<<USE COURIER REGULAR 10 FONT IF YOU WOULD LIKE TO PRINT THIS DOCUMENT>>


  Trend Micro, Inc.                                     February 5, 2015
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  Trend Micro(TM) InterScan(TM) Messaging Security Virtual Appliance 8.5
                     Service Pack 1 Patch 1 - Build 1630
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   
  Note: This readme file was current as of the date above. However, all 
        customers are advised to check the Trend Micro web site for 
        documentation updates at:

        Patch/Service Pack release documentation: 

        http://www.trendmicro.com/download/  

        GM release documentation:

        http://docs.trendmicro.com/
        
        Register online with Trend Micro within 30 days of installation 
        to continue downloading new pattern files and product updates 
        from the Trend Micro web site. Register during installation or 
        online at:

        http://olr.trendmicro.com/


     Contents
     ===================================================================
     1.  About InterScan Messaging Security Virtual Appliance 
         1.1 Overview of this Release
         1.2 Who Should Install this Release
     2.  What's New
         2.1 Enhancements
         2.2 Resolved Known Issues
     3.  Documentation Set
     4.  System Requirements
     5.  Installation/Uninstallation
         5.1 Installation
         5.2 Uninstallation
     6.  Post-installation Configuration
     7.  Known Issues
     8.  Release History
     9.  Files Included in this Release
     10. Contact Information
     11. About Trend Micro
     12. License Agreement
     ===================================================================

  1. About InterScan Messaging Security Virtual Appliance 
  ======================================================================
     InterScan Messaging Security Virtual Appliance (IMSVA) integrates 
     multi-tiered spam prevention and anti-phishing with award-winning 
     antivirus and anti-spyware. Content-filtering enforces compliance 
     and prevents data leakage. This easy-to-deploy appliance is 
     delivered on a highly scalable platform with centralized
     management, providing easy administration. Optimized for high 
     performance and continuous security, the appliance provides 
     comprehensive gateway email security.

     1.1 Overview of this Release
     ===================================================================
     This Patch includes fixes to issues discovered after the
     release of IMSVA 8.5 Service Pack 1. It also enhances some 
     functions. Refer to Section 2, "What's New", for details.

     1.2 Who Should Install this Release
     =====================================================================
     Install this Patch if you currently run IMSVA 8.5 Service Pack 1.
     If you are running any earlier version of IMSVA, upgrade to IMSVA 8.5 
     Service Pack 1 first before installing this Patch. Refer to the 
     "Installation Guide" available at the Trend Micro Online Help Center 
     for upgrade recommendations and options.

     http://docs.trendmicro.com/


2. What's New
========================================================================
     Note: Install this Patch before completing any procedures in this
           section (see "Installation").

     This Patch includes the following enhancements and addresses 
     the following issues:

     2.1 Enhancements
     ===================================================================
     The following enhancements are included in this Patch:

     Enhancement 1: [Hot Fix 1622]  
                    Email Message Scanning - This hot fix enables 
                    IMSVA 8.5 to use Web Reputation Service (WRS) and 
                    Email Reputation Service (ERS) information to scan 
                    email messages which improves its ability to handle 
                    WRS new-born URLs.
                    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Procedure 1:   To disable this feature: 
           
                    a. Install this Patch (see "Installation").

                    b. Open the "imss.ini" file in the 
                       "/opt/trend/imss/config" folder using a text 
                       editor.
          
                    c. Add the following setting under the "general" 
                       section and set its value to "no".
               
                       [general]
                       use_new_born_for_spam  = no 
               
                       Note: The default value of this key is "yes" 
                             which enables the feature.
          
                    d. Save the changes and close the file.
          
                    e. Restart scanner service using the following 
                       command:
               
                       /opt/trend/imss/script/S99IMSS restart  
         
     Enhancement 2: [Hot Fix 1623]
                    IBE-encrypted Email Message Scanning - This hot fix 
                    enables IMSVA to scan IBE-encrypted messages as 
                    normal messages when it cannot decrypt these 
                    messages.
     
     Enhancement 3: [Hot Fix 1626]
                    Debug Files - This hot fix enables IMSVA to collect 
                    and add more CDT information in the  
                    "Administration > Export Debugging Files" page.
     
