<<USE COURIER REGULAR 10 FONT IF YOU WOULD LIKE TO PRINT THIS DOCUMENT>>


  Trend Micro Incorporated                             February 26, 2016
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  Trend Micro(TM) InterScan(TM) Messaging Security Virtual Appliance 9.0
                       Critical Patch - Build 1565
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

     Contents
     ===================================================================

     1.  Overview of this Critical Patch Release

         1.1 Issues

         1.2 Files Included in this Release

     2.  Documentation Set

     3.  System Requirements

     4.  Installation

         4.1 Installing

         4.2 Uninstalling

     5.  Post-Installation Configuration

     6.  Known Issues

     7.  Release History

     8.  Contact Information

     9.  About Trend Micro

     10. License Agreements

     ===================================================================


  1. Overview of this Critical Patch Release
  ======================================================================
     This critical patch ensures that the tlsagent process can start
     successfully when all InterScan Messaging Security Virtual 
     Appliance (IMSVA) services restart and that IMSVA can detect the
     version information of the Advanced Threat Scan Engine (ATSE)
     correctly. Installing this critical patch also removes a certain
     vulnerability in the glibc module.


     1.1 Issues
     ===================================================================
     This critical patch resolves the following issues:

     Issue 1:    Under certain extreme conditions, the tlsagent process
                 may not be able to start successfully when users 
                 restart all IMSVA services. When this happens, IMSVA 
                 will not be able to receive email messages.
                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~             
     Solution 1: This critical patch ensures that the tlsagent process 
                 can start successfully when users restart all IMSVA 
                 services.

     Issue 2:    An issue causes IMSVA to treat ATSE 9.860 as an older
                 version of itself. As a result, both the       
                 "atse_afi_macro_detect" or "atse_password_guessing"
                 hidden key setting in the IMSVA file will not work 
                 properly.
                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~             
     Solution 2: This critical patch ensures that IMSVA can detect the 
                 ATSE version correctly.
 
     Issue 3:    The glibc module in IMSVA 9.0 is affected by a certain
                 vulnerability.
                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 3: This hotfix updates the glibc module in IMSVA 9.0
                 to remove the vulnerability.


     1.2 Files Included in this Release
     ===================================================================

     A. Files for Current Issues
     -------------------------------------------------------------------
        Filename                                       Build No.
     -------------------------------------------------------------------
        Files for Issue 1
     -------------------------------------------------------------------
        S99TLSAGENT                                    9.0.0.1565
        imssmgr                                        9.0.0.1565

        Files for Issue 2
     -------------------------------------------------------------------
        libFilterVirus.so                              9.0.0.1565

        Files for Issue 3
     -------------------------------------------------------------------
        glibc-2.12-1.166.el6_7.7.i686.rpm              9.0.0.1565
        glibc-2.12-1.166.el6_7.7.x86_64.rpm            9.0.0.1565
        glibc-common-2.12-1.166.el6_7.7.x86_64.rpm     9.0.0.1565

     B. Files for Previous Issues
     -------------------------------------------------------------------
        Not applicable.


  2. Documentation Set
  ======================================================================
     To download or view electronic versions of the documentation set 
     for this product, go to http://docs.trendmicro.com.

     In addition to this Readme file, the documentation set for this 
     product includes the following:

     - Online Help: The Online Help contains an overview of features
       and key concepts, and information on configuring and
       maintaining IMSVA.
     
       To access the Online Help, go to http://docs.trendmicro.com

     - Installation Guide (IG): The Installation Guide contains
       information on requirements and procedures for installing and
       deploying IMSVA. 
     
     - Administrator's Guide (AG): The Administrator's Guide contains
       an overview of features and key concepts, and information on
       configuring and maintaining IMSVA.

 
  3. System Requirements
  ======================================================================
     Trend Micro recommends installing IMSVA 9.0 Patch 1(1549) before
     installing this critical patch, otherwise, the installation will 
     fail.


  4. Installation
  ======================================================================
     Note: You must install this critical patch on all computers running
           IMSVA 9.0 unless you have applied any later hotfix.

     4.1 Installing
     ===================================================================
     To install:
 
     1. Upload the installation package (.tar.gz) to IMSVA using any 
        tool, for example, winscp.
 
     2. Connect to IMSVA through Secure Shell Interface (SSH) using any 
        tool, for example, putty, and log in using the root user 
        account. 

     3. Change to the folder where you uploaded the installation package 
        in step 1. 

     4. Extract the contents of the file using the following command:

        tar -zxvf imsva_90_en_criticalpatch1565.tar.gz

     5. Once the files have been extracted, run the following command
        to go to the installation directory.

        cd ./imsva_90_criticalpatch1565 
 
     6. Run the "./imssinst" command and follow the screen prompts to
        complete installation.

        The following message appears when the system completes the
        installation:

        "Installation is complete and related services are started."

     Note: For rollback purposes, the installation program moves the
           original IMSVA files to "/opt/trend/imss/patch/CP_B1565".

     4.2 Uninstalling
     ===================================================================
     To roll back to the previous build:

     1. Go to the folder where you extracted the critical patch files.

     2. Run the "./imssinst" command and follow the screen prompts to
        complete rollback.

        The following message appears when the system completes the
        rollback process:

        "Rollback is complete and related services are started."


  5. Post-installation Configuration
  ======================================================================
     No post-installation steps are required.

     Note: Trend Micro recommends that you update your scan engine and
           virus pattern files immediately after installing the product.


  6. Known Issues
  ======================================================================
     There are no known issues for this hotfix release.


  7. Release History
  ======================================================================
     For more information about updates to this product, go to:

     http://www.trendmicro.com/download


  8. Contact Information
  ======================================================================
     A license to Trend Micro software usually includes the right to
     product updates, pattern file updates, and basic technical support
     for one (1) year from the date of purchase only. After the first
     year, you must renew Maintenance on an annual basis at 
     Trend Micro's then-current Maintenance fees.

     Contact Trend Micro via fax, phone, and email, or visit our website
     to download evaluation copies of Trend Micro products.

     http://www.trendmicro.com/us/about-us/contact/index.html

     NOTE: This information is subject to change without notice.


  9. About Trend Micro
  ======================================================================
     Smart, simple, security that fits

     As a global leader in IT security, Trend Micro develops innovative
     security solutions that make the world safe for businesses and
     consumers to exchange digital information.

     Copyright 2016, Trend Micro Incorporated. All rights reserved.

     Trend Micro, InterScan, and the t-ball logo are trademarks of 
     Trend Micro Incorporated and are registered in some jurisdictions. 
     All other marks are the trademarks or registered trademarks of 
     their respective companies.


  10. License Agreements
  ======================================================================
     View information about your license agreement with Trend Micro at: 
    
     http://www.trendmicro.com/us/about-us/legal-policies/
       license-agreements

     Third-party licensing agreements can be viewed:
    
     - By selecting the "About" option in the application user interface

     - By referring to the "Legal" page of the Administrator's Guide
