Symantec Enterprise Security Manager Patch Policy Release Notes

Transcription

1 Symantec Enterprise Security Manager Patch Policy Release Notes

2 Symantec Enterprise Security Manager Patch Policy Release Notes The software described in this book is furnished under a license agreement and may be used only in accordance with the terms of the agreement. Documentation version: Legal Notice Copyright 2012 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo, ActiveAdmin, BindView, bv-control, and LiveUpdate are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This Symantec product may contain third party software for which Symantec is required to provide attribution to the third party ( Third Party Programs ). Some of the Third Party Programs are available under open source or free software licenses. The License Agreement accompanying the Software does not alter any rights or obligations you may have under those open source or free software licenses. Please see the Third Party Legal Notice Appendix to this Documentation or TPIP ReadMe File accompanying this Symantec product for more information on the Third Party Programs. The product described in this document is distributed under licenses restricting its use, copying, distribution, and decompilation/reverse engineering. No part of this document may be reproduced in any form by any means without prior written authorization of Symantec Corporation and its licensors, if any. THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE. The Licensed Software and Documentation are deemed to be commercial computer software as defined in FAR and subject to restricted rights as defined in FAR Section "Commercial Computer Software - Restricted Rights" and DFARS , "Rights in Commercial Computer Software or Commercial Computer Software Documentation", as applicable, and any successor regulations. Any use, modification, reproduction release, performance, display or disclosure of the Licensed Software and Documentation by the U.S. Government shall be solely in accordance with the terms of this Agreement.

3 Symantec Corporation 350 Ellis Street Mountain View, CA

4 Technical Support Contacting Technical Support Symantec Technical Support maintains support centers globally. Technical Support s primary role is to respond to specific queries about product features and functionality. The Technical Support group also creates content for our online Knowledge Base. The Technical Support group works collaboratively with the other functional areas within Symantec to answer your questions in a timely fashion. For example, the Technical Support group works with Product Engineering and Symantec Security Response to provide alerting services and virus definition updates. Symantec s support offerings include the following: A range of support options that give you the flexibility to select the right amount of service for any size organization Telephone and/or Web-based support that provides rapid response and up-to-the-minute information Upgrade assurance that delivers software upgrades Global support purchased on a regional business hours or 24 hours a day, 7 days a week basis Premium service offerings that include Account Management Services For information about Symantec s support offerings, you can visit our Web site at the following URL: All support services will be delivered in accordance with your support agreement and the then-current enterprise technical support policy. Customers with a current support agreement may access Technical Support information at the following URL: Before contacting Technical Support, make sure you have satisfied the system requirements that are listed in your product documentation. Also, you should be at the computer on which the problem occurred, in case it is necessary to replicate the problem. When you contact Technical Support, please have the following information available: Product release level

5 Hardware information Available memory, disk space, and NIC information Operating system Version and patch level Network topology Licensing and registration Customer service Router, gateway, and IP address information Problem description: Error messages and log files Troubleshooting that was performed before contacting Symantec Recent software configuration changes and network changes If your Symantec product requires registration or a license key, access our technical support Web page at the following URL: Customer service information is available at the following URL: Customer Service is available to assist with non-technical questions, such as the following types of issues: Questions regarding product licensing or serialization Product registration updates, such as address or name changes General product information (features, language availability, local dealers) Latest information about product updates and upgrades Information about upgrade assurance and support contracts Information about the Symantec Buying Programs Advice about Symantec's technical support options Nontechnical presales questions Issues that are related to CD-ROMs, DVDs, or manuals

6 Support agreement resources If you want to contact Symantec regarding an existing support agreement, please contact the support agreement administration team for your region as follows: Asia-Pacific and Japan Europe, Middle-East, and Africa North America and Latin America

7 Contents Technical Support... 4 Chapter 1 Introducing Patch Policy updates... 9 About the Patch Policy updates... 9 Getting Patch Policy updates through LiveUpdate... 9 Enhancements to the Patch module in Security Updates Chapter 2 About the Patch policy release What is new Template updates New patches HP-UX Red Hat Linux Solaris Oracle Enterprise Linux SUSE Resolved issues... 35

8 8 Contents

9 Chapter 1 Introducing Patch Policy updates This chapter includes the following topics: About the Patch Policy updates Getting Patch Policy updates through LiveUpdate Enhancements to the Patch module in Security Updates About the Patch Policy updates The Patch Policy updates are released twice a month. These updates add, enhance, and update the Patch policy and the associated template files on the Symantec ESM manager. Symantec updates the patch templates with the Symantec ESM policy installer. Getting Patch Policy updates through LiveUpdate To get Patch policy updates through LiveUpdate for 6.5 or later managers, select the Patch Policies - OS Comprehensive LiveUpdate package in the Enterprise Security Manager 6.5 or later Content Updates section. The Comprehensive package contains the checks that apply to the platforms that are supported only on ESM 6.5 or later. The policy installer executable applies to all versions of ESM and is available at the following location:

