<<USE COURIER REGULAR 10 FONT IF YOU WOULD LIKE TO PRINT THIS DOCUMENT>>


  Trend Micro, Inc.                                          May 6, 2014
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  Trend Micro(TM) InterScan(TM) Messaging Security Virtual Appliance 8.5
                       Critical Patch - Build 16030
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

     Contents
     ===================================================================
     1.  Overview of this Critical Patch Release
         1.1 Files Included in this Release
     2.  Documentation Set
     3.  System Requirements
     4.  Installation/Uninstallation
         4.1 Installation
         4.2 Uninstallation
     5.  Post-installation Configuration
     6.  Known Issues
     7.  Release History
     8.  Contact Information
     9.  About Trend Micro
     10. License Agreement
     ===================================================================


  1. Overview of this Critical Patch Release
  ======================================================================
     This critical patch resolves the following issue:

     Issue 1:    The InterScan Messaging Security Virtual Appliance 
                 (IMSVA) 8.5 Smart Scan feature uses an openssl version 
                 that is affected by a certain vulnerability. 
                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 1: This critical patch updates the Smart Scan package in 
                 IMSVA 8.5 to resolve the issue.

     Issue 2:    The IMSVA 8.5 web console is affected by a certain 
                 vulnerability. 
                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 2: This critical patch resolves this issue by enhancing a 
                 security filter feature to reject invalid requests.
               
     1.1 Files Included in this Release
     ===================================================================

     A. Files for Current Issue
     -------------------------------------------------------------------  
        Filename                                Build No. 
     -------------------------------------------------------------------
        Files for Issue 1                                                       
     --------------------------------------------------------------------
        libICRCHdler.so                         8.5.0.1603
        libICRCHdler.so.1                       8.5.0.1603
        
        Files for Issue 2                                                       
     --------------------------------------------------------------------
        SessionFilter.class                     8.5.0.1603 
        SessionFilter.xml                       8.5.0.1603
        
     B. Files for Previous Issues
     -------------------------------------------------------------------
        Not applicable.


  2. Documentation Set
  ======================================================================
     In addition to this readme.txt, the documentation set for this
     product includes the following:

     o Readme.txt-basic installation, known issues, release history,
       and contact information

     o Installation Guide (IG): Provides product overview, deployment
       plan, installation steps and basic information intended to help 
       you deploy IMSVA.

     o Administrator's Guide (AG): Provides post-installation
       instructions on how to configure the settings to help you get
       IMSVA "up and running". Also includes instructions on performing
       other administrative tasks for the day-to-day maintenance of
       IMSVA.

     o Electronic versions of the printed manuals are available at:

       http://docs.trendmicro.com

     o Online help: Help screens that provide instructions on performing
       administrative tasks for the day-to-day use of IMSVA.


  3. System Requirements
  ======================================================================
     Install IMSVA 8.5 Service Pack 1 before installing this 
     critical patch.


  4. Installation/Uninstallation
  ======================================================================
     Note: You must install this patch on all computers running 
           IMSVA 8.5 if you are using distributed deployment mode.

     4.1 Installation
     ===================================================================
     To install this critical patch:
   
     1. Extract the files for this critical patch to a local folder.

     2. Run the "cd ./imsva_85_criticalpatch1603" command.

     3. Run the "./imssinst" command and follow the screen prompts to
        complete the installation.

        The following message appears after the system completes the 
        installation:
      
        "Installation is complete and related services are started."
      
     Note: For rollback purposes, the installation program moves the
           original IMSVA files to "/opt/trend/imss/patch/CP_B1603".

     4.2 Uninstallation
     ===================================================================
     To roll back to the previous build:
   
     1. Go to the folder where you extracted the critical patch files.

     2. Run the "./imssinst" command and follow the screen prompts to 
        complete the rollback.

        The following message appears after the system completes the 
        rollback process:

        "Rollback is complete and related services are started."


  5. Post-installation Configuration
  ======================================================================
     No post-installation steps are required.

     Note: Trend Micro recommends that you update your scan engine and  
           virus pattern files immediately after installing this 
           critical patch.


  6. Known Issues
  ======================================================================
     There are no known issues for this critical patch release.


  7. Release History
  ======================================================================
     See the following web site for more information about updates
     to this product:

     http://downloadcenter.trendmicro.com


  8. Contact Information  
  ======================================================================
     A license to the Trend Micro software usually includes the right to 
     product updates, pattern file updates, and basic technical support 
     for one (1) year from the date of purchase only. After the first
     year, Maintenance must be renewed on an annual basis at 
     Trend Micro's then-current Maintenance fees.

     You can contact Trend Micro via fax, phone, and email, or visit us 
     at:
 
     http://www.trendmicro.com
 
     Evaluation copies of Trend Micro products can be downloaded from 
     our web site. 

     Global Mailing Address/Telephone numbers
     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     For global contact information in the Asia/Pacific region, 
     Australia and New Zealand, Europe, Latin America, and Canada, 
     refer to:
   
     http://www.trendmicro.com/en/about/overview.htm

     The Trend Micro "About Us" screen displays. Click the appropriate 
     link in the "Contact Us" section of the screen.

     Note: This information is subject to change without notice.


  9. About Trend Micro  
  ======================================================================
     Trend Micro Incorporated, a global leader in Internet content
     security and threat management, aims to create a world safe for the
     exchange of digital information for businesses and consumers.
     A pioneer in server-based antivirus with over 20 years experience,
     we deliver top-ranked security that fits our customers' needs, 
     stops new threats faster, and protects data in physical, 
     virtualized and cloud environments. Powered by the Trend Micro
     Smart Protection Network(TM) infrastructure, our industry-leading
     cloud-computing security technology and products stop threats where
     they emerge, on the Internet, and are supported by 1,000+
     threat intelligence experts around the globe. For additional
     information, visit www.trendmicro.com.

     Copyright 2014, Trend Micro Incorporated. All rights reserved.
     Trend Micro, the t-ball logo, Smart Protection Network, and
     InterScan are trademarks of Trend Micro Incorporated and are
     registered in some jurisdictions. All other marks are the
     trademarks or registered trademarks of their respective companies.


  10. License Agreement
  ======================================================================
     Information about your license agreement with Trend Micro can be
     viewed at:

     http://us.trendmicro.com/us/about/company/user_license_agreements/

     Third-party licensing agreements can be viewed:   
    
     - By selecting the "About" option in the application user 
       interface   
 
     - By referring to the "Legal" page of the Getting Started Guide or     
       Administrator's Guide    
