Sentrigo Security Updates http://support.sentrigo.com/ RSS Feed for the latest Sentrigo Security Updates en-us Wed, 01 Feb 12 15:01:10 +0000 Wed, 01 Feb 12 15:01:10 +0000 60 VA Security Update 4.2.6 http://updates.sentrigo.com/security-va/va-4.2.6-732.sup

McAfee DVM Security Update 4.2.6

This VA Security update includes:
  • New and revised tests for Oracle and MySQL following Oracle's January 2012 CPU
  • Introduced PostgreSQL weak password checking tests
  • Improved and updated several tests and descriptions
  • Added ORASCN000 and ORASCN001 addressing SCN exhaustion CVE-2012-0082

Note: PostgreSQL and MSSQL Azure tests - supported from v4.2.0

Previous release notes can be found here. ]]> Wed, 01 Feb 12 16:28:00 +0000 http://updates.sentrigo.com/security-va/va-4.2.6-732.sup vPatch Security Update 4.2.107 http://updates.sentrigo.com/security/predefined-4.2.107-1379.sup

McAfee vPatch Security Update 4.2.107


This vPatch Security Update includes:
  • 1502,1504,1506 and 1508 Oracle rules were added to address OS layer suspicious activity.
RSS with previous releases can be fetched here. ]]> Thu, 19 Jan 12 12:35:00 +0000 http://updates.sentrigo.com/security/predefined-4.2.107-1379.sup VA Security Update 4.2.5 http://updates.sentrigo.com/security-va/va-4.2.5-697.sup

McAfee DVM Security Update 4.2.5

This VA Security Update contains:
  • Added 4 new MySQL tests that address security issues listed in CIS Benchmark version 1.0.2
  • Numerous descriptions were revised and corrected
  • Added new DB2 and MSSQL vulnerability tests
  • Updated several Oracle, PostgreSQL and MySQL tests

Note: PostgreSQL and MSSQL Azure tests - supported from v4.2.0

Previous release notes can be found here. ]]> Wed, 04 Jan 12 19:14:00 +0000 http://updates.sentrigo.com/security-va/va-4.2.5-697.sup vPatch Security Update 4.2.106 http://updates.sentrigo.com/security/predefined-4.2.106-1322.sup

McAfee vPatch Security Update 4.2.106


This vPatch Security Update includes improvements of Virtual Patches for Oracle
  • New rules were added addressing CVE-2011-3512
  • Rules 6308, 6310, 6312 were updated to better address CVE-2011-3512
  • Rule 6314 was fine-tuned to address CVE-2011-2301
  • Rules 1828, 5550, 5560 were hardened to reduce false-positives
  • Updated description for 1154, 6282
Previous release notes can be found here. ]]> Wed, 30 Nov 11 16:06:00 +0000 http://updates.sentrigo.com/security/predefined-4.2.106-1322.sup VA Security Update 4.2.4 http://updates.sentrigo.com/security-va/va-4.2.4-677.sup

McAfee DVM Security Update 4.2.4

This VA Security Update contains:
  • New and revised tests following Oracle's October 2011 CPU
  • Numerous descriptions were revised and corrected
  • Numerous tests were revised and corrected
  • New tests were added

Note: PostgreSQL and MSSQL Azure tests - supported from v4.2.0

Previous release notes can be found here. ]]> Mon, 14 Nov 11 18:57:00 +0000 http://updates.sentrigo.com/security-va/va-4.2.4-677.sup vPatch Security Update 4.2.105 http://updates.sentrigo.com/security/predefined-4.2.105-1307.sup

McAfee vPatch Security Update 4.2.105


This vPatch Security Update includes Virtual Patches for Oracle's Critical Patch Update (CPU) of October 2011,
updates and improvements to existing rules.
  • Rules 6308, 6310, 6312, 6314, 6316 were added to address newly disclosed vulnerabilities in Oracle's October 2011 CPU
  • Updated rule name for rule 6306
Previous release notes can be found here. ]]> Sun, 06 Nov 11 14:55:00 +0000 http://updates.sentrigo.com/security/predefined-4.2.105-1307.sup VA Security Update 4.2.3 http://updates.sentrigo.com/security-va/va-4.2.3-660.sup

McAfee DVM Security Update 4.2.3

This VA Security Update contains:
  • New DB2 and MSSQL tests
  • Description fields were revised and improved for several test categories
  • Azure tests refactoring
  • Bug fixes

