Patch Assessment Content Update Release Notes for CCS Version: Update

(1)

Patch Assessment Content

Update Release Notes for

CCS 11.1

(2)

Patch Assessment Content Update 2016-02 Release

Notes for CCS 11.1

Legal Notice

Symantec, the Symantec Logo, and the Checkmark Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners.

This Symantec product may contain third party software for which Symantec is required to provide attribution to the third party (“Third Party Programs”). Some of the Third Party Programs are available under open source or free software licenses. The License Agreement accompanying the Software does not alter any rights or obligations you may have under those open source or free software licenses. Please see the Third Party Legal Notice Appendix to this Documentation or TPIP ReadMe File accompanying this Symantec product for more information on the Third Party Programs.

The product described in this document is distributed under licenses restricting its use, copying, distribution, and decompilation/reverse engineering. No part of this document may be reproduced in any form by any means without prior written authorization of Symantec Corporation and its licensors, if any.

THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE.

(3)

Symantec Corporation 350 Ellis Street

Mountain View, CA 94043

(4)

Patch Assessment Content

Update (PACU)

This document includes the following topics:

■ Prerequisites for PACU

■ What's New in PACU 2016-02

■ Patch Assessment Content Updates for Windows in 2016-02

■ Patch Assessment Content Updates for UNIX in 2016-02

■ Updates in PACU 2016-01

■ Contents of the PACU

Prerequisites for PACU

The following are the prerequisites for installing the Patch Assessment Content Updates:

■ Symantec Control Compliance Suite 11.1

Before you install a Patch Assessment Content Update, you must have the Control Compliance Suite 11.1 installed on your computer.

■ New signing certificate

A new signing certificate is used for all CCS files that are signed after February 12, 2015. To install PACU 2015-4 or later by using the LiveUpdate feature, you need this certificate. For the updated certificate, you must apply either of the following:

(5)

The Quick Fix 10005 includes the Symantec.CSM.AssemblyVerifier.dll, which contains the updated CCS certificate information necessary to validate the certificate.

You can download the Quick Fix 10005 from the following location:

http://www.symantec.com/docs/TECH228300

Note:If the Quick Fix 10005 is not applied, the Automatic Updates

Installation job will fail. However, there is no impact on the manual

installation of PACU without this Quick Fix.

■ Symantec Control Compliance Suite 11.1.1 (Product Update 2015-1)

This Product update recognizes and validates Symantec binaries that are signed by using the new signing certificate, in addition to recognizing the older binaries.

What's New in PACU 2016-02

PACU 2016-02 contains the following updates:

See“Patch Assessment Content Updates for Windows in 2016-02”on page 5.

See“Patch Assessment Content Updates for UNIX in 2016-02”on page 6. PACU 2016-02 includes the updates from PACU 2016-01.

Patch Assessment Content Updates for Windows in

2016-02

PACU 2016-02 contains checks for updates released by Microsoft in February 2016 on raw-data content.

Updates for raw-data content

■ MS16-009

Cumulative Security Update for Internet Explorer (3134220)

■ MS16-012

Security Update for Microsoft Windows PDF Library to Address Remote Code Execution (3138938)

5 Patch Assessment Content Update (PACU)

(6)

■ MS16-013

Security Update for Windows Journal to Address Remote Code Execution (3134811)

■ MS16-014

Security Update for Microsoft Windows to Address Remote Code Execution (3134228)

■ MS16-015

Security Update for Microsoft Office to Address Remote Code Execution (3134226)

■ MS16-016

Security Update for WebDAV to Address Elevation of Privilege (3136041)

■ MS16-017

Security Update for Remote Desktop Display Driver to Address Elevation of Privilege (3134700)

■ MS16-018

Security Update for Windows Kernel-Mode Drivers to Address Elevation of Privilege (3136082)

■ MS16-019

Security Update for .NET Framework to Address Denial of Service (3137893)

■ MS16-020

Security Update for Active Directory Federation Services to Address Denial of Service (3134222)

■ MS16-021

Security Update for NPS RADIUS Server to Address Denial of Service (3133043)

■ MS16-022

Security Update for Adobe Flash Player (3135782)

Patch Assessment Content Updates for UNIX in

2016-02

There are 87 updated patches and 199 new patches in dat (template) files for the UNIX platforms.

Updates for raw-data content

Updates for the following UNIX platforms are available in this release.

■ Oracle Solaris

(7)

■ Linux

■ Ubuntu ■ IBM AIX

■ HP-UX

Updates in PACU 2016-01

The PACU 2016-01 contained the following updates:

See“Patch Assessment Content Updates for Windows in 2016-01”on page 7.

See“Patch Assessment Content Updates for UNIX in 2016-01”on page 8.

Patch Assessment Content Updates for Windows in 2016-01

PACU 2016-01 contains checks for updates released by Microsoft in January 2016 on raw-data content.

Updates for raw-data content

■ MS16-001

Cumulative Security Update for Internet Explorer (3124903)

■ MS16-003

Cumulative Security Update for JScript and VBScript to Address Remote Code Execution (3125540)

■ MS16-004

Security Update for Microsoft Office to Address Remote Code Execution (3124585)

■ MS16-005

Security Update for Windows Kernel-Mode Drivers to Address Remote Code Execution (3124584)

■ MS16-006

Security Update for Silverlight to Address Remote Code Execution (3126036)

■ MS16-007

Security Update for Microsoft Windows to Address Remote Code Execution (3124901)

■ MS16-008

(8)

Security Update for Windows Kernel to Address Elevation of Privilege (3124605)

■ MS16-010

Security Update in Microsoft Exchange Server to Address Spoofing (3124557)

Patch Assessment Content Updates for UNIX in 2016-01

There are 99 updated patches and 201 new patches in dat (template) files for the UNIX platforms.

Updates for raw-data content

Updates for the following UNIX platforms are available in this release.

■ Oracle Solaris

■ Linux ■ Ubuntu

■ HP-UX

Contents of the PACU

PACU contains the following files: Table 1-1 Contents of the PACU

Description Name

Raw-data content standard for Windows SEForMSPatches_Comprehensive.xml

Raw-data content standard for Windows SEForMSPatches_Less.xml

Raw-data content updates for Linux platforms

LinuxRecommendedPatches.dat

Raw-data content updates for HP-UX platforms

HP-UXRecommendedPatches.dat

Raw-data content updates for AIX platforms

AIXRecommendedPatches.dat

Raw-data content updates for Sun OS platforms

SunOSRecommendedPatches.dat

Message-based content updates for Windows and UNIX

ESM_OSPatches_Comprehensive.xml

(9)

Table 1-1 Contents of the PACU (continued) Description Name

Raw-data content file for Windows data collection

bvMSSecure.xml

Raw-data content file for Windows data collection

hf7b.xml

Patch Policy updates on message-based content for Windows and UNIX. BestPractice_OS_Patch_Updates.exe

Contains checks which evaluate on APAR and Packages for AIX OS Comprehensive_AIXPatchStandard.xml

Custom algorithm used for evaluating package checks in the Comprehensive Patch Standard for AIX.

Symantec.CSM.

UnixPlatformContent.UnixPatchStandard.dll Version 11.10.10000.1160

Note:Support for the RHBA bug fix advisories is not available in the Patch Assessment Content Update (PACU).