<> Trend Micro Incorporated February 7, 2017 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) OfficeScan(TM) XG Critical Patch - Server Build 1315 and Agent Module Build 1206 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Contents ========================================================== 1. Overview of This Critical Patch Release 1.1 Issues 1.2 Files Included in This Release 2. Documentation Set 3. System Requirements 4. Installation 4.1 Installing 4.2 Uninstalling 5. Post-installation Configuration 6. Known Issues 7. Release History 8. Contact Information 9. About Trend Micro 10. License Agreement ========================================================== 1. Overview of This Critical Patch Release ====================================================================== Installing this critical patch updates the OpenSSL module in the OfficeScan server program and Smart Scan common module to resolve several vulnerabilities. 1.1 Issues =================================================================== This critical patch resolves the following issue: Issue 1: In OfficeScan XG, users may observe that "OfcService.exe" crashes and OfficeScan agents keep updating in some situations. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 1: This critical patch replaces the OfficeScan server files to resolve the issue. Issue 2: The OfficeScan XG server program and the OfficeScan agent Smart Scan common module uses an OpenSSL version that is affected by certain vulnerabilities. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 2: This critical patch resolves this issue by updating the OpenSSL component of the server module and Smart Scan common module. 1.2 Files Included in this Release =================================================================== Installation Path and Filename Build Number ------------------------------ ------------ OfficeScan\PCCSRV\Admin\ ------------------------------------------------------------------- SvrSvcSetup.exe.dll 12.0.0.1315 OfficeScan\PCCSRV\Admin\Utility\SQL\*.* OfficeScan\PCCSRV\Admin\Utility\SQL\ ------------------------------------------------------------------- libSQLDatabaseUpgrade.dll 12.0.0.1315 OfficeScan\PCCSRV\Admin\Utility\PolicyExportTool\ ------------------------------------------------------------------- CGIResUTF8.dll 12.0.0.1315 OfficeScan\PCCSRV\CmAgent\ ------------------------------------------------------------------- CGIResUTF8.dll 12.0.0.1315 OfficeScan\PCCSRV\Engine\ ------------------------------------------------------------------- tmxfalcon.dll 1.0.0.1086 OfficeScan\PCCSRV\Engine\x64\ ------------------------------------------------------------------- tmxfalcon.dll 1.0.0.1086 OfficeScan\PCCSRV\Pccnt\ ------------------------------------------------------------------- Ntrtscan.exe 13.0.0.1206 OfficeScan\PCCSRV\Pccnt\Common\ ------------------------------------------------------------------- CCSF_WIN32.zip fcWofieUI.dll 13.0.0.1206 ICRCHdler.dll 2.82.0.1025 libcurl.dll 7.49.1.0 libeay32.dll 1.0.2.10 NTRmv.exe 13.0.0.1206 OfcCCCAUpdate.exe 13.0.0.1206 OfcPIPC.dll 13.0.0.1206 PccNTMon.exe 13.0.0.1206 perfiCrcPerfMonMgr.dll 13.0.0.1206 ssleay32.dll 1.0.2.10 TmListen.exe 13.0.0.1206 TmSock.dll 13.0.0.1206 Upgrade.exe 13.0.0.1206 OfficeScan\PCCSRV\Pccnt\Win64\X64\ ------------------------------------------------------------------- CCSF_X64.zip fcWofieUI.dll 13.0.0.1206 ICRCHdler.dll 2.82.0.1025 libcurl.dll 7.49.1.0 libeay32.dll 1.0.2.10 NTRmv.exe 13.0.0.1206 Ntrtscan.exe 13.0.0.1206 OfcCCCAUpdate.exe 13.0.0.1206 OfcPIPC_64x.dll 13.0.0.1206 PccNTMon.exe 13.0.0.1206 perfiCrcPerfMonMgr.dll 13.0.0.1206 ssleay32.dll 1.0.2.10 TmListen.exe 13.0.0.1206 TmSock_64x.dll 13.0.0.1206 Upgrade.exe 13.0.0.1206 OfficeScan\PCCSRV\Download\Engine\ ------------------------------------------------------------------- falcon32.zip falcon32.sig falcon64.zip falcon64.sig OfficeScan\PCCSRV\Download\Product\ ------------------------------------------------------------------- DLPLite_Common.zip DLPLite_Common_x64.zip OfficeScan\PCCSRV\Web\Service\ ------------------------------------------------------------------- CGIResUTF8.dll 12.0.0.1315 CmdHLClient.dll 12.0.0.1315 CmdHOConsole.dll 12.0.0.1315 DbServer.exe 12.0.0.1315 libCmdHndlrClientV2.dll 12.0.0.1315 libCmdHndlrConsoleV2.dll 12.0.0.1315 OfcDownload.dll 12.0.0.1315 OfcNotifyQueue.dll 12.0.0.1315 OfcService.exe 12.0.0.1315 