<<<>>> Trend Micro Incorporated September 20, 2018 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) Security (for Mac(TM)) 3.0 Patch 1 Critical Patch - Build 3067 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ NOTICE: Trend Micro developed this critical patch as a workaround or solution to a problem reported by customers. As such, this critical patch has received limited testing and has not been certified as an official product update. Consequently, THIS CRITICAL PATCH IS PROVIDED "AS IS". TREND MICRO MAKES NO WARRANTY OR PROMISE ABOUT THE OPERATION OR PERFORMANCE OF THIS CRITICAL PATCH NOR DOES TREND MICRO WARRANT THIS CRITICAL PATCH AS ERROR FREE. TO THE FULLEST EXTENT PERMITTED BY LAW, TREND MICRO DISCLAIMS ALL IMPLIED AND STATUTORY WARRANTIES, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY, NONINFRINGEMENT AND FITNESS FOR A PARTICULAR PURPOSE. Contents ========================================================== 1. Critical Patch Release Information 1.1 Resolved Known Issues 1.2 Enhancements 1.3 Files Included in This Release 2. Documentation Set 3. System Requirements 4. Installation 4.1 Installing 4.2 Uninstalling 5. Post-installation Configuration 6. Known Issues 7. Release History 8. Contact Information 9. About Trend Micro 10. License Agreement ========================================================== 1. Critical Patch Release Information ======================================================================= Installing this critical patch resolves issues in Micro Security (for Mac) 3.0 Patch 1. Refer to "Resolved Known Issues" for more information. 1.1 Resolved Known Issues ==================================================================== This critical patch resolves the following issues: Issue 1: Trend Micro Security (for Mac) 3.0 Patch 1 agents do not support the Mac Mojave (10.14) operating system (OS). ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 1: This critical patch adds MacOS Mojave (10.14) into the list of supported operating systems. Issue 2: Git-related programs may experience performance issues on Macs where the Trend Micro Security (for Mac) agent is installed. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 2: This critical patch improves the internal logic to help prevent the performance issues. Issue 3: Micro Security (for Mac) 3.0 Patch 1 is affected by the following vulnerabilities: - VRTS-2720 VRTS-2611 ZDI-CAN-6369: TMSM for ENT KERedirect Untrusted Pointer Dereference Privilege Escalation Vulnerability - VRTS-2721 VRTS-2611 ZDI-CAN-6370: TMSM for ENT KERedirect Untrusted Pointer Dereference Privilege Escalation Vulnerability - VRTS-2722 VRTS-2611 ZDI-CAN-6372: TMSM for ENT KERedirect Untrusted Pointer Dereference Privilege Escalation Vulnerability - VRTS-2723 VRTS-2608 ZDI-CAN-6368: TMSM for ENT KERedirect Use-After-Free Privilege Escalation Vulnerability - VRTS-2724 VRTS-2611 ZDI-CAN-6371: TMSM for ENT KERedirect Untrusted Pointer Dereference Privilege Escalation Vulnerability. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 3: This critical patch integrates the new iCore to fix the vulnerabilities. Issue 4: In some Macs that multiboot CentOS with BootCamp, the iCoreService stops unexpectedly while handling similar but not native Mac OS filesystems. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 4: This critical patch adds methods to identify unsupported filesystems to prevent the iCoreService from stopping unexpectedly. 1.2 Enhancements ==================================================================== There are no enhancements for this critical patch. 1.3 Files Included in This Release ==================================================================== A. Files for Current Issue -------------------------------------------------------------------- Filename --------------- TMSM_Agent_Critical_Patch_3.0P1.3067.zip B. Files for Previous Issues -------------------------------------------------------------------- Not applicable. 2. Documentation Set ======================================================================= To download or view electronic versions of the documentation set for this product, go to http://docs.trendmicro.com 3. System Requirements ======================================================================== Trend Micro Security (for Mac) 3.0 has the following installation requirements: 3.1 Trend Micro Security Server ===================================================================== a. Trend Micro OfficeScan(TM) Server XG, 11, 10.6 or later b. Plug-in Manager 2.0 with the latest patch c. Trend Micro Security (for Mac) 3.0.3078 or above NOTE: Refer to the Trend Micro Security (for Mac) server documentation for a list of minimum system requirements. 3.2 Trend Micro Security Client =================================================================== a. Mac OS 10.14 Mojave b. Mac OS 10.13 High Sierra c. Mac OS 10.12 Sierra d. Mac OS X 10.11 El Capitan e. Mac OS X 10.10 Yosemite or later f. Mac OS X 10.9 Mavericks or later g. Mac OS X 10.8 Mountain Lion or later h. Mac OS X 10.7 Lion or later (x64) 4. Installation ======================================================================= This section explains key steps for installing the critical patch. 4.1 Installing ==================================================================== To install: 1. Create a backup of the following files in another location, for example, "C:\temp\TMSM_Backup". - C:\Program Files\Trend Micro\OfficeScan\Addon\TMSM \TMSM_HTML\ActiveUpdate\server.ini - C:\Program Files\Trend Micro\OfficeScan\Addon\TMSM \TMSM_HTML\ActiveUpdate\product - C:\Program Files\Trend Micro\OfficeScan\Addon\TMSM \TMSM_HTML\ActiveUpdate\ClientInstall 2. Copy the critical patch module to a temporary folder on the Trend Micro Security Server machine, for example, "C:\temp\TMSM_Agent_Critical_Patch_3.0P1.3067.zip". 3. Unzip the file "TMSM_Agent_Critical_Patch_3.0P1.3067.zip" 4. Open a command prompt with "Admin" permission option. 5. In the command prompt window, run the command "tmpatch.exe" 6. Select "I accept the term of the license agreement" and click "Next" to continue. 7. Click the "Install" to start the installation. 4.2 Uninstalling ==================================================================== No special uninstallation instructions are provided. 5. Post-installation Configuration ======================================================================= No post-installation steps are required. NOTE: Trend Micro recommends that you update your scan engine and virus pattern files immediately after installing the product. 6. Known Issues ======================================================================= There are no known issues for this critical patch release. 7. Release History ======================================================================= For more information about updates to this product, go to: http://www.trendmicro.com/download 8. Contact Information ======================================================================= A license to Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, you must renew Maintenance on an annual basis at Trend Micro's then-current Maintenance fees. Contact Trend Micro via fax, phone, and email, or visit our website to download evaluation copies of Trend Micro products. http://www.trendmicro.com/us/about-us/contact/index.html NOTE: This information is subject to change without notice. 9. About Trend Micro ======================================================================= Smart, simple, security that fits As a global leader in IT security, Trend Micro develops innovative security solutions that make the world safe for businesses and consumers to exchange digital information. Copyright 2018, Trend Micro Incorporated. All rights reserved. Trend Micro, OfficeScan, and the t-ball logo are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 10. License Agreement ======================================================================= View information about your license agreement with Trend Micro at: http://www.trendmicro.com/us/about-us/legal-policies/ license-agreements/ Third-party licensing agreements can be viewed: - By selecting the "About" option in the application user interface - By referring to the "Legal" page of the Administrator's Guide