<> Trend Micro Incorporated August 6th, 2020 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) ScanMail for IBM Domino 5.8 - GM English - Linux - 64 Bits Critical Patch - Build 1070 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Contents ========================================================== 1. Overview of This Critical Patch Release 1.1 Issues 1.2 Files Included in This Release 2. Documentation Set 3. System Requirements 4. Installation 4.1 Installing 4.2 Uninstalling 5. Post-installation Configuration 6. Known Issues 7. Release History 8. Contact Information 9. About Trend Micro 10. License Agreement ========================================================== 1. Overview of This Critical Patch Release ======================================================================== 1.1 Issues ===================================================================== This critical patch resolves the following issue: Issue 1: A directory traversal vulnerability occurs when ScanMail downloads engine files or pattern files from the local ActiveUpdate (AU) server. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 1: This critical patch updates the Trend Micro ActiveUpdate modules to resolve this issue. 1.2 Files Included in This Release ===================================================================== A. Files for Current Issue --------------------------------------------------------------------- Files for Issue 1 ------------------------------------------------------------------ Filename Build No. ------------------------------------------------------------------ libsmdreal.so 5.8.0.1070 libsmddbs.so 5.8.0.1070 libsmdcm.so 5.8.0.1070 libsmdeuq.so 5.8.0.1070 libsmdsch.so 5.8.0.1070 libsmddtas.so 5.8.0.1070 libdbsetup.so 5.8.0.1070 libupdsmd.so 5.8.0.1070 libsmdupd.so 5.8.0.1070 smconf.ntf 5.8.0.1070 smquar.ntf 5.8.0.1070 smvlog.ntf 5.8.0.1070 smency.ntf 5.8.0.1070 smddtas.ntf 5.8.0.1070 smtime.ntf 5.8.0.1070 smdapproved.ntf 5.8.0.1070 smlists.nsf 5.8.0.1070 smhelp.nsf 5.8.0.1070 smmsg.nsf 5.8.0.1070 smftypes.nsf 5.8.0.1070 AU module Files ------------------------------------------------------------------ AuPatch 2.86.4002 cert5.db 2.86.4002 libciuas64.so 2.86.4002 libpatch.so 2.86.4002 libtmactupdate.so 2.86.4002 x500.db 2.86.4002 B. Files for Previous Issues --------------------------------------------------------------------- Not applicable. 2. Documentation Set ======================================================================== To download or view electronic versions of the documentation set for this product, go to http://docs.trendmicro.com In addition to this Readme file, the documentation set for this product includes the following: - Online Help: The Online Help contains an overview of features and key concepts, and information on configuring and maintaining ScanMail for IBM Domino. To access the Online Help, go to http://docs.trendmicro.com - Administrator's Guide (AG): The Administrator's Guide contains an overview of features and key concepts, and information on configuring and maintaining ScanMail for IBM Domino. - Support Portal: The Support Portal contains information on troubleshooting and resolving known issues. To access the Support Portal, go to https://success.trendmicro.com 3. System Requirements ======================================================================== Trend Micro ScanMail for IBM Domino 5.8 GM Build 1024 - English - Linux - x64 4. Installation ======================================================================== This section explains key steps for installing the critical patch. 4.1 Installing ===================================================================== To install: 1. Copy the "smid_58_lx64_en_criticalpatch1070.tar.gz" installation file to a local folder. 2. Extract the contents of the installation file to a local folder by running the following command: tar -zvxf smid_58_lx64_en_criticalpatch1070.tar.gz 3. Go to the "smid_58_lx64_en_criticalpatch1070" folder. 4. Run the following command: ./UPDSilent 4.2 Uninstalling ===================================================================== To roll back to the previous build: 1. Go to the "$SMLD_Binary_Folder/hotfix" directory. 2. Run the following command ./UPDSilent /u B1070 5. Post-Installation Configuration ======================================================================== No post-installation steps are required. NOTE: Trend Micro recommends that you update your scan engine and virus pattern files immediately after installing the product. 6. Known Issues ======================================================================== There are no known issues for this release. 7. Release History ======================================================================== For more information about updates to this product, go to: http://www.trendmicro.com/download 8. Contact Information ======================================================================== A license to Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, you must renew Maintenance on an annual basis at Trend Micro's then-current Maintenance fees. Contact Trend Micro via fax, phone, and email, or visit our website to download evaluation copies of Trend Micro products. https://www.trendmicro.com/en_us/contact.html NOTE: This information is subject to change without notice. 9. About Trend Micro ======================================================================== Smart, simple, security that fits As a global leader in IT security, Trend Micro develops innovative security solutions that make the world safe for businesses and consumers to exchange digital information. Copyright 2020, Trend Micro Incorporated. All rights reserved. Trend Micro, ScanMail, and the t-ball logo are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 10. License Agreement ======================================================================== View information about your license agreement with Trend Micro at: https://www.trendmicro.com/en_us/about/legal.html Third-party licensing agreements can be viewed: - By selecting the "About" option in the application user interface - By referring to the "Legal" page of the Administrator's Guide