcurl4-x Mesa-32bit Mesa-devel-32bit Mesa-x java-1_6_0-ibm _sr java-1_7_0-ibm-plugi n-1.7.0_sr kernel-default-devel kernel-ec2-base kernel-pae-base kernel-ppc64-base kernel-source kernel-trace-devel kernel-xen-devel krb5-32bit krb5-apps-clients krb5-client krb5-devel-32bit krb5-server krb5-x kvm libcurl Mesa-32bit Mesa-devel-64bit Mesa-x java-1_7_0-ibm-alsa _sr java-1_7_0-ibm _sr kernel-default-man kernel-ec2-devel kernel-pae-devel kernel-ppc64-devel kernel-syms kernel-trace kernel-xen krb5-64bit krb5-apps-servers krb5-client krb5-devel-64bit krb5-server krb libcurl4-32bit libwbclient0-32bit Mesa-64bit Mesa-devel Mesa

33 New patches for UNIX 33 Table 2-4 Mesa New Patches for SUSE (continued) MozillaFirefox-brand ing-sled MozillaFirefox-brand ing-sled MozillaFirefox-debug info esr MozillaFirefox esr nagios-nrpe openswan quagga-devel strongswan-doc tomcat5-webapps xen-doc-html-4.1.5_ xen-kmp-default _02_3.0.80_ xen-kmp-trace-4.1.5_ 02_3.0.80_ xen-tools-domu _ xorg-x11-debuginfo xorg-x11-devel xorg-x11-fonts-75dpi xorg-x11-fonts-syria c MozillaFirefox-trans lations esr MozillaFirefox esr nagios-plugins-nrpe openswan strongswan-debuginfo strongswan tomcat xen-doc-pdf-4.1.5_ xen-kmp-pae-4.1.5_02 _3.0.74_ xen-libs-32bit-4.1.5_ xen-tools-4.1.5_ xorg-x11-devel-32bit xorg-x11-doc xorg-x11-fonts-cyril lic xorg-x11-libs-32bit MozillaFirefox-trans lations esr nagios-nrpe-doc openswan-doc quagga-debuginfo strongswan-doc strongswan wireshark xen-kmp-default _02_3.0.74_ xen-kmp-trace-4.1.5_ 02_3.0.74_ xen-libs-4.1.5_ xen-4.1.5_ xorg-x11-devel-64bit xorg-x11-fonts-100dp i xorg-x11-fonts-scala ble xorg-x11-libs-32bit

34 New patches for UNIX 34 Table 2-4 xorg-x11-libs-64bit New Patches for SUSE (continued) xorg-x11-libs-x xorg-x11-libs-x xorg-x11-libs xorg-x11-libx11-x xorg-x11-libxcb-x xorg-x11-libxext-x xorg-x11-libxfixes-x xorg-x11-libxp-x xorg-x11-libxt-x xorg-x11-libxv-x xorg-x11-sdk xorg-x11-xnest xorg-x xorg-x11-libs xorg-x11-libx xorg-x11-libxcb xorg-x11-libxext xorg-x11-libxfixes xorg-x11-libxp xorg-x11-libxrender xorg-x11-libxt xorg-x11-libxv xorg-x11-libxrenderx xorg-x11-server-glx xorg-x11-xvfb xorg-x11-libx11-32bi t xorg-x11-libxcb-32bi t xorg-x11-libxext-32b it xorg-x11-libxfixes-3 2bit xorg-x11-libxp-32bit xorg-x11-libxrender- 32bit xorg-x11-libxt-32bit xorg-x11-libxv-32bit xorg-x11-man xorg-x11-server xorg-x11-xvnc Solaris Table 2-5 lists the new patches that have been added for Solaris operating systems. Table New patches for Solaris

35 New patches for UNIX 35 Table New patches for Solaris (continued) Note: For this release of Solaris Patches, ESM has referred to the Patchdiag.xref file that is dated July 28, 2013.