Symantec Enterprise Security Manager Patch Policy Release Notes

Transcription

1 Symantec Enterprise Security Manager Patch Policy Release Notes

2 Symantec Enterprise Security Manager Patch Policy Release Notes The software described in this book is furnished under a license agreement and may be used only in accordance with the terms of the agreement. Legal Notice Copyright 2008 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, LiveUpdate, Symantec Enterprise Security Architecture, Enterprise Security Manager, and NetRecon are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. The product described in this document is distributed under licenses restricting its use, copying, distribution, and decompilation/reverse engineering. No part of this document may be reproduced in any form by any means without prior written authorization of Symantec Corporation and its licensors, if any. THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE. The Licensed Software and Documentation are deemed to be commercial computer software as defined in FAR and subject to restricted rights as defined in FAR Section "Commercial Computer Software - Restricted Rights" and DFARS , "Rights in Commercial Computer Software or Commercial Computer Software Documentation", as applicable, and any successor regulations. Any use, modification, reproduction release, performance, display or disclosure of the Licensed Software and Documentation by the U.S. Government shall be solely in accordance with the terms of this Agreement.

3 Symantec Corporation Stevens Creek Blvd. Cupertino, CA

4 Technical Support Symantec Technical Support maintains support centers globally. Technical Support s primary role is to respond to specific queries about product features and functionality. The Technical Support group also creates content for our online Knowledge Base. The Technical Support group works collaboratively with the other functional areas within Symantec to answer your questions in a timely fashion. For example, the Technical Support group works with Product Engineering and Symantec Security Response to provide alerting services and virus definition updates. Symantec s maintenance offerings include the following: A range of support options that give you the flexibility to select the right amount of service for any size organization Telephone and Web-based support that provides rapid response and up-to-the-minute information Upgrade assurance that delivers automatic software upgrade protection Global support that is available 24 hours a day, 7 days a week Advanced features, including Account Management Services For information about Symantec s Maintenance Programs, you can visit our Web site at the following URL: Contacting Technical Support Customers with a current maintenance agreement may access Technical Support information at the following URL: Before contacting Technical Support, make sure you have satisfied the system requirements that are listed in your product documentation. Also, you should be at the computer on which the problem occurred, in case it is necessary to replicate the problem. When you contact Technical Support, please have the following information available: Product release level Hardware information Available memory, disk space, and NIC information Operating system

5 Version and patch level Network topology Licensing and registration Customer service Router, gateway, and IP address information Problem description: Error messages and log files Troubleshooting that was performed before contacting Symantec Recent software configuration changes and network changes If your Symantec product requires registration or a license key, access our technical support Web page at the following URL: Customer service information is available at the following URL: Customer Service is available to assist with the following types of issues: Questions regarding product licensing or serialization Product registration updates, such as address or name changes General product information (features, language availability, local dealers) Latest information about product updates and upgrades Information about upgrade assurance and maintenance contracts Information about the Symantec Buying Programs Advice about Symantec's technical support options Nontechnical presales questions Issues that are related to CD-ROMs or manuals

6 Maintenance agreement resources If you want to contact Symantec regarding an existing maintenance agreement, please contact the maintenance agreement administration team for your region as follows: Asia-Pacific and Japan Europe, Middle-East, and Africa North America and Latin America Additional enterprise services Symantec offers a comprehensive set of services that allow you to maximize your investment in Symantec products and to develop your knowledge, expertise, and global insight, which enable you to manage your business risks proactively. Enterprise services that are available include the following: Symantec Early Warning Solutions Managed Security Services Consulting Services Educational Services These solutions provide early warning of cyber attacks, comprehensive threat analysis, and countermeasures to prevent attacks before they occur. These services remove the burden of managing and monitoring security devices and events, ensuring rapid response to real threats. Symantec Consulting Services provide on-site technical expertise from Symantec and its trusted partners. Symantec Consulting Services offer a variety of prepackaged and customizable options that include assessment, design, implementation, monitoring, and management capabilities. Each is focused on establishing and maintaining the integrity and availability of your IT resources. Educational Services provide a full array of technical training, security education, security certification, and awareness communication programs. To access more information about Enterprise services, please visit our Web site at the following URL: Select your country or language from the site index.

