Release Notes for McAfee(R) Security for Lotus Domino(TM) Version 7.5 with Patch 2 Hotfix 904321 Copyright (C) 2013 McAfee, Inc. All Rights Reserved ========================================================== Release date: August 29, 2013 This release was developed and tested with: DAT Version: 7175.0000 Engine Version: 5600.1067 ========================================================== Thank you for using our software. This file contains important information about this release. We recommend that you read the entire document. The attached files are provided as is, and with no warranty either expressed or implied as to their suitability for any particular use or purpose. McAfee, Inc. assumes no liability for damages incurred either directly or indirectly as a result of the use of these files, including but not limited to the loss or damage of data or systems, loss of business or revenue, or incidental damages arising from their use. Patch files should be applied only on the advice of McAfee Technical Support, and only when you are actually experiencing the issue being addressed by the Patch. Patch files should not be proactively applied in order to prevent potential product issues. You are responsible for reading and following all instructions for preparation, configuration and installation of Patch files. Patch files are not a substitute or replacement for product Service Packs which may be released by McAfee, Inc. It is a violation of your software license agreement to distribute or share these files with any other person or entity without written permission from McAfee, Inc. Further, posting of McAfee Patch files to publicly available Internet sites is prohibited. McAfee, Inc. reserves the right to refuse distribution of Patch files to any company or person guilty of unlawful distribution of McAfee software products. Questions or issues with McAfee Patch files should be directed to McAfee Technical Support. PURPOSE
This Hotfix includes files for use with McAfee(R)Security for Lotus Domino(TM) version 7.5 (Windows) with Patch 2. This new file resolves these issues. IMPORTANT - Standalone installation: If MSDW executable or dll files are locked, a dialog box will appear prompting you to reboot the computer to replace the Hotfix binaries. - Installation using epo: If MSDW executable or dll files are locked, the client computer will be restarted automatically without any warning. Resolved Issues: 1. Oracle Outside In 8.3.7.77 and earlier versions allow context-dependent attackers to affect the availability, via unknown vectors related to Outside In Filters. Reference ID: 904321 For more information on this issue, see: http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-3776 http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-3781 2. Engine Update process does not retain the extra dat information when update task is scheduled from epolicy Orchestrator. Reference ID: 903798 3. Setting number of threads for ODS task in extensions is not persistent. Reference ID: 902179 4. Scanning does not work after the DAT auto update. Reference ID: 897121 FILES INCLUDED WITH THIS RELEASE
This release consists of a package called MSDW75HF904321.ZIP, which contains the following files: - MSDW75HF904321.EXE = McAfee Security for Lotus Domino hotfix executable file. - MSDW75HF904321_for_ePO.ZIP = epolicy Orchestrator deployment package. - MSDWIN 7500_040A.ZIP = Product Extension file (Spanish). - MSDWIN 7500_040C.ZIP = Product Extension file (French). - MSDWIN 7500_0407.ZIP = Product Extension file (German). - MSDWIN 7500_0409.ZIP = Product Extension file (English). - MSDWIN 7500_0411.ZIP = Product Extension file (Japanese). - README.TXT = This text file. - VALIDATE.TXT = Validation codes for this hotfix. INSTALLATION INSTALLATION REQUIREMENTS To use this hotfix, you must have McAfee Security for Lotus Domino version 7.5 with Patch 2 software installed on the computer you intend to update. This hotfix will not work with any earlier versions of the software. STANDALONE INSTALLATION 1. Extract MSDW75HF904321.EXE from the hotfix package MSDW75HF904321.ZIP into the C:\Temp directory. 2. QUIT the Lotus Domino server. 3. Run MSDW75HF904321.EXE
The hotfix displays a wizard and generates a SUPERDAT.LOG file (located in the folder where the hotfix has been executed from), where it lists all the actions taken. 4. After the installation is complete, start the Lotus Domino Server. INSTALLATION THROUGH EPOLICY ORCHESTRATOR VERSION 4.6/5.0 1. QUIT the Lotus Domino server on the client computer. 2. Extract MSDW75HF904321_for_ePO.ZIP from the hotfix package MSDW75HF904321.ZIP into the C:\Temp directory of your epolicy Orchestrator computer. 3. Log on to epolicy Orchestrator and click Menu Software Master Repository. 4. Click Actions Check In Package, then add the hotfix package. 5. Create a new task to schedule an immediate update using epolicy Orchestrator "Product Update" option from the "New Client Task Assignment" tab. Select "McAfee Security for Lotus Domino (Windows) HF904321 7.5.0 " under "Patches and Service packs" and run the wake-up agent to deploy the hotfix. TESTING YOUR INSTALLATION You can check if the hotfix is applied correctly by verifying the version of the following file in 1. "<Install Path>\McAfee\Security for Lotus Domino\bin" directory: - CSEConfigurator.dll 4.1.2639.0 - DatabaseScannerX64.exe 7.5.1377.0 - DatabaseScanner.exe 7.5.1377.0 - EservicesScanner.dll 4.1.2639.0 - EvaluateIdentityX64.dll 7.5.1377.0 - EvaluateIdentity.dll 7.5.1377.0 - MailboxScannerX64.exe 7.5.1377.0 - MailboxScanner.exe 7.5.1377.0 - NoteCodecX64.dll 7.5.1377.0 - NoteCodec.dll 7.5.1377.0 - SAFeCSEConfigurator.dll 4.1.2639.0 - ScanTaskX64.dll 7.5.1377.0
- ScanTask.dll 7.5.1377.0 - UpdateCallback.dll 4.1.2639.0 2. "<Install Path>\McAfee\Security for Lotus Domino\bin\eServices\" directory: CSE version is 4.6.7966.0 You can also verify if the hotfix is applied correctly by clicking Dashboard Versions & Updates Product Information, from the user interface: - Hotfix HF904321 FINDING PRODUCT DOCUMENTATION McAfee provides the information you need during each phase of product implementation, from installation to daily use and troubleshooting. After a product is released, information about the product is entered into the McAfee online KnowledgeBase. 1. Go to the McAfee Technical Support ServicePortal at http://mysupport.mcafee.com. 2. Under Self Service, access the type of information you need: For user documentation: 1. Click "Product Documentation." 2. Select a "Product," then select a "Version." 3. Select a product document. For the KnowledgeBase: 1. Click "Search the KnowledgeBase" for answers to your product questions. 2. Click "Browse the KnowledgeBase" for articles listed by product and version. COPYRIGHT Copyright (C) 2013 McAfee, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of McAfee, Inc., or its suppliers or affiliate companies.
TRADEMARK ATTRIBUTIONS AVERT, EPO, EPOLICY ORCHESTRATOR, FOUNDSTONE, GROUPSHIELD, INTRUSHIELD, LINUXSHIELD, MAX (MCAFEE SECURITYALLIANCE EXCHANGE), MCAFEE, NETSHIELD, PORTALSHIELD, PREVENTSYS, SECURITYALLIANCE, SITEADVISOR, TOTAL PROTECTION, VIRUSSCAN, WEBSHIELD are registered trademarks or trademarks of McAfee, Inc. and/or its affiliates in the US and/or other countries. McAfee Red in connection with security is distinctive of McAfee brand products. All other registered and unregistered trademarks herein are the sole property of their respective owners. LICENSE INFORMATION LICENSE AGREEMENT NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANY YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND. DBN-001-EN V3.1.9