<> Trend Micro Incorporated February 4, 2021 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) ServerProtect(TM) for Linux(TM) 3.0 Critical Patch - Build 1633 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Contents ========================================================== 1. Overview of This Critical Patch Release 1.1 Issues 1.2 Files Included in This Release 2. Documentation Set 3. System Requirements 4. Installation 4.1 Installing 4.2 Uninstalling 5. Post-installation Configuration 6. Known Issues 7. Release History 8. Contact Information 9. About Trend Micro 10. License Agreement ========================================================== 1. Overview of This Critical Patch Release ====================================================================== 1.1 Issues =================================================================== This critical patch includes the following enhancement: Enhancement: This critical patch resolves a vulnerability related to "log_management.cgi". 1.2 Files Included in This Release =================================================================== A. Files for Current Issues ------------------------------------------------------------------- Filename Build Number ---------------------------------------------------------------- log_management.cgi 3.0.1633 entity 3.0.1633 B. Files for Previous Issues ------------------------------------------------------------------- Filename Build Number ---------------------------------------------------------------- For 32-bit ServerProtect: AuPatch 2.86.2051 cert5.db 2.86.2051 libaction.so 3.0.1633 libpatch.so 2.86.2051 libtmactupdate.so 2.86.2051 x500.db 2.86.2051 libcxmlapi.so 3.0.1633 libi18n.so.1 3.0.1633 libicui18n.so.18.1 3.0.1633 libicuuc.so.18.1 3.0.1633 liblogmgt.so.1 3.0.1633 liblogrdr.so.1 3.0.1633 liblogshr.so.1 3.0.1633 liblogwtr.so.1 3.0.1633 liblowlib.so.1 3.0.1633 libsplxcommon.so 3.0.1633 libsplxcxml.so 3.0.1633 libTMNotifymt.so.1 3.0.1633 libxerces-c1_7_0.so 3.0.1633 CMconfig 3.0.1633 DiagnosticTool 3.0.1633 EncryptAgentPassword 3.0.1633 splxcomp 3.0.1633 splxport 3.0.1633 TMBIF 3.0.1633 upcfg 3.0.1633 xmlvalidator 3.0.1633 entity 3.0.1633 SetTMDefaultExt 3.0.1633 splxmain 3.0.1633 splx_manual_scan 3.0.1633 splx_schedule_scan 3.0.1633 virus_type_finder 3.0.1633 vsapiapp 3.0.1633 cmoption.cgi 3.0.1633 login_and_register.cgi 3.0.1633 log_management.cgi 3.0.1633 notification.cgi 3.0.1633 proption.cgi 3.0.1633 scanoption.cgi 3.0.1633 scanoption_set.cgi 3.0.1633 showpage.cgi 3.0.1633 srv_admin.cgi 3.0.1633 summary.cgi 3.0.1633 tmcm_sso.cgi 3.0.1633 viewlog.cgi 3.0.1633 splx 3.0.1633 splxhttpd 3.0.1633 splxcore 3.0.1633 cgiCmdNotify 5.0.0.2364-RH9 libProductLibrary.so 5.0.0.2364-RH9 libEn_Utility.so.1.0.0 5.0.0.2364-RH9 libSSO_PKIHelper.so.1.0.0 5.0.0.2364-RH9 libTrendAprWrapper.so.1.0.0 5.0.0.2364-RH9 libapr-1.so.0.1.1 5.0.0.2364-RH9 libcrypto.so.1.0.0 5.0.0.2364-RH9 libcurl.so.4.4.0 5.0.0.2364-RH9 libssl.so.1.0.0 5.0.0.2364-RH9 libcares.so.2 5.0.0.2364-RH9 install.sh n/a rollback.sh n/a Patch.ini n/a For 64-bit ServerProtect: libtmprapi.so 1.2.1146 entity 3.0.1633 vsapiapp 3.0.1633 splxmain 3.0.1633 splx_manual_scan 3.0.1633 splx_schedule_scan 3.0.1633 log_management.cgi 3.0.1633 proption.cgi 3.0.1633 scanoption_set.cgi 3.0.1633 showpage.cgi 3.0.1633 tmcm_sso.cgi 3.0.1633 cmoption.cgi 3.0.1633 login_and_register.cgi 3.0.1633 scanoption.cgi 3.0.1633 srv_admin.cgi 3.0.1633 viewlog.cgi 3.0.1633 notification.cgi 3.0.1633 summary.cgi 3.0.1633 splx 3.0.1633 splxhttpd 3.0.1633 splxcore 3.0.1633 install.sh n/a rollback.sh n/a Patch.ini n/a 2. Documentation Set ====================================================================== To download or view electronic versions of the documentation set for this product, go to http://docs.trendmicro.com In addition to this Readme file, the documentation set for this product includes the following: - Online Help: The Online Help contains an overview of features and key concepts, and information on configuring and maintaining ServerProtect. To access the Online Help, go to http://docs.trendmicro.com - Installation Guide (IG): The Installation Guide contains