10 10 Introducing Patch Policy updates Enhancements to the Patch module in Security Updates Note: As per the End of Life product support policy, ESM Patch policy updates on ESM 6.0 or earlier are not supported from Patch Policy (Windows) Update Note: If Java is installed on a Solaris 9 agent, install the JDK using the tar archive file containing packages, available from Sun. If you install the JDK using a selfextracting shell archive file, the module will not report vulnerability information for it because no specific packages are installed. Note: SU 26 now supports Solaris x86. If you do not have the current modules for SU 26, you will see duplicate messages for patches. To remove these duplicate messages, you must update your modules to SU 26 or newer. Enhancements to the Patch module in Security Updates Every Security Update includes updates to the Patch module. Upgrading to the latest Security Update provides you with the most accurate patch detection. Table 1-1 describes the enhancements to the Patch module in the latest Security Updates. Table 1-1 Security Update Support and enhancements in Security Updates Upgraded support and enhancements Security Update 20 Added support for Windows Server Bit Itanium-based systems Added support for SUSE Linux Enterprise Server 8 Security Update 21 Added support for HP-UX 11i v2 Added regular expression support for the file version field for Windows patches utilized in checking Windows Media Player patches

11 Introducing Patch Policy updates Enhancements to the Patch module in Security Updates 11 Table 1-1 Security Update Support and enhancements in Security Updates (continued) Upgraded support and enhancements Security Update 22 Added support for AIX maintenance releases and superseding patches. Added support for the following operating systems: IBM AIX 5.3 Red Hat Enterprise Linux AS 3.0 on Itanium, EM64T, and AMD64 Red Hat Enterprise Linux WS 3.0 on AMD64 SUSE Linux Enterprise Server 9 for x86 Security Update 23 Added support for SUSE Linux Enterprise Server 9 on Itanium Added support for Red Hat Linux Workstation 3 for Xeon (EM64T) Added wildcard support for registry keys Added patch results summary support Added list installed patches support Added service state messages support Security Update 24 Added support for Red Hat Enterprise Linux 4 ES (x86) Added Veritas Backup Exec product support Added script transfer to agent support Added Solaris Role Based Access Control support Added Solaris 2.10 zone support Security Update 25 Added support for the following operating systems: Red Hat Enterprise Linux 4 AS on Opteron and Itanium Windows Server 2003 Enterprise 64-bit on Opteron and Xeon Added UNICODE support for AIX 433 Security Update 26 Added support for Solaris 10 on x86, x64 Added File System Entitlement module Security Update 27 Added support for the following systems: Red Hat Enterprise Linux 4 AS (Xeon) Windows Server 2003 R2 (x86, x64) Security Update 28 Added support for SUSE Linux Enterprise Server version 10

12 12 Introducing Patch Policy updates Enhancements to the Patch module in Security Updates Table 1-1 Security Update Support and enhancements in Security Updates (continued) Upgraded support and enhancements Security Update 30 Security Update 31 Security Update Security Update 32 Security Update 34 Added support for Microsoft Windows Vista (x86, x64) Editions Added support for Red Hat Enterprise Linux 5 (x86, x86_64, and IA64-bit) Added support for Red Hat Enterprise Linux 5.x on IBM z-series (s390x) Added support for SUSE Linux Enterprise Server 9/10 (x86_64) and ESX Server (x86, Opteron) Added support for the following operating systems: Microsoft Windows Server 2008 (x86) Microsoft Windows Server bit (x64 ) Microsoft Windows Server Bit Itanium HP-UX on PA-RISC Security Update 35 Added support for the following operating systems: HP-UX on Itanium HP-UX on PA-RISC IBM AIX 6.1 Added support to handle Service Pack Entry for Windows Server bit (x64) and Windows Vista 64-bit (x64) template file. Added support to handle template size greater than 3MB for HP-UX. Security Update 36 Added support for the following operating systems: SUSE Linux 9 on IBM zseries (s390x) SUSE Linux 10 on IBM zseries (s390x) Security Update 37 Added support for the following operating systems: Red Hat Enterprise Linux Server 5 on PPC e-server Security Update 38 Added support for the following operating systems: AIX VIO Server 2.1 on AIX 6.1 SUSE 11 on x86, x86_64, Itanium, zlinux, and PPC e-server Oracle Enterprise Linux 5.2, 5.3 on x86, x86_64

