<> Trend Micro Incorporated April 1st, 2024 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) ServerProtect for Microsoft Windows/Novell NetWare 5.8 - Patch5 English - Windows - 32-bit / 64-bit Critical Patch - Build 1614 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Contents ================================================================ 1. Overview of This Critical Patch Release 1.1. Issues 1.2. Enhancements 1.3. Files Included in This Release 2. Documentation Set 3. System Requirements 4. Installation 4.1. Installing 4.2. Uninstalling 5. Post-installation Configuration 6. Known Issues 7. Release History 8. Contact Information 9. About Trend Micro 10. License Agreement ================================================================ 1. Overview of This Critical Patch Release ======================================================================== 1.1. Issues ==================================================================== This Critical Patch resolves the following issue(s): Issue 1: ServerProtect reported several virus alerts in Real-time Scan about virus "+" in "?." after the Virus Scan Engine had upgraded to 22.610-1017. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 1: This Critical Patch resolves the issue. Issue 2: Process StOPP started unexpectedly and might cause service crash sometimes. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 2: This Critical Patch resolves the issue. 1.2. Enhancements ==================================================================== The following enhancements are included in this Critical Patch: Enhancement 1: This Critical Patch upgrades the ActiveUpdate and CMAgent SDK module to remove some vulnerabilities. 1.3. Files Included in This Release ==================================================================== -------------------------------------------------------------------- Module File Name Build No. ----------------------------------------------------------------- 64-bit Normal Server AgentClient.dll 5.80.0.1614 Build.exe 2.86.0.1132 DCE.dll 5.80.0.1614 Notification.dll 5.80.0.1614 Patch.exe 2.86.0.1132 SP5NSLst.ini n/a SPCommonLog.dll 5.80.0.1614 StCommon.dll 5.80.0.1614 StRpcSrv.dll 5.80.0.1614 StUpdate.exe 5.80.0.1614 StUpdate_32.exe 5.80.0.1614 TmUpdate.dll 2.86.0.1132 cert5.db n/a ciuas32.dll 0.0.2075 ciussi32.dll 0.0.2074 eng50.dll 5.80.0.1614 expapply.dll 4.2.0 expbuild.dll 4.2.0 icrcauapi.dll 2.83.0.1044 liblwtpciu32.dll 1.0.0.1005 patchbld.dll 12.21 patchw32.dll 12.22 psmc.dll 8.42 tsc.exe 7.5.0.1178 tsc64.exe 7.5.0.1178 x500.db n/a 32-bit Normal Server AgentClient.dll 5.80.0.1614 Build.exe 2.86.0.1132 DCE.dll 5.80.0.1614 Notification.dll 5.80.0.1614 Patch.exe 2.86.0.1132 SP5NSLst.ini n/a SPCommonLog.dll 5.80.0.1614 StCommon.dll 5.80.0.1614 StRpcSrv.dll 5.80.0.1614 StUpdate.exe 5.80.0.1614 TmUpdate.dll 2.86.0.1132 cert5.db n/a ciuas32.dll 0.0.2075 ciussi32.dll 0.0.2074 eng50.dll 5.80.0.1614 expapply.dll 4.2.0 expbuild.dll 4.2.0 icrcauapi.dll 2.83.0.1044 liblwtpciu32.dll 1.0.0.1005 patchbld.dll 12.21 patchw32.dll 12.22 psmc.dll 8.42 spuninst.exe 5.80.0.1614 spuninstrc.dll 5.80.0.1614 tsc.exe 7.5.0.1178 x500.db n/a Information Server and Management Console Adm_enu.dll 5.80.0.1614 Admin.exe 5.80.0.1614 AgentClient.dll 5.80.0.1614 AgentClient.dll 5.80.0.1614 BIFSender.exe 5.80.0.1614 Build.exe 2.86.0.1132 EarthAgent.exe 5.80.0.1614 ISSetup.dll 28.0.759 Notification.dll 5.80.0.1614 Patch.exe 2.86.0.1132 Quarantine.exe 5.80.0.1614 RemoteInstall.exe 5.80.0.1614 SP5NSLst.ini n/a SP5NSLst.ini n/a StCommon.dll 5.80.0.1614 StUpdate.exe 5.80.0.1614 TmUpdate.dll 2.86.0.1132 cert5.db n/a ciuas32.dll 0.0.2075 ciussi32.dll 0.0.2074 data1.cab n/a data1.hdr n/a data2.cab n/a dce-exe-mssign-v75-1178.zip n/a dce-exe-mssign-x64-v75-1178.zip n/a expapply.dll 4.2.0 expbuild.dll 4.2.0 icrcauapi.dll 2.83.0.1044 libcrypto-3.dll 3.0.8 libcurl.dll 7.88.1 liblwtpciu32.dll 1.0.0.1005 libssl-3.dll 3.0.8 patchbld.dll 12.21 patchw32.dll 12.22 psmc.dll 8.42 setup.exe 5.8 setup.inx n/a spuninst.exe 5.80.0.1614 spuninst.exe 5.80.0.1614 spuninstrc.dll 5.80.0.1614 spuninstrc.dll 5.80.0.1614 x500.db n/a zlibwapi.dll 1.2.11 MCP CMAgent CMAgent.exe 5.80.0.1614 En_BlobConvertUtility.dll 5.0.0.2621 En_I18N.dll 5.0.0.2621 En_Utility.dll 5.0.0.2621 ProductLibrary.dll 5.80.0.1614 SSO_PKIHelper.dll 5.0.0.2621 TrendAprWrapperDll.dll 5.0.0.2621 cgiCmdNotify.exe 5.0.0.2621 libapr-1.dll 1.1.1 libcrypto-3.dll 3.0.8 libcurl.dll 7.88.1 libssl-3.dll 3.0.8 zlibwapi.dll 1.2.11 Patch Files TMPatch.exe 2.2.0.1057 UpdateComponent.cmd n/a hotfix.ini n/a license.txt n/a readme.txt n/a setup.ini n/a 2. Documentation Set ======================================================================== To download or view electronic versions of the documentation set for this product, go to http://docs.trendmicro.com - Online Help: The Online Help contains