information on requirements and procedures for installing and deploying ServerProtect. - Administrator's Guide (AG): The Administrator's Guide contains an overview of features and key concepts, and information on configuring and maintaining ServerProtect. - Getting Started Guide (GSG): The Getting Started Guide contains product overview, installation planning, installation and configuration instructions, and basic information intended to get ServerProtect "up and running". - Support Portal: The Support Portal contains information on troubleshooting and resolving known issues. To access the Support Portal, go to http://esupport.trendmicro.com 3. System Requirements ====================================================================== Install this critical patch on computers protected by: - ServerProtect for Linux 3.0 Patch 8 for Service Pack 1 - ServerProtect for Linux 3.0 GM package if installed on any of the following platforms: - CentOS(TM) 8.0 - Red Hat(TM) Enterprise Linux 8.0 - SUSE Enterprise Server 15 4. Installation ====================================================================== This section explains key steps for installing the critical patch. 4.1 Installing =================================================================== To install: 1. Log on as a root user. 2. Install the 32-bit "libstdc++" package if you are running any of the following platforms. - Red Hat Enterprise Linux 4 / 5 / 6 - CentOS 4 / 5 / 6 - SUSE Enterprise Server 10 / 11 3. Install the 32-bit "compat-libstdc++-33-3.2.3" package if you are running any of the following platforms. - Red Hat Enterprise Linux 4 / 5 / 6 - CentOS 4 / 5 / 6 4. Upload and copy the critical patch file to a working directory on your computer. For example, "/home/workdir." 5. Run the following command to extract the critical patch files from the "tar.gz" file. # tar zxvf splx_30_lx_en_criticalpatch1633.tar.gz 6. Go to the critical patch directory. Run the following command: #./install.sh 4.2 Uninstalling =================================================================== No uninstallation steps provided. NOTE: You cannot roll back this critical patch to any older build. 5. Post-Installation Configuration ====================================================================== No post-installation steps are required. NOTE: Trend Micro recommends that you update your scan engine and virus pattern files immediately after installing the product. 6. Known Issues ====================================================================== There are no known issues for this critical patch release. 7. Release History ====================================================================== For more information about updates to this product, go to: http://www.trendmicro.com/download 8. Contact Information ====================================================================== A license to Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, you must renew Maintenance on an annual basis at Trend Micro's then-current Maintenance fees. Contact Trend Micro via fax, phone, and email, or visit our website to download evaluation copies of Trend Micro products. http://www.trendmicro.com/us/about-us/contact/index.html NOTE: This information is subject to change without notice. 9. About Trend Micro ====================================================================== Smart, simple, security that fits As a global leader in IT security, Trend Micro develops innovative security solutions that make the world safe for businesses and consumers to exchange digital information. Copyright 2021, Trend Micro Incorporated. All rights reserved. Trend Micro, ServerProtect, and the t-ball logo are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 10. License Agreement ====================================================================== View information about your license agreement with Trend Micro at: http://www.trendmicro.com/us/about-us/legal-policies/ license-agreements Third-party licensing agreements can be viewed: - By selecting the "About" option in the application user interface - By referring to the "Legal" page of the Administrator's Guide