7 Contents Technical Support... 4 Chapter 1 Introducing Patch Policy updates... 9 About the Patch Policy updates... 9 Getting Patch Policy updates through LiveUpdate... 9 Enhancements to the Patch module in Security Updates Chapter 2 About the Patch Policy release What is new Template updates New patches HP-UX Red Hat Linux AIX Solaris... 25

8 8 Contents

9 Chapter 1 Introducing Patch Policy updates This chapter includes the following topics: About the Patch Policy updates Getting Patch Policy updates through LiveUpdate Enhancements to the Patch module in Security Updates About the Patch Policy updates The Patch Policy updates are released once a month. These updates add, enhance, and update the Patch policy and the associated template files on the Symantec ESM manager. Symantec updates the patch templates with the Symantec ESM policy installer. Getting Patch Policy updates through LiveUpdate There are two content update packages for the Patch Policies for different versions of ESM. For 6.0 and 5.5 managers, select the Patch Policies - OS Patches for 5.5/6.0 LiveUpdate package in the Enterprise Security Manager Content Updates section. For 6.5 managers, select the Patch Policies - OS Comprehensive LiveUpdate package in the Enterprise Security Manager 6.5 and later Content Updates section. The Comprehensive package contains the checks that apply to the platforms that are supported only on ESM 6.5. The policy installer executable applies to all versions of ESM and is available at the following location:

10 10 Introducing Patch Policy updates Enhancements to the Patch module in Security Updates Note: If Java is installed on a Solaris 9 agent, install the JDK using the tar archive file containing packages, available from Sun. If you install the JDK using a selfextracting shell archive file, the module will not report vulnerability information for it because no specific packages are installed. Note: SU 26 now supports Solaris x86. If you do not have the current modules for SU 26, you will see duplicate messages for patches. To remove these duplicate messages, you must update your modules to SU 26 or newer. Enhancements to the Patch module in Security Updates Every Security Update includes updates to the Patch module. Upgrading to the latest Security Update provides you with the most accurate patch detection. Table 1-1 describes the enhancements to the Patch module in the latest Security Updates. Table 1-1 Security Update Support and enhancements in Security Updates Upgraded support and enhancements Security Update 20 Added support for Windows Server Bit Itanium-based systems Added support for SUSE Linux Enterprise Server 8 Security Update 21 Added support for HP-UX 11i v2 Added regular expression support for the file version field for Windows patches utilized in checking Windows Media Player patches Security Update 22 Added support for AIX maintenance releases and superseding patches. Added support for the following operating systems: IBM AIX 5.3 Red Hat Enterprise Linux AS 3.0 on Itanium, EM64T, and AMD64 Red Hat Enterprise Linux WS 3.0 on AMD64 SUSE Linux Enterprise Server 9 for x86

11 Introducing Patch Policy updates Enhancements to the Patch module in Security Updates 11 Table 1-1 Security Update Support and enhancements in Security Updates (continued) Upgraded support and enhancements Security Update 23 Added support for SUSE Linux Enterprise Server 9 on Itanium Added support for Red Hat Linux Workstation 3 for Xeon (EM64T) Added wildcard support for registry keys Added patch results summary support Added list installed patches support Added service state messages support Security Update 24 Added support for Red Hat Enterprise Linux 4 ES (x86) Added Veritas Backup Exec product support Added script transfer to agent support Added Solaris Role Based Access Control support Added Solaris 2.10 zone support Security Update 25 Added support for the following operating systems: Red Hat Enterprise Linux 4 AS on Opteron and Itanium Windows Server 2003 Enterprise 64-bit on Opteron and Xeon Added UNICODE support for AIX 433 Security Update 26 Added support for Solaris 10 on x86, x64 Added File System Entitlement module Security Update 27 Added support for the following systems: Red Hat Enterprise Linux 4 AS (Xeon) Windows Server 2003 R2 (x86, x64) Security Update 28 Security Update 30 Security Update 31 Security Update Security Update 32 Added support for SUSE Linux Enterprise Server version 10 Added support for Microsoft Windows Vista (x86, Opteron and EM64T) Editions Added support for Red Hat Enterprise Linux 5 (x86, Opteron, EM64T, and IA64-bit) Added support for Red Hat Enterprise Linux 5.x on IBM z-series (s390x) Added support for SUSE Linux Enterprise Server 9/10 (Opteron and EM64T) and ESX Server (x86, Opteron)