     Enhancement 4: [Hot Fix 1530]   
                    Activation codes - This hot fix enables IMSVA 8.5 to
                    allow users to use a specific type of activation code
                    to activate the following IMSVA components: 
     
                    - Cloud Pre-Filter
                    - Trend Micro Antivirus and Content Filter
                    - Spam Prevention Solution (SPS)
                    - IP Filtering Service 
                    - Regulatory Compliance
     
     2.2 Resolved Known Issues 
     ===================================================================
     This Patch resolves the following issues:
   
     Issue 1:     Under certain scenarios, the "postfix flush" command  
                  changes the queue ID of deferred Postfix email  
                  messages which resets the corresponding  
                  "maximal_queue_lifetime" values. When this happens,  
                  the deferred email messages remain in the queue. 
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 1:  [Hot Fix 1600] 
                  This hot fix ensures that the "postfix flush" command  
                  does not change the queue ID of email messages.
     
     Issue 2:     The IMSVA 8.5 Smart Scan feature uses an OpenSSL 
                  version that is affected by a certain vulnerability.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 2:  [Hot Fix 1604]
                  This hot fix updates the Smart Scan package in
                  IMSVA 8.5 to resolve the issue. 
     
     Issue 3:     Users could not log on to the End User Quarantine 
                  (EUQ) console because the configured timeout value 
                  of TCP connections does not take effect. 
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 3:  [Hot Fix 1604]
                  This hot fix ensures that IMSVA re-establishes the 
                  TCP connection after it times out. 
     
     Issue 4:     Some logs may be lost if, for some reason, the 
                  Message Tracing service stops working for several 
                  days and then starts.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 4:  [Hot Fix 1604]
                  This hot fix ensures that logs do not disappear 
                  under the scenario described above.
     
     Issue 5:     The IMSVA 8.5 web console is affected by a certain 
                  vulnerability.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 5:  [Hot Fix 1604]
                  This hot fix resolves this issue by enhancing a 
                  security filter feature to reject invalid requests.
     
     Issue 6:     Users may experience performance issues on the  
                  IMSVA 8.5 policy server when the spam filter's 
                  Approved or Blocked senders list contains a large 
                  number of  email addresses.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 6:  [Hot Fix 1604]
                  This hot fix improves the policy server's performance
                  to support large Approved and Blocked Sender Lists.
     
     Issue 7:     The DKIM Approved List screen of the IMSVA management 
                  console is affected by a certain vulnerability.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 7:  [Hot Fix 1606]
                  This hot fix removes the vulnerability.
     
     Issue 8:     If a user is using Kerberos authentication for Active 
                  Directory and has enabled the valid recipient check 
                  in Cloud Pre-Filter, temporary files are not removed 
                  from the "/tmp" folder.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 8:  [Hot Fix 1606]
                  This hot fix enables IMSVA 8.5 to automatically remove
                  temporary files.
     
     Issue 9:     If a user uses content filter to scan huge attachment
                  files, especially compressed files, dtSearch will 
                  extract the contents of the files in the "/tmp" 
                  folder. This folder is mounted to a partition that
                  has a limited size, so this folder may not have 
                  sufficient space for temporary files.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 9:  [Hot Fix 1606]
                  This hot fix moves the temporary folder to a new
                  location that has sufficient space to store temporary
                  files
     
     Issue 10:    The "AllowExtnameWhiteList" hidden key no longer works 
                  after users apply IMSVA 8.5 Service Pack 1.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 10: [Hot Fix 1606]
                  This hot fix resolves this issue.
     
     Issue 11:    IMSVA 8.5 may encounter performance issues after users 
                  enable IP Filtering and set the "Simultaneous  
                  connections" setting to "No limit".
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 11: [Hot Fix 1608]
                  This hot fix prevents the performance issues under 
                  this scenario.
     