an overview of features and key concepts, and information on configuring and maintaining the product. To access the Online Help, go to http://docs.trendmicro.com - Installation Guide (IG): The Installation Guide contains information on requirements and procedures for installing and deploying the product. - Administrator's Guide (AG): The Administrator's Guide contains an overview of features and key concepts, and information on configuring and maintaining the product. - Getting Started Guide (GSG): The Getting Started Guide contains product overview, installation planning, installation and configuration instructions, and basic information intended to get the product 'up and running'. - Support Portal: The Support Portal contains information on troubleshooting and resolving known issues. - To access the Support Portal, go to http://success.trendmicro.com 3. System Requirements ======================================================================== 1. Trend Micro ServerProtect for Microsoft Windows/Novell NetWare 5.8 Patch5 Build 1567 - English - Windows - x32-x64 4. Installation ======================================================================== This section explains key steps for installing the Critical Patch. 4.1. Installing ==================================================================== To install: 1. Close the Management Console. 2. Run "spnt_580_win_en_criticalpatch_b1614.exe" to copy the Critical Patch files to the correct destination. The License Agreement appears. 3. Read the License Agreement and click "OK" if you agree with the license conditions to finish the installation. NOTES: - The setup will not continue if you do not agree to the setup license conditions. - The Critical Patch files are automatically deployed to all scan servers managed by the Information Server. To apply this Critical Patch to a Management Console that is not associated with the computer hosting the Information Server or is not installed in the same folder with the Information Server: 1. Apply the Critical Patch to the Information Server. 2. Close the Management Console. 3. Go to the Management Console home directory and backup the following files to another location. - admin.exe - Adm_enu.dll - AgentClient.dll - ADM_ENU.chm - EventMsg2.dll - spuninst.exe - spuninstrc.DLL 4. On the Information Server, copy the following files from the Information Server home directory to the Management Console home directory to overwrite the local files. - admin.exe - Adm_enu.dll - AgentClient.dll - ADM_ENU.chm - EventMsg2.dll - spuninst.exe - spuninstrc.DLL 4.2. Uninstalling ==================================================================== To roll back to the previous build: 1. On the Normal Server, run the following shell command to stop the Normal Server service: net stop spntsvc 2. On the Information Server, run the following shell command to stop the Trend Micro Management Communication Protocol (MCP) CMAgent service: net stop ServerProtectCMAgent 3. On the Information Server, run the following shell command to stop the Information Server service: net stop earthagent 4. If the Management Console is not installed on the same server with the Information Server, open the Management Console's home directory, and then roll back the following files: - admin.exe - Adm_enu.dll - AgentClient.dll - ADM_ENU.chm - EventMsg2.dll - spuninst.exe - spuninstrc.DLL 5. On the Normal Server, rename the backup files in the ServerProtect home directory and use them to replace the current files. The names of the backup files have ".bak" in the extension. 6. On the Information Server, open the Information Server's home directory and copy the files from the ".\backup\criticalpatch1614\filegroup100" folder to the ".\CMAgent" folder. 7. On the Information Server, open the Information Server's home directory and copy the files from the ".\backup\criticalpatch1614\filegroup10\" folder to the current directory. 8. On the Normal Server, run the following command to start the Normal Server service: net start spntsvc 9. On the Information Server, run the following command to start the MCP CMAgent service: net start ServerProtectCMAgent 10. On the Information Server, run the following command to start the Information Server service: net start earthagent 5. Post-installation Configuration ======================================================================== No post-installation steps are required. NOTE: Trend Micro recommends that you update your scan engine and virus pattern files immediately after installing the product. 6. Known Issues ======================================================================== There are no known issues for this Critical Patch release. 