Note: PostgreSQL and MSSQL Azure tests - supported from v4.2.0

Previous release notes can be found here. ]]> Mon, 26 Sep 11 13:18:00 +0000 http://updates.sentrigo.com/security-va/va-4.2.3-660.sup vPatch Security Update 4.2.102 http://updates.sentrigo.com/security/predefined-4.2.102-1290.sup

McAfee vPatch Security Update 4.2.102


This vPatch Security Update includes Virtual Patches for Oracle's Critical Patch Update (CPU) of July 2011,
updates and improvements to existing rules.
  • Rules 6296, 6298, 6300, 6302, 6304, 6306 were added to address previously disclosed vulnerabilities in Oracle database
  • Rules 6256 were updated to reduce false alerts
Previous release notes can be found here. ]]> Tue, 30 Aug 11 16:29:00 +0000 http://updates.sentrigo.com/security/predefined-4.2.102-1290.sup VA Security Update 4.2.2 http://updates.sentrigo.com/security-va/va-4.2.2-637.sup

McAfee DVM Security Update 4.2.2

This VA Security Update contains:
  • Compliance for Oracle CPU released on July 2011
  • Bug fixes and improvements

Note: PostgreSQL and MSSQL Azure tests - supported from v4.2.0

Previous release notes can be found here. ]]> Tue, 02 Aug 11 19:58:00 +0000 http://updates.sentrigo.com/security-va/va-4.2.2-637.sup vPatch Security Update 4.2.101 http://updates.sentrigo.com/security/predefined-4.2.101-1282.sup

McAfee vPatch Security Update 4.2.101


This vPatch Security Update includes Virtual Patches for Oracle's Critical Patch Update (CPU) of July 2011
  • Rules 1378, 1380, 1382 were added to address newly disclosed vulnerabilities in Oracle database
  • Rules 1384, 1386, 1388 were added to address previously disclosed vulnerabilities
  • Rules 1366, 1202 were updated to reduce false alerts
Previous release notes can be found here. ]]> Thu, 21 Jul 11 15:17:00 +0000 http://updates.sentrigo.com/security/predefined-4.2.101-1282.sup VA Security Update 4.2.1 http://updates.sentrigo.com/security-va/va-4.2.1-618.sup

McAfee DVM Security Update 4.2.1

This VA Security Update contains:
  • DISA STIG Compliance for:
    • MSSQL versions 8 and 9
    • Oracle versions 9, 10 and 11
  • Bug fixes and improvements

Note: PostgreSQL and MSSQL Azure tests - supported from v4.2.0

Previous release notes can be found here. ]]> Tue, 12 Jul 11 12:58:00 +0000 http://updates.sentrigo.com/security-va/va-4.2.1-618.sup vPatch Security Update 4.1.11 http://updates.sentrigo.com/security/predefined-4.1.11-1266.sup

McAfee vPatch Security Update 4.1.11


This vPatch Security Update contains improvements for vPatch rules coverage and performance
  • Contains improvements and bug fixes in presentation layer
Previous release notes can be found here. ]]> Sun, 19 Jun 11 16:20:00 +0000 http://updates.sentrigo.com/security/predefined-4.1.11-1266.sup vPatch Security Update 4.1.10 http://updates.sentrigo.com/security/predefined-4.1.10-1255.sup

McAfee vPatch Security Update 4.1.10


This vPatch Security Update contains improvements for vPatch rules coverage and performance
  • Rule 6288 was added to protect against CVE-2009-1972 vulnerability.
  • Rule 6294 was added to protect against CVE-2009-1991 vulnerability.
  • Rules 1374, 1376, 6290 and 6292 were added to alert and monitor suspicious behavior activities.
  • Several rules that caused False-Positives were improved.
Previous release notes can be found here. ]]> Mon, 06 Jun 11 19:30:00 +0000 http://updates.sentrigo.com/security/predefined-4.1.10-1255.sup vPatch Security Update 4.1.9 http://updates.sentrigo.com/security/predefined-4.1.9-1239.sup

Sentrigo vPatch Security Update 4.1.9


This vPatch Security Update contains new rules for Oracle April 2011 CPU .
  • Rule 6284 was added to protect against CVE-2011-0787 vulnerability.
  • Rule 6286 was added to protect against privatly reported zero-day vulnerability.
Previous release notes can be found here. ]]> Thu, 21 Apr 11 17:17:00 +0000 http://updates.sentrigo.com/security/predefined-4.1.9-1239.sup VA Security Update 4.1.8 http://updates.sentrigo.com/security-va/va-4.1.8-563.sup