     Issue 12:    When IMSVA 8.5 exports log query results to CSV files 
                  through the "Logs > Query > Log Query" page, it 
                  does not use double-quotes to enclose fields 
                  that contain double quotes or commas. This violates 
                  an RFC rule.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 12: [Hot Fix 1608]
                  This hot fix ensures that when IMSVA 8.5 exports log
                  query results to CSV files, it uses double quotes to 
                  enclose fields that contain double quotes or commas.
     
     Issue 13:    When users configure IMSVA 8.5 to send policy 
                  notifications to both senders and recipients, some  
                  senders and recipients may not receive the 
                  notifications.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 13: [Hot Fix 1622]
                  This hot fix ensures that IMSVA 8.5 sends policy 
                  notifications to all senders and recipients when 
                  it is configured to do so.
     
     Issue 14:    IMSVA 8.5 may not be able to parse some logs if the  
                  log folder contains a file with a file name that  
                  exceeds 64 bytes.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 14: [Hot Fix 1622]
                  This hot fix ensures that IMSVA 8.5 can successfully
                  parse logs under this scenario.
     
     Issue 15:    When users add subnets into the IP filtering approved 
                  or blocked list and then import a new configuration 
                  file, the imported file may still contain the old 
                  approved or blocked list.      
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 15: [Hot Fix 1622]
                  This hot fix ensures that imported configuration files 
                  contain correct and up-to-date information.
     
     Issue 16:    IMSVA 8.5 cannot sync data between its LDAP cache 
                  server and some Domino LDAP servers.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 16: [Hot Fix 1622]
                  This hot fix ensures that IMSVA 8.5 can successfully 
                  sync data between its LDAP cache server and Domino 
                  LDAP servers.
     
     Issue 17:    The IMSVA 8.5 policy server may not be able to query
                  a Domino LDAP server when the current LDAP user has
                  certain attributes.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 17: [Hot Fix 1622]
                  This hot fix ensures that the IMSVA 8.5 policy server 
                  can query the Domino LDAP server under this scenario.
     
     Issue 18:    The IMSVA 8.5 console still displays information about 
                  WRS category 62 but this category is no longer used.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 18: [Hot Fix 1622]
                  This hot fix removes all WRS category 62 information
                  from the IMSVA 8.5 console.
     
     Issue 19:    The IMSVA 8.5 Bash Module is affected by a certain 
                  vulnerability.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 19: [Hot Fix 1622]
                  This hot fix updates the Bash package in IMSVA 8.5 to 
                  resolve the issue.
     
     Issue 20:    A memory violation issue in a third-party module of 
                  IMSVA 8.5 may cause the Active Update module to stop  
                  unexpectedly.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 20: [Hot Fix 1622]
                  This hot fix updates this third-party module to solve 
                  this issue.
     
     Issue 21:    If the IMSVA 8.5 Email Encryption function or 
                  Regulatory Compliance function is activated by certain 
                  license types, users may not be able to re-activate 
                  these functions using another type of activation code.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 21: [Hot Fix 1612]
                  This hot fix resolves this issue.
     
     Issue 22:    It may take a long time for IMSVA 8.5 to generate 
                  reports when there is a large number of IP addresses  
                  in the IP Filtering list.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 22: [Hot Fix 1612]
                  This hot fix improves the report generation 
                  performance of IWSVA 8.5.
     
     Issue 23:    Cloud Pre-filter IP addresses cannot be synchronized 
                  with IMSVA 8.5
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 23: [Hot Fix 1612]
                  This hot fix ensures that Cloud Pre-filter IPs can be 
                  synchronized with IMSVA
     
     Issue 24:    Users cannot log onto the command line interface (CLI) 
                  using valid passwords that contain special characters.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 24: [Hot Fix 1612]
                  The hot fix solves the issue.
     
     Issue 25:    The description for trap ID 301 is missing from the  
                  IMSVA mib file.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 25: [Hot Fix 1612]
                  This hot fix adds the description for trap ID 301 to 
                  the IMSVA mib file.
     
     Issue 26:    Users cannot specify email addresses that contain an 
                  equal sign "=" when configuring policies from the  
                  Admin user interface.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 26: [Hot Fix 1612]
                  This hot fix resolves this issue.
     