13 Introducing Patch Policy updates Enhancements to the Patch module in Security Updates 13 Table 1-1 Security Update Support and enhancements in Security Updates (continued) Upgraded support and enhancements Security Update 39 Added the support for the following operating systems: Windows 7 on x86 and Opteron Windows 2008 R2 on Itanium, Opteron, and Xeon Security Update 40 Added the support for the following operating systems: Red Hat Enterprise Linux 5.5 on x86, x86_64, Itanium, zlinux (s390x), and PPC e-server Red Hat Enterprise Linux Advanced Server 5.5 on x86, x86_64, Itanium, and PPC e-server Oracle Enterprise Linux 5.5 on x86 and x86_64 Security Update 41 Added the support for the following operating system: Red Hat Enterprise Linux 6.0 on x86, x86_64, PPC64, and zlinux (s390x) Security Update 42 Added the support for the following operating systems: Red Hat Enterprise Linux 6.1 on x86, x86_64, PPC64, and zlinux (s390x) Oracle Solaris 11 Express on x86 and SPARC Security Update 43 Added the support for the following operating system: Oracle Enterprise Linux 5.x and 6.x on x86 and x86_64

14 14 Introducing Patch Policy updates Enhancements to the Patch module in Security Updates

15 Chapter 2 About the Patch policy release This chapter includes the following topics: What is new Template updates New patches Resolved issues What is new This patch update for Symantec Enterprise Security Manager reports the operating system and application patches for UNIX operating systems. There are a total of 2104 new patch signatures and 290 updated patch signatures in 7 templates. The following is a summary of the updates: oel-patch.plx (Oracle Enterprise Linux new) patch.pai (IBM AIX - 25 updated) patch.ph1 (HP-UX PA-RISC - 10 new) patch.ph2 (HP-UX for Itanium-based systems - 10 new) patch.plx (RedHat Enterprise Linux new) patch.ps6 (Sun Solaris new) patch.psl (SUSE Linux new, 265 updated)

16 16 About the Patch policy release Template updates Template updates Table 2-1 lists the information about the templates that have been updated or added for various applications and operating systems. Table 2-1 Templates information for Windows and UNIX operating systems Template version Template file exchg2k.ps5 exchg2k3.p6s exchg2k3.ps5 exchg2k7.p6s exchg2k7.p8s exchg2k7.ps8 exchg2k7.p64 exchg2k10.ps8 exchg2k10.p2s8 exchg55.ps5 ie.p3i ie.p64 Application on operating system Microsoft Exchange Server 2000 on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Exchange Server 2003 on Microsoft Windows Server 2003 Microsoft Exchange Server 2003 on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Exchange Server 2007 on Microsoft Windows Server 2003 Microsoft Exchange Server 2003 on Microsoft Windows 2008 Microsoft Exchange Server 2007 on Microsoft Windows Server 2008 (x64) Editions Microsoft Exchange Server 2007 on Microsoft Windows Server bit (x64) Microsoft Exchange Server 2010 on Microsoft Windows 2008 Server 64-bit (x64) Microsoft Exchange Server 2010 on Microsoft Windows 2008 R2 Server 64-bit (x64) Microsoft Exchange Server 5.5 on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Internet Explorer on Microsoft Windows Server 2003 for 64-Bit Itanium-based Systems Microsoft Internet Explorer on Microsoft Windows Server bit (x64)

17 About the Patch policy release Template updates 17 Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file ie.p6s ie.p8i ie.p8s ie.ps8 ie.ps5 ie.pw5 ie.pwx ie.p28i ie.p2s8 ie.pw7 ie.px7 ie.pwv iis.p3i iis.p64 Application on operating system Microsoft Internet Explorer on Microsoft Windows Server 2003 Microsoft Internet Explorer on Microsoft Windows Server 2008 for 64-bit Itanium-based Systems Microsoft Internet Explorer on Microsoft Windows Server 2008 Microsoft Internet Explorer on Microsoft Windows Server bit (x64) Microsoft Internet Explorer on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Internet Explorer on Microsoft Windows 2000 Professional Microsoft Internet Explorer on Microsoft Windows XP Professional Microsoft Internet Explorer on Microsoft Windows 2008 R2 (x64) Microsoft Internet Explorer on Microsoft Windows 2008 R2 (x64)editions Microsoft Internet Explorer on Microsoft Windows 7 Microsoft Internet Explorer on Microsoft Windows 7 (x64) Microsoft Internet Explorer on Microsoft Windows Vista Microsoft Internet Information Services on Microsoft Windows Server 2003 for 64-Bit Itanium-based Systems Microsoft Internet Information Services on Microsoft Windows Server bit (x64)