Sentrigo VA Security Update 4.1.8

This VA Security Update contains:
  • Bug fixes
Previous release notes can be found here. ]]> Mon, 04 Apr 11 18:28:00 +0000 http://updates.sentrigo.com/security-va/va-4.1.8-563.sup vPatch Security Update 4.1.7 http://updates.sentrigo.com/security/predefined-4.1.7-1223.sup

Sentrigo Security Update 4.1.7


This Security Update contains a new rule for a CVE-2010-3590 vulnerability, as well as several maintenance updates.
  • Rule 6282 was added to protect against CVE-2010-3590 vulnerability.
  • Rules 5760, 5510, 5584, 5586 and 1938 were improved to reduce false alerts.
Previous release notes can be found here. ]]> Thu, 24 Mar 11 13:23:00 +0000 http://updates.sentrigo.com/security/predefined-4.1.7-1223.sup VA Security Update 4.1.4 http://updates.sentrigo.com/security-va/va-4.1.4-524.sup

Sentrigo VA Security Update 4.1.4

This VA Security Update contains:
  • Added and improved Patches tests to verify the latest patching levels
  • Added and improved MySQL Vulnerabilities tests to alert on newly disclosed vulnerabilities
Previous release notes can be found here. ]]> Thu, 17 Feb 11 16:28:00 +0000 http://updates.sentrigo.com/security-va/va-4.1.4-524.sup VA Security Update 4.1.3 http://updates.sentrigo.com/security-va/va-4.1.3-515.sup

Sentrigo VA Security Update 4.1.3

This Security Update contains:
  • Added and improved Patches tests to verify the latest patching levels
  • Added and improved Vulnerabilities tests to alert on new database vulnerabilities
  • Improved Data Discovery tests to better discover sensitive data
Previous release notes can be found here. ]]> Sun, 13 Feb 11 14:31:00 +0000 http://updates.sentrigo.com/security-va/va-4.1.3-515.sup vPatch Security Update 4.1.2 http://updates.sentrigo.com/security/predefined-4.1.2-1210.sup

Sentrigo vPatch Security Update 4.1.2

This Security Update includes Virtual Patches for Oracle's Critical Patch Update (CPU) of January 2011.
Rules 6276, 6278 and 6280 were added to address newly disclosed vulnerabilities in Oracle databases.

Previous release notes can be found here. ]]> Fri, 21 Jan 11 12:17:00 +0000 http://updates.sentrigo.com/security/predefined-4.1.2-1210.sup vPatch Security Update 4.1.0 http://updates.sentrigo.com/security/predefined-4.1.0-1158.sup

Sentrigo vPatch Security Update 4.1.0

This Security Update includes Virtual Patches for Oracle's Critical Patch Update (CPU) of October 2010.
  • Rules 6272 and 6274 were added to address newly disclosed vulnerabilities in Oracle databases.
  • Rules 1015 and 1017 were updated to improve their coverage and reduce false alerts.

Previous release notes can be found here. ]]> Thu, 14 Oct 10 19:24:00 +0000 http://updates.sentrigo.com/security/predefined-4.1.0-1158.sup vPatch Security Update 4.0.2 http://updates.sentrigo.com/security/predefined-4.0.2-1139.sup

Sentrigo vPatch Security Update 4.0.2

This Security Update is a maintenance update.
  • Rules 1836 and 1837 were improved to reduce false alerts.
  • Rules 1830 and 6225 were improved to extend their coverage.
Previous release notes can be found here. ]]> Thu, 26 Aug 10 16:20:00 +0000 http://updates.sentrigo.com/security/predefined-4.0.2-1139.sup vPatch Security Update 4.0.1 http://updates.sentrigo.com/security/predefined-4.0.1-1128.sup

Sentrigo vPatch Security Update 4.0.1

This Security Update contains a new rule for a 0-day vulnerability, as well as maintenance updates.
  • Rule 6270 was added to protect against a 0-day vulnerability not yet fixed by Oracle.
  • Rule 1017 was split from 1015 to better detect attacks and reduce false alerts.
  • Rules 1836, 1837 and 6264 were improved to reduce false alerts.
  • The coverage of these rules was improved: 5510, 5520, 5530, 5540, 5550, 5560, 5570, 5700, 5710, 5720.
Previous release notes can be found here. ]]> Sun, 08 Aug 10 12:09:00 +0000 http://updates.sentrigo.com/security/predefined-4.0.1-1128.sup vPatch Security Update 4.0.0 http://updates.sentrigo.com/security/predefined-4.0.0-1118.sup

Sentrigo vPatch Security Update 4.0.0

This Security Update contains many new protections and several maintenance updates.
  • 11 rules were added to protect against some patched and some 0-day vulnerabilities:
    • 1015
    • 6266
    • 6268
    • 7834
    • 7836
    • 7838
    • 7840
    • 7842
    • 7844
    • 7846
    • 7848
  • Rule 6030 was updated for maintenance.