     Issue 27:    The IMSVA scan exception action may not work while 
                  the Smart Scan feature is enabled.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 27: [Hot Fix 1612]
                  This hot fix ensures that the IMSVA scan exception 
                  action works normally when the Smart Scan feature is
                  enabled.
     
     Issue 28:    When users enable or disable IPv6 on the configuration 
                  wizard page, IMSVA 8.5 may not be able to update the  
                  configuration because it cannot find the "postconf" 
                  command and returns a 32512 error code. 
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 28: [Hot Fix 1623]
                  This hot fix enables IMSVA 8.5 to user the full path 
                  to the "postconf" command "/opt/trend/imss/postfix/
                  usr/sbin/postconf" to ensure that it can successfully 
                  locate it.
     
     Issue 29:    The Marketing Message List (MML) function may not work 
                  after users enable the "New Born" feature from 
                  Hot Fix 1622.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 29: [Hot Fix 1623]
                  This hot fix ensures that the MML function works well
                  with the "New Born" feature.
     
     Issue 30:    Previously, when EUQ authentication is through 
                  OpenLDAP, users need to use the full distinguished 
                  names to log on to the EUQ web management console. 
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 30: [Hot Fix 1623]
                  This hot fix enables end users to configure IMSVA to 
                  accept other  attributes for logging in. When 
                  configured, IMSVA  will search for the distinguished 
                  name that corresponds to the given attribute. If the 
                  search comes up with several distinguished names, 
                  IMSVA will use the first one on the list to logon 
                  to the  EUQ web management console.  
     
     Issue 31:    IP Profiler may not work when the value in the  
                  "nameserver" field is set to an IPV6 address.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 31: [Hot Fix 1626]
                  This hot fix resolves this issue
     
     Issue 32:    The EUQ console does not accept passwords that are 
                  longer than 32 characters.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 32: [Hot Fix 1626]
                  This hot fix enables the EUQ console to support 
                  passwords up to 64 characters long.
     
     Issue 33:    The timestamps on the "Log Query" page of admin 
                  console are an hour behind the actual time in certain 
                  time zones.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 33: [Hot Fix 1626]
                  This hot fix enables IMSVA 8.5 to retrieve the 
                  time zone information using the "time.strftime("%z")" 
                  function instead of the "time.timezone"
     
     Issue 34:    IMSVA 8.5 does not support the "Mexico: RFC - Registro 
                  Federal de Contribuyentes  (Tax ID Number)" template.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 34: [Hot Fix 1738]
                  This hot fix enables IMSVA to support the "Mexico: RFC 
                  - Registro Federal de Contribuyentes  (Tax ID Number)" 
                  template and adds the corresponding information in the 
                  Compliance Template Definition.
     
     Issue 35:    Tooltips do not appear if users access the EUQ login 
                  page in version 10 of  Microsoft(TM) 
                  Internet Explorer.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 35: [Hot Fix 1741]
                  This hot fix resolves a tooltip Javascript 
                  compatibility issue to ensure that tooltips appear 
                  on the EUQ login page.
     
     Issue 36:    Sometimes, the IBE server cannot restart during peak  
                  periods.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 36: [Hot Fix 1741]
                  This hot fix resolves this issue
     
     Issue 37:    Users cannot release quarantined suspicious email 
                  messages through the EUQ console.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 37: [Hot Fix 1747]
                  This hot fix prevents IMSVA 8.5 from syncing 
                  suspicious email messages to the EUQ database. 
                  This ensures that users can view and release  
                  quarantined email messages through the EUQ console.
     
     Issue 38:    The EUQ link in digest messages is in HTTPS even when  
                  HTTPS is disabled.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 38: [Hot Fix 1760]
                  This hot fix resolves this issue.
     
     Issue 39:    IMSVA 8.5 continues to send notifications that it  
                  cannot connect to the database even after it 
                  has successfully reconnected with the database.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 39: [Hot Fix 1762]
                  This hot fix ensures that IMSVA 8.5 sends the 
                  notification only when it cannot connect to the 
                  database.
     
     Issue 40:    IMSVA 8.5 truncates malware names that are longer
                  than 16 characters in the corresponding logs and 
                  notification messages.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 40: [Hot Fix 1597]
                  This hot fix ensures that IMSVA 8.5 records the real 
                  malware name in logs and notification messages.
     