12 12 Introducing Patch Policy updates Enhancements to the Patch module in Security Updates Table 1-1 Security Update Support and enhancements in Security Updates (continued) Upgraded support and enhancements Security Update 34 Added support for the following operating systems: Microsoft Windows Server 2008 (x86) Microsoft Windows Server bit (EM64T, Opteron ) Microsoft Windows Server Bit Itanium HP-UX on PA-RISC Security Update 35 Added support for the following operating systems: HP-UX on Itanium HP-UX on PA-RISC IBM AIX 6.1 Added support to handle Service Pack Entry for Windows Server bit (Opteron and EM64T) and Windows Vista 64-bit (Opteron and EM64T) template file Added support to handle template size greater than 3MB for HP-UX For more information on the Resolved issues, visit and refer to the Patch Policy Release Notes.

13 Chapter 2 About the Patch Policy release This chapter includes the following topics: What is new Template updates New patches What is new This patch update for Symantec Enterprise Security Manager reports the operating system and application patches for UNIX operating systems. There are a total of 635 new patch signatures and 9 updated patch signatures in 5 templates. The following is a summary of the updates: patch.pai (IBM AIX - 89 new) patch.ph1 (HP-UX PA-RISC new) patch.ph2 (HP-UX for Itanium-based systems - 81 new) patch.plx (RedHat Linux and Enterprise Linux new, 8 updated) patch.ps6 (Sun Solaris 2.6 and later - 65 new, 1 updated) Note: The updated patches for SUSE Linux will be provided in the later Patch Policy releases.

14 14 About the Patch Policy release Template updates Template updates Table 2-1lists the information about the templates that have been updated or added for various applications and operating systems. Table 2-1 Templates information for Windows and UNIX operating systems Template version Template file exchg2k.ps5 exchg2k3.p6s exchg2k3.ps5 exchg2k7.p6s exchg2k7.p8s exchg2k7.ps8 exchg2k7.p64 exchg55.ps5 ie.p3i ie.p64 ie.p6s Application on operating system Microsoft Exchange Server 2000 on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Exchange Server 2003 on Microsoft Windows Server 2003 Microsoft Exchange Server 2003 on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Exchange Server 2007 on Microsoft Windows Server 2003 Microsoft Exchange Server 2003 on Microsoft Windows 2008 Microsoft Exchange Server 2007 on Microsoft Windows Server 2008 (Opteron and EM64T) Editions Microsoft Exchange Server 2007 on Microsoft Windows Server bit (Opteron and EM64T) Microsoft Exchange Server 5.5 on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Internet Explorer on Microsoft Windows Server 2003 for 64-Bit Itanium-based Systems Microsoft Internet Explorer on Microsoft Windows Server bit (Opteron and EM64T) Microsoft Internet Explorer on Microsoft Windows Server 2003

15 About the Patch Policy release Template updates 15 Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file ie.p8i ie.p8s ie.ps8 ie.ps5 ie.pw5 ie.pwx ie.pwv iis.p3i iis.p64 iis.p6s iis.ps5 ie.pxw iis.pw5 Application on operating system Microsoft Internet Explorer on Microsoft Windows Server 2008 for 64-bit Itanium-based Systems Microsoft Internet Explorer on Microsoft Windows Server 2008 Microsoft Internet Explorer on Microsoft Windows Server bit (Opteron and EM64T) Microsoft Internet Explorer on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Internet Explorer on Microsoft Windows 2000 Professional Microsoft Internet Explorer on Microsoft Windows XP Professional Microsoft Internet Explorer on Microsoft Windows Vista Microsoft Internet Information Services on Microsoft Windows Server 2003 for 64-Bit Itanium-based Systems Microsoft Internet Information Services on Microsoft Windows Server bit (Opteron and EM64T) Microsoft Internet Information Services on Microsoft Windows Server 2003 Microsoft Internet Information Services on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Internet Explorer on Microsoft Windows Vista 64-bit (Opteron and EM64T) Microsoft Internet Information Services on Microsoft Windows 2000 Professional