18 18 About the Patch policy release Template updates Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file iis.p6s iis.p8i iis.p8s iis.ps5 iis.ps8 ie.pxw iis.pw5 iis.pw7 iis.px7 iis.pwv iis.pwx iis.pxw iis5.ps5 iis.p28i iis.p2s8 Application on operating system Microsoft Internet Information Services on Microsoft Windows Server 2003 Microsoft Internet Information Services on Microsoft 2008 for Itanium-based Systems Microsoft Internet Information Services on Microsoft Windows Server 2008 Microsoft Internet Information Services on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Internet Information Services on Microsoft Windows 2008 x64 Editions Microsoft Internet Explorer on Microsoft Windows Vista 64-bit (x64) Microsoft Internet Information Services on Microsoft Windows 2000 Professional Microsoft Internet Information Services on Microsoft Windows 2000 Professional Microsoft Internet Information Services on Microsoft Windows 7 (x64) Microsoft Internet Information Services on Microsoft Windows Vista Microsoft Internet Information Services on Microsoft Windows XP Professional Microsoft Internet Information Services on Microsoft Windows Vista 64-bit (x64) Microsoft Internet Information Services on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Internet Information Services on Microsoft 2008 for Itanium-based Systems Microsoft Internet Information Services on Microsoft Windows 2008 R2 (x64)

19 About the Patch policy release Template updates 19 Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file isa2k.p6s isa2k.ps5 isa.p6s isa.ps5 mdac.p6s mdac.ps5 mdac.pw5 mdac.pwx oel-patch.plx outlook.p3i outlook.p64 outlook.p6s outlook.p8i outlook.p8s outlook.ps5 Application on operating system Microsoft Internet Security and Acceleration Server on Microsoft Windows Server 2003 Microsoft Internet Security and Acceleration Server on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Internet Security and Acceleration Server on Microsoft Windows Server 2003 Microsoft Internet Security and Acceleration Server on Microsoft Windows 2000 Server Microsoft Data Access Components on Microsoft Windows Server 2003 Microsoft Data Access Components on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Data Access Components on Microsoft Windows 2000 Professional Microsoft Data Access Components on Microsoft Windows XP Professional Oracle Entreprise Linux Microsoft Outlook on Microsoft Windows Server 2003 for 64-Bit Itanium-based Systems Microsoft Outlook on Microsoft Windows Server 2003 (x64) Microsoft Outlook on Microsoft Windows Server 2003 Microsoft Windows Mail on Microsoft Windows 2008 for Itanium-based Systems Microsoft Windows Mail on Microsoft Windows Server 2008 Microsoft Outlook on Microsoft Windows 2000 Server and Windows 2000 Advanced Server

20 20 About the Patch policy release Template updates Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file outlook.ps8 outlook.pw5 outlook.pwv outlook.pwx outlook.pxw patch.p3i patch.p64 patch.p6s patch.p8i patch.p8s patch.pai patch.ph1 patch.ph2 patch.plx patch.ps5 patch.ps6 patch.ps8 patch.psl patch.pso patch.pvio Application on operating system Microsoft Windows Mail on Microsoft Windows 2008 (x64) Microsoft Outlook on Microsoft Windows 2000 Professional Microsoft Windows Mail on Microsoft Windows Vista Microsoft Outlook on Microsoft Windows XP Professional Microsoft Windows Mail on Microsoft Windows Vista for 64-Bit Microsoft Windows Server 2003 for 64-Bit Itanium-based Systems Microsoft Windows Server bit (x64) Microsoft Windows Server 2003 Microsoft Windows Server 2008 for 64-bit Itanium-based Systems Microsoft Windows Server 2008 IBM AIX HP HP-UX PA-RISC HP HP-UX for Itanium-based systems Red Hat Linux and Enterprise Linux Microsoft Windows 2000 Server and Windows 2000 Advanced Server Sun Solaris 2.6+ Microsoft Windows Server bit (x64) SUSE Linux Sun Solaris IBM AIX VIOS Server

21 About the Patch policy release Template updates 21 Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file patch.pw5 patch.pwx patch.pwv patch.pxw patch.p28i patch.p2s8 patch.pw7 patch.px7 patch_adv2k.ps5 sharepoint.p6s sharepoint.p64 sharepoint.p8s sharepoint.ps8 sql.p3i sql.p64 sql.p6s sql.p8i sql.p8s Application on operating system Microsoft Windows 2000 Professional Microsoft Windows XP Professional Microsoft Windows Vista Enterprise 32-bit Microsoft Windows Vista Enterprise 64-bit (x64) Microsoft Windows 2008 R2 for Itanium-based systems Microsoft Windows 2008 R2 64 -bit (x64) Microsoft Windows 7 Microsoft Windows bit Microsoft Windows 2000 Advanced Server Microsoft SharePoint Services on Microsoft Windows Server 2003 Microsoft SharePoint Services on Microsoft Windows 2003 (x64) Editions Microsoft SharePoint Services on Microsoft Windows 2008 Microsoft SharePoint Services on Microsoft Windows 2008 (x64) Editions Microsoft SQL Server on Microsoft Windows 2003 for Itanium-based systems Microsoft SQL Server on Microsoft Windows bit (x64) Microsoft SQL Server on Microsoft Windows 2003 Microsoft SQL Server on Microsoft Windows 2008 for Itanium-based Systems Microsoft SQL Server on Microsoft Windows 2008

