<> Trend Micro Incorporated November 28, 2017 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Deep Security Virtual Appliance OS patch - Build 1.0.0-171128 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ NOTICE: Trend Micro developed this patch as a workaround or solution to a problem reported by customers. As such, this hotfix has received limited testing and has not been certified as an official product update. Consequently, THIS HOTFIX IS PROVIDED "AS IS". TREND MICRO MAKES NO WARRANTY OR PROMISE ABOUT THE OPERATION OR PERFORMANCE OF THIS PATCH NOR DOES TREND MICRO WARRANT THIS HOTFIX AS ERROR FREE. TO THE FULLEST EXTENT PERMITTED BY LAW, TREND MICRO DISCLAIMS ALL IMPLIED AND STATUTORY WARRANTIES, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY, NONINFRINGEMENT AND FITNESS FOR A PARTICULAR PURPOSE. Contents ========================================================== 1. Patch Release Information 1.1 Resolved Known Issues 1.2 Enhancements 1.3 Files Included in This Release 2. Documentation Set 3. System Requirements 4. Installation 5. Known Incompatibilities 6. Known Issues 7. Release History 8. Contact Information 9. About Trend Micro 10. License Agreement 11. Third-Party Software ========================================================== 1. Patch Release Information ======================================================================== 1.1 Resolved Known Issues ===================================================================== This release resolves the following issues: Issue 1: Deep Security was affected by one or more vulnerabilities related to CVE-2014-6271. Solution 1: This issue is fixed in this release. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Issue 2: Deep Security was affected by one or more vulnerabilities related to RHBA-2014:0203. Solution 2: This issue is fixed in this release. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Issue 3: Deep Security was affected by one or more vulnerabilities related to CVE-2015-7547. Solution 3: This issue is fixed in this release. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Issue 4: Deep Security was affected by one or more vulnerabilities related to CVE-2017-1000364. Solution 4: This issue is fixed in this release. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Issue 5: Deep Security was affected by one or more vulnerabilities related to CVE-2017-5461. Solution 5: This issue is fixed in this release. 1.2 Enhancements ===================================================================== This release does not include any enhancements. 1.3 Files Included in This Release ===================================================================== This release is a DSVA OS patch package. Use this file: Agent-DSVA_CentOS6.4-1.0.0-171128.x86_64.zip 2. Documentation Set ======================================================================== To download or view electronic versions of the documentation set for this product, go to http://docs.trendmicro.com In addition to this Readme file, the documentation set for this product includes the following: - Online help: The online help contains an overview of features and key concepts, and information on configuring and maintaining Deep Security 9.5/9.6/10.0. To access the online help, click "Help" from within the Deep Security Manager. - Support Portal: The Support Portal contains information on troubleshooting and resolving known issues. To access the Support Portal, go to http://esupport.trendmicro.com 3. System Requirements ======================================================================== For a complete list of the system requirements, please refer to the Deep Security 9.5/9.6/10.0 installation documentation. 4. Installation ======================================================================== Use Deep Security Manager to download this patch. 5. Known Incompatibilities ======================================================================== There are no known incompatibilities for this patch. 6. Known Issues ======================================================================== There are no known issues for this patch release. 7. Release History ======================================================================== For more information about updates to this product, go to: http://www.trendmicro.com/download 8. Contact Information ======================================================================== A license to Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, you must renew Maintenance on an annual basis at Trend Micro's then-current Maintenance fees. Contact Trend Micro via fax, phone, and email, or visit our website to download evaluation copies of Trend Micro products. http://www.trendmicro.com/us/about-us/contact/index.html NOTE: This information is subject to change without notice. 9. About Trend Micro ======================================================================== Smart, simple, security that fits As a global leader in IT security, Trend Micro develops innovative security solutions that make the world safe for businesses and consumers to exchange digital information. Copyright 2017, Trend Micro Incorporated. All rights reserved. Trend Micro, Deep Security, "deep security solutions", and the t-ball logo are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 10. License Agreement ======================================================================== View information about your license agreement with Trend Micro at: www.trendmicro.com/us/about-us/legal-policies/license-agreements Third-party licensing agreements can be viewed by selecting the "About" option in the application user interface 11. Third-Party Software ======================================================================== Deep Security employs the use of 3rd party binary distributions. The binary distributions are subject to the licenses available in the following directory: [Install Directory]/licenses Where 3rd party licenses require open access to their source code, Trend Micro will provide the necessary materials upon written request. ======================================================================== (C) 2017 Trend Micro Inc. All rights reserved. Published in Canada.