16 16 About the Patch Policy release Template updates Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file iis.pwv iis.pwx iis.pxw iis5.ps5 isa2k.p6s isa2k.ps5 mdac.p6s mdac.ps5 mdac.pw5 mdac.pwx outlook.p3i outlook.p64 outlook.p6s outlook.p8i Application on operating system Microsoft Internet Information Services on Microsoft Windows Vista Microsoft Internet Information Services on Microsoft Windows XP Professional Microsoft Internet Information Services on Microsoft Windows Vista 64-bit (Opteron and EM64T) Microsoft Internet Information Services on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Internet Security and Acceleration Server on Microsoft Windows Server 2003 Microsoft Internet Security and Acceleration Server on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Data Access Components on Microsoft Windows Server 2003 Microsoft Data Access Components on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Data Access Components on Microsoft Windows 2000 Professional Microsoft Data Access Components on Microsoft Windows XP Professional Microsoft Outlook on Microsoft Windows Server 2003 for 64-Bit Itanium-based Systems Microsoft Outlook on Microsoft Windows Server 2003 (Opteron and EM64T) Microsoft Outlook on Microsoft Windows Server 2003 Microsoft Windows Mail on Microsoft Windows 2008 for Itanium-based Systems

17 About the Patch Policy release Template updates 17 Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file outlook.p8s outlook.ps5 outlook.ps8 outlook.pw5 outlook.pwv outlook.pwx outlook.pxw patch.p3i patch.p64 patch.p6s patch.p8i patch.p8s patch.pai patch.ph1 patch.ph2 patch.plx patch.ps5 Application on operating system Microsoft Windows Mail on Microsoft Windows Server 2008 Microsoft Outlook on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Windows Mail on Microsoft Windows 2008 (Opteron and EM64T) Microsoft Outlook on Microsoft Windows 2000 Professional Microsoft Windows Mail on Microsoft Windows Vista Microsoft Outlook on Microsoft Windows XP Professional Microsoft Windows Mail on Microsoft Windows Vista for 64-Bit Microsoft Windows Server 2003 for 64-Bit Itanium-based Systems Microsoft Windows Server bit (Opteron and EM64T) Microsoft Windows Server 2003 Microsoft Windows Server 2008 for 64-bit Itanium-based Systems Microsoft Windows Server 2008 IBM AIX HP HP-UX PA-RISC HP HP-UX for Itanium-based systems Red Hat Linux and Enterprise Linux Microsoft Windows 2000 Server and Windows 2000 Advanced Server

18 18 About the Patch Policy release Template updates Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file patch.ps6 patch.ps8 patch.psl patch.pso patch.pw5 patch.pwx patch.pwv patch.pxw patch_adv2k.ps5 sharepoint.p6s sql.p3i sql.p64 sql.p6s sql.p8i sql.p8s sql.ps5 sql.ps8 Application on operating system Sun Solaris 2.6+ Microsoft Windows Server bit (Opteron and EM64T) SUSE Linux Sun Solaris Microsoft Windows 2000 Professional Microsoft Windows XP Professional Microsoft Windows Vista Enterprise 32-bit Microsoft Windows Vista Enterprise 64-bit (Opteron and EM64T) Microsoft Windows 2000 Advanced Server Microsoft SharePoint Services on Microsoft Windows Server 2003 Microsoft SQL Server on Microsoft Windows 2003 for Itanium-based systems Microsoft SQL Server on Microsoft Windows bit (Opteron and EM64T) Microsoft SQL Server on Microsoft Windows 2003 Microsoft SQL Server on Microsoft Windows 2008 for Itanium-based Systems Microsoft SQL Server on Microsoft Windows 2008 Microsoft SQL Server on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft SQL Server on Microsoft Windows bit (Opteron and EM64T)

19 About the Patch Policy release Template updates 19 Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file sql.pw5 sql.pwx sql.pxw sql.pwv visualstudio.p64 visualstudio.p6s visualstudio.p8i visualstudio.p8s visualstudio.ps5 visualstudio.ps8 visualstudio.pw5 visualstudio.pwv visualstudio.pwx visualstudio.pxw Application on operating system Microsoft SQL Server on Microsoft Windows 2000 Professional Microsoft SQL Server on Microsoft Windows XP Professional Microsoft SQL Server on Microsoft Windows Vista Microsoft SQL Server on Microsoft Windows XP Professional Microsoft Visual Studio on Microsoft Windows Server 2003 (Opteron and EM64T) Editions Microsoft Visual Studio on Microsoft Windows Server 2003 Microsoft Visual Studio on Microsoft Windows Server 2008 for Itanium-based Systems icrosoft Visual Studio on Microsoft Windows Server 2008 Microsoft Visual Studio on Microsoft Windows 2000 Professional Microsoft Visual Studio on Microsoft Windows Server 2008 (Opteron and EM64T) Editions Microsoft Visual Studio on Microsoft Windows Server 2000 Microsoft Visual Studio on Microsoft Windows Vista Microsoft Visual Studio on Microsoft Windows XP Professional Microsoft Visual Studio on Microsoft Windows Vista (Opteron and EM64T) Editions