22 22 About the Patch policy release Template updates Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file sql.ps5 sql.ps8 sql.pw5 sql.pwx sql.pxw sql.pwv sql.px7 sql.pw7 sql.p2s8 sql.p28i visualstudio.p3i visualstudio.p64 visualstudio.p6s visualstudio.p8i Application on operating system Microsoft SQL Server on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft SQL Server on Microsoft Windows bit (x64) Microsoft SQL Server on Microsoft Windows 2000 Professional Microsoft SQL Server on Microsoft Windows XP Professional Microsoft SQL Server on Microsoft Windows Vista Microsoft SQL Server on Microsoft Windows XP Professional Microsoft SQL Server on Microsoft Windows 7 64-bit (x64) Microsoft SQL Server on Microsoft Windows 7 32-bit (x86) Microsoft SQL Server on Microsoft Windows Server 2008 R2 64-bit (x64) Microsoft SQL Server on Microsoft Windows Server 2008 R2 for Itanium-based 64-bit Systems (ia64) Microsoft Visual Studio on Microsoft Windows Server 2003 for Itanium-based Systems Microsoft Visual Studio on Microsoft Windows Server 2003 (x64) Editions Microsoft Visual Studio on Microsoft Windows Server 2003 Microsoft Visual Studio on Microsoft Windows Server 2008 for Itanium-based Systems

23 About the Patch policy release Template updates 23 Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file visualstudio.p8s visualstudio.ps5 visualstudio.ps8 visualstudio.pw5 visualstudio.pwv visualstudio.pwx visualstudio.pxw visualstudio.px7 visualstudio.pw7 visualstudio.p2s8 visualstudio.p28i wmplayer.p64 wmplayer.p6s wmplayer.p8s wmplayer.ps5 Application on operating system Microsoft Visual Studio on Microsoft Windows Server 2008 Microsoft Visual Studio on Microsoft Windows 2000 Professional Microsoft Visual Studio on Microsoft Windows Server 2008 (x64) Editions Microsoft Visual Studio on Microsoft Windows Server 2000 Microsoft Visual Studio on Microsoft Windows Vista Microsoft Visual Studio on Microsoft Windows XP Professional Microsoft Visual Studio on Microsoft Windows Vista (x64) Editions Microsoft Visual Studio on Microsoft Windows 7 (x64) Microsoft Visual Studio on Microsoft Windows 7 Microsoft Visual Studio on Microsoft Windows Server 2008 R2 64-bit (x64) Microsoft Visual Studio on Microsoft Windows Server 2008 R2 for Itanium-based 64-bit Systems (ia64) Microsoft Windows Media Player on Microsoft Windows Server bit (x64) Microsoft Windows Media Player on Microsoft Windows Server 2003 Microsoft Windows 2008 Microsoft Windows Media Player on Microsoft Windows 2000 Server and Windows 2000 Advanced Server

24 24 About the Patch policy release New patches Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file wmplayer.ps8 wmplayer.pw5 wmplayer.pwx wmplayer.pwv wmplayer.pxw wmplayer.p2s8 wmplayer.px7 wmplayer.pw7 Application on operating system Microsoft Windows Media Player on Microsoft Windows Server 2008 (x64) Editions Microsoft Windows Media Player on Microsoft Windows 2000 Professional Microsoft Windows Media Player on Microsoft Windows XP Professional Microsoft Windows Media Player on Microsoft Windows Vista (32-bit) wmplayer.pxw Microsoft Windows Media Player on Microsoft Windows Vista (64-bit) Microsoft SharePoint Services on Microsoft Windows 2008 (x64) Microsoft SharePoint Services on Microsoft Windows 7 Microsoft SharePoint Services on Microsoft Windows 7 New patches New patches have been added for HP-UX, Oracle Enterprise Linux, Red Hat Linux, Solaris, SUSE. HP-UX Table 2-2 lists the new patches that have been added for HP-UX operating systems. Table 2-2 PHCO_42120 PHKL_42871 PHKL_42875 New patches for HP-UX PHCO_42918 PHKL_42873 PHKL_42876 PHKL_42844 PHKL_42874 PHKL_42905

