Trend Micro WFBS 10.0 SP1: Patch Build 2179 mit Fixes

[English]Noch ein kurzer Nachtrag. Trend Micro hat zum 5. November 2019 für seine Worry Free Business Security Version 10.0 Service Pack 1 einen 'Bug-Fix' Patch mit der Build 2179 freigegeben.

Trend Micro hatte am 26. Oktober 2019 einen Patch mit Build 2178 für seine Worry Free Business Security Version 10.0 Service Pack 1 veröffentlicht. Dieser Patch schloss eine 0-Tage-Schwachstelle in der Webkonsole (siehe Trend Micro WFBS 10.0 SP1: Patch Build 2178 verfügbar). Allerdings stand der Patch unter keinem guten Stern, da es massive Probleme gab (siehe Trend Micro WFBS 10.0 SP1: Patch Build 2178 meldet Spyware). Dieser Patch wurde daher wieder zurückgezogen.

(Source: Pexels Markus Spiske CC0 Lizenz)

Trend Micro WFBS 10.0 SP1: Patch Build 2179 verfügbar

In den Kommentaren hier klang es ja bereits an: Trend Micro hat zum 5. November 2019 den Patch Build 2179 für sein Worry Free Business Security SP1 freigegeben. Dieser korrigiert die 'Spyware-Fehlalarme' und eine Reihe weiterer Fehler. Gemäß Release-Notes enthält dieser Patch folgende Verbesserungen und Fixes:

• Enhancement: ActiveUpdate (AU) Security – This patch enables the Worry-Free Business Security server to update AU patterns and files using a more secure HTTPS protocol.
• Issue 1: (VRTS-3385) There are multiple Vulnerabilities in Apache 2.4.29.
  Solution 1: This patch updates the Apache module to version 2.4.39 to remove the vulnerabilities.
• Issue 2: (SEG-51130) "Ofcservice.exe" stops responding while processing log queries on the Worry-Free Business Security server web console.
  Solution 2: This patch ensures that Security Agents sends logs to the Security Server in the supported format.
• Issue 3: (SEG-56361) ATTK Scan detection logs cannot be uploaded because                  these contain the wrong "FunctionType".
  Solution 3: This patch resolves the error so both ATTK scan and normal scan logs can be uploaded to the Security Server successfully.
• Issue 4: (SEG-46088) Users cannot login to the Worry-Free Business Security web console even after resetting the password using the reset password tool.
  Solution 4: This patch ensures that users can login successfully to the Worry-Free Business Security web console.
• Issue 5: (SEG-56382) "Setup.exe" stops unexpectedly while upgrading to                  Worry-Free Business Security 10.0 Service Pack 1 on the Windows Server 2008 Service Pack 2 platform.
  Solution 5: This patch contains a repacked version of Worry-Free Business Security 10.0 Service Pack 1 which blocks unsupported platforms to ensure that the update can be applied normally.
• Issue 6: (VRTS-3542)(VRTS-3550) There are OpenSSL vulnerabilities in Worry-Free
  Business Security 10.0 Service Pack 1.
  Solution 6: This patch updates the related OpenSSL key-generation files to remove these vulnerabilities.
• Issue 7:  (VRTS-3682)(SEG-60707) A vulnerability may allow attackers to bypass root  authentication and logon to the Worry-Free Business Security web console.
  Solution 7: This patch updates the Worry-Free Business Security server program to remove the vulnerability.
• Issue 8: (VRTS-3426) An attacker may be able to execute codes through a .dll file.
  Solution 8: This patch removes this DLL code injection vulnerability.
• Issue 9: (SEG-59988) Users cannot install the Security Agent because a                  higher version of Microsoft Visual C++ 2017 already exists.
  Solution 9: This patch ensures that users can install the Security Agent successfully when a higher version of Microsoft Visual C++ 2017 already exists.
• Issue 10:(SEG-63241) Agent became offline when customer use 64bit IIS after apply 10.0 service pack 1 2178 Patch
  Solution 10:This patch solves the misplacement of isapiClient.dll caused by patch 2178.
• Issue 11: (SEG-63185) Some Spyware or Adware were detected from none existed registry key when manual/schedule scan was executed after  apply patch 2178.
  Solution 11:This patch stops the spyware/adware false alrets caused by patch 2178.
• Issue 12: (SEG-63247) Update process is running and unable to be stopped by                 patch installer and cause the setup progress terminates unexpectedly.
  Solution 12:This patch ensures the patch installer can run and setup without problem.

Der Patch Build 2179 ist auf der Trend Micro Download-Seite unter dem Registerreiter Product Patch zu finden.