20 20 About the Patch Policy release New patches Table 2-1 Templates information for Windows and UNIX operating systems (continued) Template version Template file wmplayer.p64 wmplayer.p6s wmplayer.ps5 wmplayer.ps8 wmplayer.pw5 wmplayer.pwx wmplayer.pwv wmplayer.pwx wmplayer.pxw Application on operating system Microsoft Windows Media Player on Microsoft Windows Server bit (Opteron and EM64T) Microsoft Windows Media Player on Microsoft Windows Server 2003 Microsoft Windows Media Player on Microsoft Windows 2000 Server and Windows 2000 Advanced Server Microsoft Windows Media Player on Microsoft Windows Server 2008 (Opteron and EM64T) Editions Microsoft Windows Media Player on Microsoft Windows 2000 Professional Microsoft Windows Media Player on Microsoft Windows XP Professional Microsoft Windows Media Player on Microsoft Windows Vista (32-bit) Microsoft Windows Media Player on Microsoft Windows XP Professional wmplayer.pxw Microsoft Windows Media Player on Microsoft Windows Vista (64-bit) New patches New patches have been added for HP-UX, Red Hat Linux, AIX, and Solaris operating systems. HP-UX Table 2-2 lists the news patches that have been added for HP-UX operating systems.

21 About the Patch Policy release New patches 21 Table 2-2 PHCO_23149 PHCO_38044 PHCO_38061 PHCO_38268 PHCO_38395 PHKL_34311 PHKL_38025 PHKL_38036 PHKL_38040 PHKL_38052 PHKL_38072 PHKL_38088 PHKL_38091 PHKL_38102 PHKL_38114 PHKL_38364 PHKL_38393 PHKL_38429 PHKL_38508 PHKL_38594 PHKL_38636 PHNE_37865 PHSS_34392 PHSS_37681 PHSS_37902 New patches for HP-UX PHCO_37286 PHCO_38048 PHCO_38145 PHCO_38307 PHCO_38534 PHKL_38023 PHKL_38034 PHKL_38038 PHKL_38041 PHKL_38055 PHKL_38080 PHKL_38089 PHKL_38094 PHKL_38103 PHKL_38186 PHKL_38369 PHKL_38398 PHKL_38430 PHKL_38539 PHKL_38598 PHNE_37257 PHNE_38153 PHSS_37423 PHSS_37871 PHSS_37955 PHCO_37940 PHCO_38050 PHCO_38185 PHCO_38394 PHCO_38601 PHKL_38024 PHKL_38035 PHKL_38039 PHKL_38043 PHKL_38057 PHKL_38083 PHKL_38090 PHKL_38099 PHKL_38104 PHKL_38301 PHKL_38370 PHKL_38414 PHKL_38453 PHKL_38593 PHKL_38599 PHNE_37445 PHNE_38458 PHSS_37424 PHSS_37901 PHSS_37957

22 22 About the Patch Policy release New patches Table 2-2 PHSS_37958 PHSS_37961 PHSS_38154 PHSS_38319 PHSS_38404 PHSS_38407 PHSS_38410 PHSS_38666 New patches for HP-UX (continued) PHSS_37959 PHSS_38134 PHSS_38316 PHSS_38402 PHSS_38405 PHSS_38408 PHSS_38411 PHSS_38667 PHSS_37960 PHSS_38135 PHSS_38318 PHSS_38403 PHSS_38406 PHSS_38409 PHSS_38462 Red Hat Linux Table 2-3 lists the new patches that have been added for Red Hat Linux. Table 2-3 New patches for Red hat Linux bzip2-devel el5_2 coreutils el4 hplip el5_2.4 ipsec-tools el5_2.3 kernel-devel el5 kernel-doc el kernel-kdump el5 kernel-smp-devel el kernel-xenu-devel EL bzip2-libs el5_2 dnsmasq el5_2.1 ipsec-tools rhel3.5 kernel-debug-devel el5 kernel-devel el kernel-headers el5 kernel-largesmp-deve l el kernel-smp el kernel-xenu el bzip el5_2 hpijs el5_2.4 ipsec-tools el4_7 kernel-debug el5 kernel-doc el5 kernel-kdump-devel el5 kernel-largesmp el kernel-xen-devel el5 kernel-xen el5