OfficeScan\PCCSRV\Web_OSCE\Web\CGI\ ------------------------------------------------------------------- CGIResUTF8.dll 12.0.0.1315 cgiExportInfo.exe 12.0.0.1315 cgiOnQueryClientBindPort.exe 12.0.0.1315 out_of_management_scope.htm OfficeScan\PCCSRV\Web_OSCE\Web_console\CGI\ ------------------------------------------------------------------- CGIResUTF8.dll 12.0.0.1315 OfficeScan\PCCSRV\Web_OSCE\Web_console\RemoteInstallCGI\ ------------------------------------------------------------------- CGIResUTF8.dll 12.0.0.1315 B. Files for Previous Issues ------------------------------------------------------------------- Not applicable. C. Network Traffic Required in Deployment ------------------------------------------------------------------- Estimated size (in terms of bandwidth) of deployed agent files in this critical patch. - 32-bit agent total = 44.5 MB - 64-bit agent total = 60.4 MB 2. Documentation Set ====================================================================== To download or view electronic versions of the documentation set for this product, go to http://docs.trendmicro.com. 3. System Requirements ====================================================================== Trend Micro recommends installing OfficeScan XG server build before installing this critical patch. 4. Installation ====================================================================== This section explains key steps for installing the critical patch. 4.1 Installing =================================================================== To install: 1. Copy the critical patch executable file to a temporary folder, on the server, for example, "C:\temp". 2. Double-click the file. The modules are automatically copied to the correct destination. This critical patch installation package automatically rolls back the OfficeScan server to its previous configuration if there are problems during installation. If you encounter problems after installation, do a manual rollback. 4.2 Uninstalling =================================================================== To manually roll back to the previous build: 1. Locate the backup folder that the critical patch package created in the "\PCCSRV\Backup\Backup\CriticalPatch_B1315" directory. 2. Stop the OfficeScan Master Service. 3. Stop the OfficeScan CMAgent Service. 4. Copy the backup modules to the original folders. 5. Start the OfficeScan CMAgent Service. 6. Start the OfficeScan Master Service. 5. Post-installation Configuration ====================================================================== No post-installation steps are required. Note: Trend Micro recommends that you update your scan engine and virus pattern files immediately after installing the product. 6. Known Issues ====================================================================== There are no known issues for this critical patch release. 7. Release History ====================================================================== For more information about updates to this product, go to: http://www.trendmicro.com/download 8. Contact Information ====================================================================== A license to Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, you must renew Maintenance on an annual basis at Trend Micro's then-current Maintenance fees. Contact Trend Micro via fax, phone, and email, or visit our website to download evaluation copies of Trend Micro products. http://www.trendmicro.com/us/about-us/contact/index.html NOTE: This information is subject to change without notice. 9. About Trend Micro ======================================================================= Smart, simple, security that fits As a global leader in IT security, Trend Micro develops innovative security solutions that make the world safe for businesses and consumers to exchange digital information. Copyright 2017, Trend Micro Incorporated. All rights reserved. Trend Micro, OfficeScan, and the t-ball logo are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 10. License Agreement ====================================================================== View information about your license agreement with Trend Micro at: http://www.trendmicro.com/us/about-us/legal-policies/ license-agreements/ Third-party licensing agreements can be viewed: - By selecting the "About" option in the application user interface - By referring to the "Legal" page of the Administrator's Guide