25 About the Patch policy release New patches 25 Table 2-2 PHKL_42919 New patches for HP-UX (continued) Red Hat Linux Table 2-3 lists the new patches that have been added for Red Hat Linux operating systems. Table 2-3 New patches for Red Hat Linux firefox-debuginfo el6_2 ImageMagick-c++-deve l el5_8 ImageMagick-c el6_2 ImageMagick-devel el6_2 ImageMagick-perl el6_2 kernel-bootwrapper el6 kernel-debug-devel el6 kernel-debuginfo-com mon-x86_ el6 kernel-debug el6 kernel-doc el5 kernel-headers el5 firefox el5_8 ImageMagick-c++-deve l el6_2 ImageMagick-debuginf o el6_2 ImageMagick-doc el6_2 ImageMagick el5_8 kernel-debug-debugin fo el6 kernel-debuginfo-com mon-ppc el6 kernel-debuginfo el6 kernel-devel el5 kernel-doc el6 kernel-headers el6 firefox el6_2 ImageMagick-c el5_8 ImageMagick-devel el5_8 ImageMagick-perl el5_8 ImageMagick el6_2 kernel-debug-devel el5 kernel-debuginfo-com mon-s390x el6 kernel-debug el5 kernel-devel el6 kernel-firmware el6 kernel-kdump-debugin fo el6

26 26 About the Patch policy release New patches Table 2-3 New patches for Red Hat Linux (continued) kernel-kdump-devel el5 kernel-kdump el6 kernel el5 libpng-devel el5_8 libpng el5_8 libsmbclient el6_2 openssl-devel el6_2.4 openssl-static el6_2.4 openssl098e-0.9.8e-1 7.el6_2.2 perf-debuginfo el6 php-bcmath el6_2.8 php-common el5_8 php-dba el6_2.8 php-devel el6_2.8 php-gd el5_8 php-imap el6_2.8 php-ldap el6_2.8 php-mysql el5_8 php-odbc el5_8 kernel-kdump-devel el6 kernel-xen-devel el5 kernel el6 libpng-devel el6_2 libpng el6_2 openssl-debuginfo el6_2.4 openssl-perl-0.9.8e- 22.el5_8.3 openssl097a-0.9.7a-1 1.el5_8.2 openssl-0.9.8e-22.el5_8.3 perf el6 php-cli el5_8 php-common el6_2.8 php-debuginfo el6_2.8 php-embedded el6_2.8 php-gd el6_2.8 php-intl el6_2.8 php-mbstring el5_8 php-mysql el6_2.8 php-odbc el6_2.8 kernel-kdump el5 kernel-xen el5 libpng-debuginfo el6_2 libpng-static el6_2 libsmbclient-devel el6_2 openssl-devel-0.9.8e -22.el5_8.3 openssl-perl el6_2.4 openssl098e-debuginf o-0.9.8e-17.el6_2.2 openssl el6_2.4 php-bcmath el5_8 php-cli el6_2.8 php-dba el5_8 php-devel el5_8 php-enchant el6_2.8 php-imap el5_8 php-ldap el5_8 php-mbstring el6_2.8 php-ncurses el5_8 php-pdo el5_8

27 About the Patch policy release New patches 27 Table 2-3 New patches for Red Hat Linux (continued) php-pdo el6_2.8 php-process el6_2.8 php-snmp el5_8 php-soap el6_2.8 php-xmlrpc el6_2.8 php-zts el6_2.8 php53-common el5_8 php53-gd el5_8 php53-ldap el5_8 php53-odbc el5_8 php53-process el5_8 php53-soap el5_8 php el5_8 python-perf el6 samba-debuginfo el6_2 samba-swat el6_2 samba-winbind-krb5-l ocator el6_2 samba3x-common el5_8 samba3x-swat el5_8 samba3x el5_8 php-pgsql el5_8 php-pspell el6_2.8 php-snmp el6_2.8 php-tidy el6_2.8 php-xml el5_8 php53-bcmath el5_8 php53-dba el5_8 php53-imap el5_8 php53-mbstring el5_8 php53-pdo el5_8 php53-pspell el5_8 php53-xmlrpc el5_8 php el5_8 samba-client el6_2 samba-doc el6_2 samba-winbind-client s el6_2 samba-winbind el6_2 samba3x-doc el5_8 samba3x-winbind-deve l el5_8 samba el6_2 php-pgsql el6_2.8 php-recode el6_2.8 php-soap el5_8 php-xmlrpc el5_8 php-xml el6_2.8 php53-cli el5_8 php53-devel el5_8 php53-intl el5_8 php53-mysql el5_8 php53-pgsql el5_8 php53-snmp el5_8 php53-xml el5_8 php el6_2.8 samba-common el6_2 samba-domainjoin-gui el6_2 samba-winbind-devel el6_2 samba3x-client el5_8 samba3x-domainjoin-g ui el5_8 samba3x-winbind el5_8 thunderbird-debuginf o el6_2

28 28 About the Patch policy release New patches Table 2-3 New patches for Red Hat Linux (continued) thunderbird el6_2 wireshark-gnome el6_2.1 xulrunner-devel el5_8 xulrunner el6_2 wireshark-debuginfo el6_2.1 wireshark el6_2.1 xulrunner-devel el6_2 wireshark-devel el6_2.1 xulrunner-debuginfo el6_2 xulrunner el5_8 Solaris Table 2-4 lists the new patches that have been added for Solaris operating systems. Table New patches for Solaris Note: For this release of Solaris Patches, ESM has referred to the Patchdiag.xref file that is dated May 13, 2012.