23 About the Patch Policy release New patches 23 Table 2-3 New patches for Red hat Linux (continued) kernel el5 libtiff-devel el3 libtiff el3 libxml2-devel libxml2-python libxml libxslt-devel el4_7.2 libxslt-python el5_2.2 mysql-bench el4 mysql el4 openssh-askpass-gnom e-3.9p1-11.el4_7 openssh-clients-3.9p 1-11.el4_7 openssh-server-4.3p2-26.el5_2.1 postfix-pflogsumm el4_7 postfix el4_7 rdesktop tomcat5-admin-webapp s jpp.7.el5_2.1 kernel el libtiff-devel el4_7.2 libtiff el4_7.2 libxml2-devel libxml2-python libxml libxslt-devel el5_2.2 libxslt el4_7.2 mysql-devel el4 nfs-utils z.el5_2 openssh-askpass-3.9p 1-11.el4_7 openssh-clients-4.3p 2-26.el5_2.1 openssh-3.9p1-11.el4_7 postfix-pflogsumm el5_2 postfix el5_2 rdesktop tomcat5-common-lib jpp.7.el5_2.1 libsane-hpaio el5_2.4 libtiff-devel el5_2.2 libtiff el5_2.2 libxml2-devel libxml2-python libxml libxslt-python el4_7.2 libxslt el5_2.2 mysql-server el4 nss_ldap el4 openssh-askpass-4.3p 2-26.el5_2.1 openssh-server-3.9p1-11.el4_7 openssh-4.3p2-26.el5_2.1 postfix rhel3 rdesktop thunderbird el4 tomcat5-jasper-javad oc jpp.7.el5_2.1 tomcat5-jasper jpp.7.el5_2.1 tomcat5-jsp-2.0-apijavadoc jpp.7.el5_2.1 tomcat5-jsp-2.0-api jpp.7.el5_2.1

24 24 About the Patch Policy release New patches Table 2-3 New patches for Red hat Linux (continued) tomcat5-server-lib jpp.7.el5_2.1 tomcat5-webapps jpp.7.el5_2.1 vsftpd el4 tomcat5-servlet-2.4- api-javadoc jpp.7.el5_2.1 tomcat jpp. 7.el5_2.1 yum-rhn-plugin el5_2.9 tomcat5-servlet-2.4- api jpp.7.el5_2.1 vsftpd e.16 AIX Table 2-4 lists the new patches that have been added for AIX. Table 2-4 IY95874 IY97257 IY99517 IZ02851 IZ03060 IZ05017 IZ05129 IZ05488 IZ05877 IZ06078 IZ06488 IZ10220 IZ10828 IZ10844 IZ11244 New patches for AIX IY96095 IY98331 IY99537 IZ03054 IZ03061 IZ05065 IZ05349 IZ05609 IZ05971 IZ06260 IZ06489 IZ10244 IZ10840 IZ11242 IZ11820 IY96101 IY98340 IZ00559 IZ03055 IZ04832 IZ05066 IZ05487 IZ05686 IZ06001 IZ06261 IZ06648 IZ10245 IZ10842 IZ11243 IZ12794

25 About the Patch Policy release New patches 25 Table 2-4 IZ13107 IZ13655 IZ15276 IZ15480 IZ15566 IZ16992 IZ18335 IZ19905 IZ20635 IZ21506 IZ22349 IZ26667 New patches for AIX (continued) IZ13652 IZ14460 IZ15277 IZ15564 IZ16975 IZ17059 IZ18670 IZ19911 IZ21481 IZ21529 IZ22356 IZ26670 IZ13654 IZ15057 IZ15479 IZ15565 IZ16991 IZ17891 IZ18955 IZ20613 IZ21494 IZ22348 IZ22370 IZ26672 Solaris Table 2-5 lists the new patches that have been added for Solaris. Table New patches for Solaris

26 26 About the Patch Policy release New patches Table New patches for Solaris (continued)