7. Release History ======================================================================== For more information about updates to this product, go to: http://www.trendmicro.com/download Prior Hotfixes ==================================================================== Only this Critical Patch was tested for this release. Prior hotfixes were tested at the time of their release. [Hotfix 1590] Issue 1: Sometimes, virus or spyware pattern update cannot succeed with error code 46 reported. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 1: This hotfix resolves the issue. Issue 2: If the sender or recipient address set for notifications exceeds 49 bytes, issues may occur: * The sender address will be truncated on the Management Console. * Notifications cannot be sent to the recipient successfully. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 2: This hotfix resolves the issues. Issue 3: Some customers reported that they could not open the management console when port 1000 was occupied by other programs. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 3: This hotfix resolves this issue. Issue 4: The Normal Server may exit abnormally upon the failure to create the DCE engine process. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 4: This hotfix resolves this issue. Enhancement 1: This hotfix upgrades the ActiveUpdate module to remove some vulnerabilities. Enhancement 2: This hotfix upgrades the CMAgent SDK module to remove some vulnerabilities. [Critical Patch 1587] Issue 1: Sometimes, the Management Console stops unexpectedly when it receives certain illegal messages. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 1: This Critical Patch resolves the issue by adding some validity checks to ensure that the Management Console can handle these messages. Issue 2: CMAgent sends incorrect operating system information to Trend Micro Control Manager(TM) when the current operating system is Microsoft(TM) Windows(TM) Server 2022. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 2: This Critical Patch makes sure that CMAgent sends the correct operating system information to Control Manager. Enhancement 1: This Critical Patch resolves some vulnerabilities in the ServerProtect for Microsoft Windows/Novell NetWare program. Enhancement 2: This Critical Patch removes some strings that contain password information from the debug log. Enhancement 3: This Critical Patch updates the error string in the Message Box that is triggered when an engine or pattern file update fails. [Critical Patch 1575] Issue 1: [JP Hotfix 1574]Sometimes, users cannot successfully add a freshly-installed Normal Server to an Information Server with a higher version. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 1: This critical patch resolves this issue. Issue 2: [JP Hotfix 1574]Sometimes, when a pattern or engine update runs during a scheduled scan or manual scan, and fails, some related files remain locked. This can cause the Normal Server to stop responding. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 2: This critical patch resolves this issue by enabling ServerProtect to release locked resources completely after a pattern or engine update fails. Enhancement 1: This critical patch removes some vulnerabilities from ServerProtect. [Critical Patch 1571] Issue 1: Sometimes, the spntsvc service stops unexpectedly. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 1: This critical patch resolves the issue. 8. Contact Information ======================================================================== A license to Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, you must renew Maintenance on an annual basis at Trend Micro's then-current Maintenance fees. Contact Trend Micro via fax, phone, and email, or visit our website to download evaluation copies of Trend Micro products. https://www.trendmicro.com/en_us/contact.html NOTE: This information is subject to change without notice. 9. About Trend Micro ======================================================================== Smart, simple, security that fits. As a global leader in IT security, Trend Micro develops innovative security solutions that make the world safe for businesses and consumers to exchange digital information. Copyright 2023, Trend Micro Incorporated. All rights reserved. Trend Micro, the t-ball logo, OfficeScan, Trend Micro Security (for Mac), Control Manager, Trend Micro Apex One, and Trend Micro Apex Central are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other product or company names may be trademarks or registered trademarks of their owners. 10. License Agreement ======================================================================== View information about your license agreement with Trend Micro at: https://www.trendmicro.com/en_us/about/legal.html Third-party licensing agreements can be viewed: - By selecting the "About" option in the application user interface - By referring to the "Legal" page of the Administrator's Guide