29 About the Patch policy release New patches 29 Oracle Enterprise Linux Table 2-5 lists the new patches that have been added for Oracle Enterprise Linux (OEL) operating systems Table 2-5 New patches for Oracle Enterprise Linux (OEL) firefox el5_8 ImageMagick-devel el5_8 kernel-uek-debug-dev el el5uek kernel-uek-doc el5uek kernel-uek el5uek mlnx_en el5uekdebug mlnx_en el5uek ofa el5uekdebug openssl-perl-0.9.8e- 22.el5_8.3 php-bcmath el5_8 php-dba el5_8 php-imap el5_8 php-mysql el5_8 php-pdo el5_8 php-soap el5_8 php53-bcmath el5_8 php53-dba el5_8 ImageMagick-c++-deve l el5_8 ImageMagick-perl el5_8 kernel-uek-debug el5uek kernel-uek-firmware el5uek libpng-devel el5_8 mlnx_en el5uek ofa el5uekdebug ofa el5uek openssl097a-0.9.7a-1 1.el5_8.2 php-cli el5_8 php-devel el5_8 php-ldap el5_8 php-ncurses el5_8 php-pgsql el5_8 php-xmlrpc el5_8 php53-cli el5_8 php53-devel el5_8 ImageMagick-c el5_8 ImageMagick el5_8 kernel-uek-devel el5uek kernel-uek-headers el5uek libpng el5_8 mlnx_en el5uekdebug ofa el5uek openssl-devel-0.9.8e -22.el5_8.3 openssl-0.9.8e-22.el5_8.3 php-common el5_8 php-gd el5_8 php-mbstring el5_8 php-odbc el5_8 php-snmp el5_8 php-xml el5_8 php53-common el5_8 php53-gd el5_8

30 30 About the Patch policy release New patches Table 2-5 New patches for Oracle Enterprise Linux (OEL) (continued) php53-imap el5_8 php53-mbstring el5_8 php53-pdo el5_8 php53-pspell el5_8 php53-xmlrpc el5_8 php el5_8 samba3x-doc el5_8 samba3x-winbind-deve l el5_8 xulrunner-devel el5_8 php53-intl el5_8 php53-mysql el5_8 php53-pgsql el5_8 php53-snmp el5_8 php53-xml el5_8 samba3x-client el5_8 samba3x-domainjoin-g ui el5_8 samba3x-winbind el5_8 xulrunner el5_8 php53-ldap el5_8 php53-odbc el5_8 php53-process el5_8 php53-soap el5_8 php el5_8 samba3x-common el5_8 samba3x-swat el5_8 samba3x el5_8 SUSE Table 2-6 lists the new patches that have been added for SUSE operating systems. Table 2-6 New Patches for SUSE apache2-mod_php cifs-mount java-1_5_0-ibm-64bit _sr java-1_5_0-ibm-devel -32bit-1.5.0_sr java-1_5_0-ibm-jdbc _sr apache2-mod_php cifs-utils java-1_5_0-ibm-alsa- 32bit-1.5.0_sr java-1_5_0-ibm-devel _sr java-1_5_0-ibm-plugi n-1.5.0_sr apache2-mod_php java-1_5_0-ibm-32bit _sr java-1_5_0-ibm-alsa _sr java-1_5_0-ibm-fonts _sr java-1_5_0-ibm _sr

31 About the Patch policy release New patches 31 Table 2-6 New Patches for SUSE (continued) java-1_6_0-ibm-32bit _sr java-1_6_0-ibm-alsa _sr java-1_6_0-ibm-devel _sr java-1_6_0-ibm-jdbc _sr java-1_6_0-ibm-plugi n-1.6.0_sr java-1_6_0-ibm _sr kernel-default-man kernel-ec2-devel kernel-pae-devel kernel-ppc64-devel kernel-syms kernel-trace kernel-xen libfreebl3-32bit libldb libsmbclient0-x libsmbclient libtalloc java-1_6_0-ibm-64bit _sr java-1_6_0-ibm-alsa _sr java-1_6_0-ibm-fonts _sr java-1_6_0-ibm-jdbc _sr java-1_6_0-ibm-plugi n-1.6.0_sr kernel-default-base kernel-default kernel-ec kernel-pae kernel-ppc kernel-trace-base kernel-xen-base ldapsmb-1.34b libfreebl3-x libsmbclient0-32bit libsmbclient0-x libtalloc1-32bit libtalloc2-32bit java-1_6_0-ibm-alsa- 32bit-1.6.0_sr java-1_6_0-ibm-devel -32bit-1.6.0_sr java-1_6_0-ibm-fonts _sr java-1_6_0-ibm-plugi n-32bit-1.6.0_sr java-1_6_0-ibm _sr kernel-default-devel kernel-ec2-base kernel-pae-base kernel-ppc64-base kernel-source kernel-trace-devel kernel-xen-devel ldapsmb-1.34b libfreebl libsmbclient0-32bit libsmbclient libtalloc1-x libtalloc2-x