Previous release notes can be found here. ]]> Wed, 21 Jul 10 13:44:00 +0000 http://updates.sentrigo.com/security/predefined-4.0.0-1118.sup vPatch Security Update 3.5.7 http://updates.sentrigo.com/security/predefined-3.5.7-1109.sup

Sentrigo vPatch Security Update 3.5.7

This Security Update includes Virtual Patches for Oracle's Critical Patch Update (CPU) of July 2010.
  • Rule 6264 was added to address a newly disclosed vulnerability in Oracle databases.
  • Rule 6256 was already in place to protect Hedgehog users from vulnerabilities patched in this CPU.
  • Rule 1880 was updated for maintenance.

Previous release notes can be found here. ]]> Fri, 16 Jul 10 16:18:00 +0000 http://updates.sentrigo.com/security/predefined-3.5.7-1109.sup vPatch Security Update 3.5.6 http://updates.sentrigo.com/security/predefined-3.5.6-1055.sup

Sentrigo vPatch Security Update 3.5.6

This Security Update contains a new rule for a 0-day vulnerability, as well as maintenance updates.
  • Rule 6262 was added to protect against a 0-day vulnerability not yet fixed by Oracle.
  • Rules 5584 and 5586 were improved to reduce false alerts.
Previous release notes can be found here. ]]> Sun, 30 May 10 15:39:00 +0000 http://updates.sentrigo.com/security/predefined-3.5.6-1055.sup vPatch Security Update 3.5.5 http://updates.sentrigo.com/security/predefined-3.5.5-1040.sup

Sentrigo vPatch Security Update 3.5.5

This Security Update contains additional and improved protections for recent Oracle CPUs, as well as maintenance updates.
  • Rule 6258 was added to protect against an issue patched in the April 2010 CPU.
  • Rule 6260 was added to protect against a 0-day vulnerability reported to Oracle by Sentrigo.
  • Rules 1830, 5586, 5590 and 6254 were improved to reduce false alerts and increase coverage.
  • Alert level has been tuned in rules 5590, 5700 and 5730.
  • Rule 6224 has been renumbered 6225 in Server versions 3.5.2 and above.

Previous release notes can be found here. ]]> Thu, 20 May 10 15:23:00 +0000 http://updates.sentrigo.com/security/predefined-3.5.5-1040.sup vPatch Security Update 3.5.4 http://updates.sentrigo.com/security/predefined-3.5.4-1022.sup

Sentrigo vPatch Security Update 3.5.4

This Security Update includes Virtual Patches for Oracle's Critical Patch Update (CPU) of April 2010.
  • Rules 6248, 6250 and 6252 were already in place to protect Hedgehog users from vulnerabilities patched in this CPU.
  • Rule 6256 was added to address a newly disclosed vulnerability in Oracle databases.

Previous release notes can be found here. ]]> Sun, 18 Apr 10 17:32:00 +0000 http://updates.sentrigo.com/security/predefined-3.5.4-1022.sup vPatch Security Update 3.5.3 http://updates.sentrigo.com/security/predefined-3.5.3-1012.sup

Sentrigo vPatch Security Update 3.5.3

This Security Update contains many new protections, as well as maintenance updates.
  • The following rules were added to protect against known vulnerabilities: 1046, 1090, 1110, 1224, 1349, 1351, 1372, 5060, 6101, 6103, 6105, 6111, 6113 and 6115.
  • Numerous rules have been modified to improve their coverage and reduce false alerts.
  • Numerous rules have been modified to clarify their description.

Previous release notes can be found here. ]]> Sun, 28 Mar 10 17:45:00 +0000 http://updates.sentrigo.com/security/predefined-3.5.3-1012.sup vPatch Security Update 3.5.2 http://updates.sentrigo.com/security/predefined-3.5.2-989.sup

Sentrigo vPatch Security Update 3.5.2

This Security Update includes Virtual Patches for Oracle's Critical Patch Update (CPU) of January 2010.
  • Rules 1092, 1118, 1120 and 6224 were already in place to protect Hedgehog users from vulnerabilities patched in this CPU.
  • Rule 6254 was added to address a newly disclosed vulnerability in Oracle databases.
  • Rules 210, 1106, 1206, 1208 and 5560 were updated for maintenance.