     Issue 41:    eManager(TM) no longer extracts the contents of the 
                  structured attachment file and filters keywords in 
                  the attachment's binary data only.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 41: [Hot Fix 1727]
                  This hot fix resolves the issue by ensuring that 
                  IMSVA 8.5 passes the correct mail entity types to 
                  eManager
     
     Issue 42:    Sometimes, users may click a spam rule's editing 
                  button on the "Policy List" page of the Admin UI 
                  repeatedly  which may cause the approved sender list 
                  or blocked sender list of the rule to grow and exceed 
                  the 640 KB size limit. When this happens, the database 
                  and policy service may not work properly.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 42: [Hot Fix 1727]
                  This hot fix resolves the issue.
     
     Issue 43:    When the MML feature is enabled, the imssd process may 
                  insert the wrong ERS header to reprocessed quarantined 
                  email messages.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 43: [Hot Fix 1732]
                  This hot fix ensures that the correct ERS header is 
                  inserted into reprocessed quarantined email messages.
     
     Issue 44:    IMSVA 8.5 for Windows NT may delete a particular 
                  S/MIME message  header by mistake.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 44: [Hot Fix 1312]
                  This hot fix ensures that IMSVA 8.5 for Windows NT 
                  does not delete the header by mistake.
     
     Issue 45:    After users apply a newborn hot fix, IMSVA 8.5 may not
                  be able to scan IBE-encrypted email messages. 
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 45: [Hot Fix 1513]
                  This hot fix ensures that IMSVA 8.5 can scan 
                  IBE-encrypted email messages.
     
     Issue 46:    The glibc module in IMSVA 8.5 is affected by a certain 
                  vulnerability. 
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 46: [Critical Patch 1629]
                  This critical patch updates the glibc module in 
                  IMSVA 8.5 to remove the vulnerability.
     

  3. Documentation Set
  ======================================================================
     The documentation set for this product includes:

     o Readme.txt - Basic installation, known issues, release history,
       and contact information

     o Installation Guide (IG): Provides product overview, deployment
       plan, installation steps and basic information intended to help
       you deploy IMSVA.

     o Administrator's Guide (AG): Provides post-installation
       instructions on how to configure the settings to help you get
       IMSVA "up and running". Also includes instructions on performing
       other administrative tasks for the day-to-day maintenance of
       IMSVA.

     o Electronic versions of the printed manuals are available at:

       http://docs.trendmicro.com

     o Online help: Help screens that provide instructions on
       performing administrative tasks for the day-to-day use of IMSVA.


  4. System Requirements
  ======================================================================
     Install IMSVA 8.5 Service Pack 1 before installing this Patch. You 
     can download this package from:

     http://downloadcenter.trendmicro.com/


  5. Installation/Uninstallation
  ======================================================================

     5.1 Installation
     ===================================================================
     To install this hot fix:

     1. Log on to the IMSVA management console.

     2. Go to "Administration > Updates > System & Applications".

     3. Select and upload the hot fix package.

     4. After a few minutes, check the latest uploaded package
        information to make sure the management console has successfully
        uploaded the hot fix package to IMSVA.

     5. If you have set up a group of IMSVA devices, select all child
        devices in the "Current status" section. Otherwise, select the
        parent device.

     6. Click "Update".

     7. If a group has been set up, wait for all child devices to finish
        updating before selecting the parent device in the "Current
        status" section. Otherwise, go to step 9.

     8. Click "Update".

     9. Wait for a few minutes, and then log on to the IMSVA management
        console.

     10. Go to "Administration > Updates > System & Applications".

     11. Verify that the "OS version"/"Application version" values for
         all items in the "Current status" section match the hot fix
         version.

     5.2 Uninstallation
     ===================================================================
     To roll back to the previous build:

     1. Log on to the IMSVA management console.

     2. Go to "Administration > Updates > System & Applications".

     3. Under "Host Name", click the name of the device you want to
        view.

        A summary screen appears showing the updates and related
        log information.

     4. To remove an update, click "Rollback".


  6. Post-installation Configuration
  ======================================================================
     No post-installation steps are required.   