32 32 About the Patch policy release New patches Table 2-6 New Patches for SUSE (continued) libtalloc libtdb1-x libtdb libwbclient0-32bit libwbclient mozilla-nss-tools MozillaFirefox-trans lations php5-bcmath php5-calendar php5-ctype php5-dbase php5-dba php5-dom php5-exif php5-ftp php5-gd php5-gmp php5-hash libtdb1-32bit libtdb1-x libtevent libwbclient0-x libwbclient mozilla-nss-x MozillaFirefox php5-bz php5-calendar php5-curl php5-dbase php5-debuginfo php5-dom php5-fastcgi php5-ftp php5-gettext php5-gmp php5-iconv libtdb1-32bit libtdb libwbclient0-32bit libwbclient0-x mozilla-nss-32bit mozilla-nss php5-bcmath php5-bz php5-ctype php5-curl php5-dba php5-devel php5-exif php5-fastcgi php5-gd php5-gettext php5-hash php5-iconv

33 About the Patch policy release New patches 33 Table 2-6 New Patches for SUSE (continued) php5-imap php5-ldap php5-mbstring php5-mhash php5-ncurses php5-openssl php5-pcntl php5-pear php5-pgsql php5-pspell php5-snmp php5-soap php5-suhosin php5-sysvmsg php5-sysvshm php5-tokenizer php5-xmlreader php5-xmlrpc php5-json php5-ldap php5-mcrypt php5-mysql php5-odbc php5-openssl php5-pdo php5-pear php5-posix php5-shmop php5-snmp php5-sockets php5-suhosin php5-sysvsem php5-sysvshm php5-wddx php5-xmlreader php5-xmlwriter php5-json php5-mbstring php5-mcrypt php5-mysql php5-odbc php5-pcntl php5-pdo php5-pgsql php5-pspell php5-shmop php5-soap php5-sqlite php5-sysvmsg php5-sysvsem php5-tokenizer php5-wddx php5-xmlrpc php5-xsl

34 34 About the Patch policy release New patches Table 2-6 New Patches for SUSE (continued) php5-xsl php5-zlib php53-calendar php53-dba php53-fastcgi php53-gd php53-iconv php53-ldap php53-mysql php53-pcntl php53-pgsql php53-snmp php53-sysvmsg php53-tokenizer php53-xmlrpc php53-zip php python-64bit python-devel python-gdbm python-x samba-32bit samba-client-32bit php5-zip php53-bcmath php53-ctype php53-dom php53-fileinfo php53-gettext php53-intl php53-mbstring php53-odbc php53-pdo php53-pspell php53-soap php53-sysvsem php53-wddx php53-xmlwriter php53-zlib php python-curses python-doc-pdf python-idle python-xml samba-32bit samba-client-x php5-zlib php53-bz php53-curl php53-exif php53-ftp php53-gmp php53-json php53-mcrypt php53-openssl php53-pear php53-shmop php53-suhosin php53-sysvshm php53-xmlreader php53-xsl php python-32bit python-demo python-doc python-tk python samba-client-32bit samba-client-x

35 About the Patch policy release Resolved issues 35 Table 2-6 New Patches for SUSE (continued) samba-client samba-doc samba-winbind-32bit samba-winbind-x samba-x samba wireshark samba-client samba-krb-printing samba-winbind-32bit samba-winbind samba-x wireshark-devel samba-doc samba-krb-printing samba-winbind-x samba-winbind samba wireshark Resolved issues The following issues are resolved: The AIX Patch template contains a list of patch entries that have been released for a given version of AIX OS. The patch module checks the existing patches that are installed on the computer with reference to the AIX patch template file and reports any missing patches. Older entries that are not relevant are still part of the templates. In patch release, the AIX patch template file is updated to include only the patch entries for the last two years including the entries for the current month. Patch entries older than two years are removed and entries for the expected minimum supported version are added to the template. The AIX template, patch.pai is now updated with the pre-condition field for the following APARs: IZ71774 IZ71667 IZ68597 IZ72094 IZ72095 IZ72096

36 36 About the Patch policy release Resolved issues IZ72097 IZ72090 IZ72091 IZ72092 IZ72093