<> Trend Micro Incorporated December 24, 2021 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) Deep Discovery Director 5.2 - GM English - Linux - 64 Bits Critical Patch - Build 1400 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Contents ========================================================== 1. Overview of This Critical Patch Release 1.1 Issues 2. Documentation Set 3. System Requirements 4. Installation 4.1 Installing 4.2 Uninstalling 5. Post-installation Configuration 6. Known Issues 7. Release History 8. Contact Information 9. About Trend Micro 10. License Agreement ========================================================== 1. Overview of This Critical Patch Release ======================================================================== 1.1 Issues ===================================================================== This critical patch resolves the following issue: Issue 1: Deep Discovery Director uses a version of the log4j2 library that is affected by CVE-2021-44228, CVE-2021-45046, and CVE-2021-45105 vulnerabilities. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 1: This critical patch upgrades the log4j2 library to remove the vulnerabilities and updates the elasticsearch component to enhance security. 2. Documentation Set ======================================================================== To download or view electronic versions of the documentation set for this product, go to http://docs.trendmicro.com - Online Help: The Online Help contains an overview of features and key concepts, and information on configuring and maintaining the product. To access the Online Help, go to http://docs.trendmicro.com - Installation Guide (IG): The Installation Guide contains information on requirements and procedures for installing and deploying the product. - Administrator's Guide (AG): The Administrator's Guide contains an overview of features and key concepts, and information on configuring and maintaining the product. - Getting Started Guide (GSG): The Getting Started Guide contains product overview, installation planning, installation and configuration instructions, and basic information intended to get the product "up and running". - Support Portal: The Support Portal contains information on troubleshooting and resolving known issues. To access the Support Portal, go to https://success.trendmicro.com 3. System Requirements ======================================================================== Deep Discovery Director 5.2 GM Build 1223 - English - Linux - x64 4. Installation ======================================================================== This section explains key steps for installing the critical patch. 4.1 Installing ===================================================================== To install: 1. Open the Deep Discovery Director management console. 2. Go to "Administration > Updates" and click the "Hotfixes/Patches" tab. 3. Click "Select File..." and then select the Critical Patch file from the folder where you downloaded the files. 4. Click "Upload" to upload the Critical Patch file. 5. Click "Install", and then click "OK" when a confirmation message appears. 6. Clear the browser cache. 4.2 Uninstalling ===================================================================== To roll-back to the previous build: 1. Open the Deep Discovery Director management console. 2. Go to "Administration > Updates" and click the "Hotfixes/Patches" tab. 3. Click "Roll Back" button, and then click "OK" when a confirmation message appears. 5. Post-Installation Configuration ======================================================================== No post-installation steps are required. 6. Known Issues ======================================================================== There are no known issues for this critical patch release. Known issues in this release: 7. Release History ======================================================================== For more information about updates to this product, go to: http://www.trendmicro.com/download 8. Contact Information ======================================================================== A license to Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, you must renew Maintenance on an annual basis at Trend Micro's then-current Maintenance fees. Contact Trend Micro via fax, phone, and email, or visit our website to download evaluation copies of Trend Micro products. https://www.trendmicro.com/en_us/contact.html NOTE: This information is subject to change without notice. 9. About Trend Micro ======================================================================== Smart, simple, security that fits As a global leader in IT security, Trend Micro develops innovative security solutions that make the world safe for businesses and consumers to exchange digital information. Copyright 2021, Trend Micro Incorporated. All rights reserved. Trend Micro and the t-ball logo are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 10. License Agreement ======================================================================== View information about your license agreement with Trend Micro at: https://www.trendmicro.com/en_us/about/legal.html Third-party licensing agreements can be viewed: - By selecting the "About" option in the application user interface - By referring to the "Legal" page of the Administrator's Guide