     Note: Trend Micro recommends that you update your scan engine and  
           virus pattern files immediately after installing the product.
 

  7. Known Issues
  ======================================================================
     There are no known issues for this hot fix release.


  8. Release History
  ======================================================================
     - IMSVA 8.5, July 19, 2013
     - IMSVA 8.5 Service Pack 1, April 8 2014

     See the following web site for more information about updates to 
     this product:
   
     http://docs.trendmicro.com


  9. Files Included in this Release  
  ======================================================================
 
     Filename                                       Build No.
     -------------------------------------------------------------------
     insert.sql                                     8.5.0.1630
     postfix                                        8.5.0.1630
     imp_exp                                        8.5.0.1630
     ldaprep-0.1-py2.6.egg                          8.5.0.1630
     ldaprep-0.1-py2.6.egg-info                     8.5.0.1630
     libICRCHdler.so                                8.5.0.1630
     libICRCHdler.so.1                              8.5.0.1630
     libImssCommon.so                               8.5.0.1630
     apply_db.sh                                    8.5.0.1630
     libFoxParser.so                                8.5.0.1630
     euqutil                                        8.5.0.1630
     MsgTracing-0.2-py2.6.egg                       8.5.0.1630
     MsgTracing-0.2-py2.6.egg-info                  8.5.0.1630
     SessionFilter.class[adminUI]                   8.5.0.1630
     SessionFilter.xml[adminUI]                     8.5.0.1630
     SessionFilter.class[EUQUI]                     8.5.0.1630
     SessionFilter.xml[EUQUI]                       8.5.0.1630
     imssps                                         8.5.0.1630
     libFilterSpsTmase.so                           8.5.0.1630
     DKIMWhiteListSettingAction.class               8.5.0.1630
     S99IMSS                                        8.5.0.1630
     libem_helpr.so                                 8.5.0.1630
     libdtsearch.so                                 8.5.0.1630
     libFilterEmgrPlugin.so                         8.5.0.1630
     TmFoxProxy                                     8.5.0.1630
     LogRecBase.class                               8.5.0.1630
     MsgLogrec$1.class                              8.5.0.1630
     MsgLogrec.class                                8.5.0.1630
     MtaLogRec.class                                8.5.0.1630
     PolicyLogrec.class                             8.5.0.1630
     SysLogrec.class                                8.5.0.1630
     IpLogRec.class                                 8.5.0.1630
     imssd                                          8.5.0.1630
     imssmgr                                        8.5.0.1630
     libi18n.so                                     8.5.0.1630
     libi18n.so.1                                   8.5.0.1630
     liblogmgt.so                                   8.5.0.1630
     liblogmgt.so.1                                 8.5.0.1630
     liblogshr.so                                   8.5.0.1630
     liblogshr.so.1                                 8.5.0.1630
     liblowlib.so                                   8.5.0.1630
     liblowlib.so.1                                 8.5.0.1630
     libImssDAO.so                                  8.5.0.1630
     imsa8WrsCategory_en.properties                 8.5.0.1630
     imsa8WrsCategory.properties                    8.5.0.1630
     bash-3.2-33.el5_10.4.x86_64.rpm                8.5.0.1630
     libtmactupdate.so                              8.5.0.1630
     libpatch.so                                    8.5.0.1630
     AuPatch                                        8.5.0.1630
     libtmpr.so                                     8.5.0.1630
     check_outboundIP.sh                            8.5.0.1630
     sync_outbound_ip.sh                            8.5.0.1630
     sync_rcpt.sh                                   8.5.0.1630
     imssausched                                    8.5.0.1630
     pam_imsa70.so                                  8.5.0.1630
     utility_login_check                            8.5.0.1630
     IMSVA8.mib                                     8.5.0.1630
     validation.jsp                                 8.5.0.1630
     libImssRule.so                                 8.5.0.1630
     libFilterVirus.so                              8.5.0.1630
     libIMSSjni.so                                  8.5.0.1630
     libFilterWrs.so                                8.5.0.1630
     libEUQjni.so                                   8.5.0.1630
     login.jsp                                      8.5.0.1630
     imsa8DlpTemplate_en.properties                 8.5.0.1630
     imsa8DlpTemplate.properties                    8.5.0.1630
     imsa8DlpTemplateSource_en.properties           8.5.0.1630
     imsa8DlpTemplateSource.properties              8.5.0.1630
     en/tooltip.js                                  8.5.0.1630
     tooltip.js                                     8.5.0.1630
     script/ibe_server.sh                           8.5.0.1630
     policy_home.jsp                                8.5.0.1630
     libtmmsg.so                                    8.5.0.1630
     libFilterAction.so                             8.5.0.1630
     libFilterAntiSpoof.so                          8.5.0.1630
     libFilterDkimEF.so                             8.5.0.1630
     libImssEncrypt.so                              8.5.0.1630
     libImssPolicy.so                               8.5.0.1630
     libPolicyCaller.so                             8.5.0.1630
     libPolicyUtility.so                            8.5.0.1630
     wrsagent                                       8.5.0.1630
     cdt                                            8.5.0.1630
     cdt.ini                                        8.5.0.1630
     libcdtcommon.so                                8.5.0.1630
     libcdtcore.so                                  8.5.0.1630
     ExInterface_IMSVA.ini                          8.5.0.1630
     ExInterface_IMSVA.so                           8.5.0.1630
     glibc-2.5-123.el5_11.1.i686.rpm                8.5.0.1630
     glibc-2.5-123.el5_11.1.x86_64.rpm              8.5.0.1630
     glibc-common-2.5-123.el5_11.1.x86_64.rpm       8.5.0.1630
     nscd-2.5-123.el5_11.1.x86_64.rpm               8.5.0.1630

