Sentrigo Security Updates http://support.sentrigo.com/ RSS Feed for the latest Sentrigo Security Updates en-us Mon, 30 Aug 10 11:51:22 +0000 Mon, 30 Aug 10 11:51:22 +0000 60 Security Update 4.0.2 http://updates.sentrigo.com/security/predefined-4.0.2-1139.sup

Sentrigo Security Update 4.0.2

This Security Update is a maintenance update.
  • Rules 1836 and 1837 were improved to reduce false alerts.
  • Rules 1830 and 6225 were improved to extend their coverage.
Previous release notes can be found here. ]]> Thu, 26 Aug 10 16:20:00 +0000 http://updates.sentrigo.com/security/predefined-4.0.2-1139.sup Security Update 4.0.1 http://updates.sentrigo.com/security/predefined-4.0.1-1128.sup

Sentrigo Security Update 4.0.1

This Security Update contains a new rule for a 0-day vulnerability, as well as maintenance updates.
  • Rule 6270 was added to protect against a 0-day vulnerability not yet fixed by Oracle.
  • Rule 1017 was split from 1015 to better detect attacks and reduce false alerts.
  • Rules 1836, 1837 and 6264 were improved to reduce false alerts.
  • The coverage of these rules was improved: 5510, 5520, 5530, 5540, 5550, 5560, 5570, 5700, 5710, 5720.
Previous release notes can be found here. ]]> Sun, 08 Aug 10 12:09:00 +0000 http://updates.sentrigo.com/security/predefined-4.0.1-1128.sup Security Update 4.0.0 http://updates.sentrigo.com/security/predefined-4.0.0-1118.sup

Sentrigo Security Update 4.0.0

This Security Update contains many new protections and several maintenance updates.
  • 11 rules were added to protect against some patched and some 0-day vulnerabilities:
    • 1015
    • 6266
    • 6268
    • 7834
    • 7836
    • 7838
    • 7840
    • 7842
    • 7844
    • 7846
    • 7848
  • Rule 6030 was updated for maintenance.

Previous release notes can be found here. ]]> Wed, 21 Jul 10 13:44:00 +0000 http://updates.sentrigo.com/security/predefined-4.0.0-1118.sup Security Update 3.5.7 http://updates.sentrigo.com/security/predefined-3.5.7-1109.sup

Sentrigo Security Update 3.5.7

This Security Update includes Virtual Patches for Oracle's Critical Patch Update (CPU) of July 2010.
  • Rule 6264 was added to address a newly disclosed vulnerability in Oracle databases.
  • Rule 6256 was already in place to protect Hedgehog users from vulnerabilities patched in this CPU.
  • Rule 1880 was updated for maintenance.

Previous release notes can be found here. ]]> Fri, 16 Jul 10 16:18:00 +0000 http://updates.sentrigo.com/security/predefined-3.5.7-1109.sup Security Update 3.5.6 http://updates.sentrigo.com/security/predefined-3.5.6-1055.sup

Sentrigo Security Update 3.5.6

This Security Update contains a new rule for a 0-day vulnerability, as well as maintenance updates.
  • Rule 6262 was added to protect against a 0-day vulnerability not yet fixed by Oracle.
  • Rules 5584 and 5586 were improved to reduce false alerts.
Previous release notes can be found here. ]]> Sun, 30 May 10 15:39:00 +0000 http://updates.sentrigo.com/security/predefined-3.5.6-1055.sup Security Update 3.5.5 http://updates.sentrigo.com/security/predefined-3.5.5-1040.sup

Sentrigo Security Update 3.5.5

This Security Update contains additional and improved protections for recent Oracle CPUs, as well as maintenance updates.
  • Rule 6258 was added to protect against an issue patched in the April 2010 CPU.
  • Rule 6260 was added to protect against a 0-day vulnerability reported to Oracle by Sentrigo.
  • Rules 1830, 5586, 5590 and 6254 were improved to reduce false alerts and increase coverage.
  • Alert level has been tuned in rules 5590, 5700 and 5730.
  • Rule 6224 has been renumbered 6225 in Server versions 3.5.2 and above.

Previous release notes can be found here. ]]> Thu, 20 May 10 15:23:00 +0000 http://updates.sentrigo.com/security/predefined-3.5.5-1040.sup Security Update 3.5.4 http://updates.sentrigo.com/security/predefined-3.5.4-1022.sup

Sentrigo Security Update 3.5.4

This Security Update includes Virtual Patches for Oracle's Critical Patch Update (CPU) of April 2010.
  • Rules 6248, 6250 and 6252 were already in place to protect Hedgehog users from vulnerabilities patched in this CPU.
  • Rule 6256 was added to address a newly disclosed vulnerability in Oracle databases.

Previous release notes can be found here. ]]> Sun, 18 Apr 10 17:32:00 +0000 http://updates.sentrigo.com/security/predefined-3.5.4-1022.sup Security Update 3.5.3 http://updates.sentrigo.com/security/predefined-3.5.3-1012.sup

Sentrigo Security Update 3.5.3

This Security Update contains many new protections, as well as maintenance updates.
  • The following rules were added to protect against known vulnerabilities: 1046, 1090, 1110, 1224, 1349, 1351, 1372, 5060, 6101, 6103, 6105, 6111, 6113 and 6115.
  • Numerous rules have been modified to improve their coverage and reduce false alerts.
  • Numerous rules have been modified to clarify their description.