Previous release notes can be found here. ]]> Thu, 14 Jan 10 15:02:00 +0000 http://updates.sentrigo.com/security/predefined-3.5.2-989.sup vPatch Security Update 3.5.1 http://updates.sentrigo.com/security/predefined-3.5.1-983.sup

Sentrigo vPatch Security Update 3.5.1

This Security Update contains many new protections, as well as maintenance updates.
  • The following rules were added to protect against known and 0-day vulnerabilities: 1113, 1157, 1366, 1368, 1370, 1837, 1842, 2142, 6242, 6244, 6246, 6248, 6250 and 6252.
  • Numerous rules have been modified to improve their coverage.
  • Numerous rules have been modified to clarify their description.
  • On Hedgehog Server versions 3.5.1 and later, rule 1837 was added. This rule is very useful in detecting general (even 0-day) SQL Injection attacks, but may adversely affect system performance. For this reason, rule 1837 is disabled by default, and may be enabled by users who wish to activate it.

Previous release notes can be found here. ]]> Sun, 10 Jan 10 12:44:00 +0000 http://updates.sentrigo.com/security/predefined-3.5.1-983.sup vPatch Security Update 3.5.0 http://updates.sentrigo.com/security/predefined-3.5.0-902.sup

Sentrigo vPatch Security Update 3.5.0

This Security Update includes more Virtual Patches for Oracle's October 2009 CPU.
  • Rules 6238 and 6240 were added to address remaining vulnerabilities disclosed in the CPU
  • Rules 2140, 6234 and 6236 were added to address publicly-known attack vectors
  • Rule 5590 was updated to improve its ability to identify attacks
Previous release notes can be found here. ]]> Wed, 04 Nov 09 13:34:00 +0000 http://updates.sentrigo.com/security/predefined-3.5.0-902.sup vPatch Security Update 3.0.2 http://updates.sentrigo.com/security/predefined-3.0.2-887.sup

Sentrigo vPatch Security Update 3.0.2

This Security Update includes Virtual Patches for Oracle's October 2009 CPU.
  • Rules 6226, 6228, 6230 and 6232 were added to address newly disclosed vulnerabilities in Oracle databases
  • Rules 1112, 6214 and 6216 were already in place to protect Hedgehog users from vulnerabilities patched in this CPU
  • Rules 1158, 1166, 5540, 5550 and 6128 were updated to improve their coverage
 ]]> Thu, 22 Oct 09 09:41:00 +0000 http://updates.sentrigo.com/security/predefined-3.0.2-887.sup vPatch Security Update 3.0.1 http://updates.sentrigo.com/security/predefined-3.0.1-876.sup

Sentrigo vPatch Security Update 3.0.1

This security update introduces many new and improved vPatch rules. In this update:
  • 27 new rules were introduced to detect attacks and suspicious activity.
  • The existing rules were optimized for performance and effectiveness.
  • A few rules underwent minor maintenance updates.
Previous release notes can be found here. ]]> Mon, 05 Oct 09 09:20:00 +0000 http://updates.sentrigo.com/security/predefined-3.0.1-876.sup vPatch Security Update 3.0.0 http://updates.sentrigo.com/security/predefined-3.0.0-781.sup

Sentrigo vPatch Security Update 3.0.0

This is a maintenance update of the vPatch rules. In this update:
  • The rules were streamlined and optimized for accuracy and performance.
  • The names of the rules were clarified to better reflect their meaning.
  • The tags attached to the rules were standardized and made easier to use. More on predefined tags...
  • The following rules have been consolidated:
    • Rule 1124 was merged into rule 1096.
    • Rule 1134 was merged into rule 1060.
    • Rule 2100 was merged into rule 2090.
    • Rule 7000 was merged into rule 5010.
    • Rule 7010 was merged into rule 5040.

Previous release notes can be found here. ]]> Wed, 12 Aug 09 14:31:00 +0000 http://updates.sentrigo.com/security/predefined-3.0.0-781.sup vPatch Security Update 2.5.3 http://updates.sentrigo.com/security/predefined-2.5.3-749.sup

Sentrigo vPatch Security Update 2.5.3

This Security Update includes Virtual Patches for Oracle's July 2009 CPU.
  • Rules 5580, 5582, 6030, 6210, 6212, 6214 and 6216 were added, to address advanced exploits of Oracle databases
  • Rules 1012, 1056 and 6202 were already in place to protect Hedgehog users from vulnerabilities patched in this CPU
  • Rules 1083, 1096, 5670, 6000, 6010 and 6020 were updated for maintenance
 ]]> Thu, 16 Jul 09 10:10:00 +0000 http://updates.sentrigo.com/security/predefined-2.5.3-749.sup