     Tomcat                                         6.0.43
     Apache                                         2.2.29
     mod_jk                                         1.2.40
     openssl                                        0.9.8.ze


  10. Contact Information
  ======================================================================
     A license to the Trend Micro software usually includes the right to
     product updates, pattern file updates, and basic technical support
     for one (1) year from the date of purchase only. After the first
     year, Maintenance must be renewed on an annual basis at
     Trend Micro's then-current Maintenance fees.

     You can contact Trend Micro via fax, phone, and email, or visit us
     at:

     http://www.trendmicro.com

     Evaluation copies of Trend Micro products can be downloaded from
     our web site.

     Global Mailing Address/Telephone numbers
     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     For global contact information in the Asia/Pacific region,
     Australia and New Zealand, Europe, Latin America, and Canada,
     refer to:

     http://www.trendmicro.com/en/about/overview.htm

     The Trend Micro "About Us" screen displays. Click the appropriate
     link in the "Contact Us" section of the screen.

     Note: This information is subject to change without notice.


  11. About Trend Micro
  ====================================================================
     Trend Micro Incorporated, a global leader in Internet content 
     security and threat management, aims to create a world safe for  
     the exchange of digital information for businesses and consumers. 
     A pioneer in server-based antivirus with over 20 years 
     experience, we deliver top-ranked security that fits our 
     customers’ needs, stops new threats faster, and protects data in 
     physical, virtualized, and cloud environments. Powered by the 
     Trend Micro Smart Protection Network(TM) infrastructure, our 
     industry-leading cloud-computing security technology and products 
     stop threats where they emerge, on the Internet, and are supported 
     by 1,000+ threat intelligence experts around the globe. For 
     additional information, visit www.trendmicro.com.

     Copyright 2015, Trend Micro Incorporated. All rights reserved.
     Trend Micro, the t-ball logo, Smart Protection Network, 
     InterScan, eManager, and Data Loss Prevention are trademarks of 
     Trend Micro Incorporated and are registered in some 
     jurisdictions. All other marks are the trademarks or registered 
     trademarks of their respective companies.


  12. License Agreement
  ======================================================================
     Information about your license agreement with Trend Micro can be
     viewed at:

     http://us.trendmicro.com/us/about/company/user_license_agreements/

     Third-party licensing agreements can be viewed:

     - By selecting the "About" option in the application user
       interface

     - By referring to the "Legal" page of the Getting Started Guide or
       Administrator's Guide       