Previous release notes can be found here. ]]> Sun, 28 Mar 10 17:45:00 +0000 http://updates.sentrigo.com/security/predefined-3.5.3-1012.sup Security Update 3.5.2 http://updates.sentrigo.com/security/predefined-3.5.2-989.sup

Sentrigo Security Update 3.5.2

This Security Update includes Virtual Patches for Oracle's Critical Patch Update (CPU) of January 2010.
  • Rules 1092, 1118, 1120 and 6224 were already in place to protect Hedgehog users from vulnerabilities patched in this CPU.
  • Rule 6254 was added to address a newly disclosed vulnerability in Oracle databases.
  • Rules 210, 1106, 1206, 1208 and 5560 were updated for maintenance.

Previous release notes can be found here. ]]> Thu, 14 Jan 10 15:02:00 +0000 http://updates.sentrigo.com/security/predefined-3.5.2-989.sup Security Update 3.5.1 http://updates.sentrigo.com/security/predefined-3.5.1-983.sup

Sentrigo Security Update 3.5.1

This Security Update contains many new protections, as well as maintenance updates.
  • The following rules were added to protect against known and 0-day vulnerabilities: 1113, 1157, 1366, 1368, 1370, 1837, 1842, 2142, 6242, 6244, 6246, 6248, 6250 and 6252.
  • Numerous rules have been modified to improve their coverage.
  • Numerous rules have been modified to clarify their description.
  • On Hedgehog Server versions 3.5.1 and later, rule 1837 was added. This rule is very useful in detecting general (even 0-day) SQL Injection attacks, but may adversely affect system performance. For this reason, rule 1837 is disabled by default, and may be enabled by users who wish to activate it.

Previous release notes can be found here. ]]> Sun, 10 Jan 10 12:44:00 +0000 http://updates.sentrigo.com/security/predefined-3.5.1-983.sup Security Update 3.5.0 http://updates.sentrigo.com/security/predefined-3.5.0-902.sup

Sentrigo Security Update 3.5.0

This Security Update includes more Virtual Patches for Oracle's October 2009 CPU.
  • Rules 6238 and 6240 were added to address remaining vulnerabilities disclosed in the CPU
  • Rules 2140, 6234 and 6236 were added to address publicly-known attack vectors
  • Rule 5590 was updated to improve its ability to identify attacks
Previous release notes can be found here. ]]> Wed, 04 Nov 09 13:34:00 +0000 http://updates.sentrigo.com/security/predefined-3.5.0-902.sup Security Update 3.0.2 http://updates.sentrigo.com/security/predefined-3.0.2-887.sup

Sentrigo Security Update 3.0.2

This Security Update includes Virtual Patches for Oracle's October 2009 CPU.
  • Rules 6226, 6228, 6230 and 6232 were added to address newly disclosed vulnerabilities in Oracle databases
  • Rules 1112, 6214 and 6216 were already in place to protect Hedgehog users from vulnerabilities patched in this CPU
  • Rules 1158, 1166, 5540, 5550 and 6128 were updated to improve their coverage
 ]]> Thu, 22 Oct 09 09:41:00 +0000 http://updates.sentrigo.com/security/predefined-3.0.2-887.sup Security Update 3.0.1 http://updates.sentrigo.com/security/predefined-3.0.1-876.sup

Sentrigo Security Update 3.0.1

This security update introduces many new and improved vPatch rules. In this update:
  • 27 new rules were introduced to detect attacks and suspicious activity.
  • The existing rules were optimized for performance and effectiveness.
  • A few rules underwent minor maintenance updates.
Previous release notes can be found here. ]]> Mon, 05 Oct 09 09:20:00 +0000 http://updates.sentrigo.com/security/predefined-3.0.1-876.sup Security Update 3.0.0 http://updates.sentrigo.com/security/predefined-3.0.0-781.sup

Sentrigo Security Update 3.0.0

This is a maintenance update of the vPatch rules. In this update:
  • The rules were streamlined and optimized for accuracy and performance.
  • The names of the rules were clarified to better reflect their meaning.
  • The tags attached to the rules were standardized and made easier to use. More on predefined tags...
  • The following rules have been consolidated:
    • Rule 1124 was merged into rule 1096.
    • Rule 1134 was merged into rule 1060.
    • Rule 2100 was merged into rule 2090.
    • Rule 7000 was merged into rule 5010.
    • Rule 7010 was merged into rule 5040.

Previous release notes can be found here. ]]> Wed, 12 Aug 09 14:31:00 +0000 http://updates.sentrigo.com/security/predefined-3.0.0-781.sup Security Update 2.5.3 http://updates.sentrigo.com/security/predefined-2.5.3-749.sup

Sentrigo Security Update 2.5.3

This Security Update includes Virtual Patches for Oracle's July 2009 CPU.
  • Rules 5580, 5582, 6030, 6210, 6212, 6214 and 6216 were added, to address advanced exploits of Oracle databases
  • Rules 1012, 1056 and 6202 were already in place to protect Hedgehog users from vulnerabilities patched in this CPU
  • Rules 1083, 1096, 5670, 6000, 6010 and 6020 were updated for maintenance
 ]]> Thu, 16 Jul 09 10:10:00 +0000 http://updates.sentrigo.com/security/predefined-2.5.3-749.sup