<> Trend Micro Incorporated November 13, 2018 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) Smart Protection Server 3.3 Operating System Patch 2 - Build 1098 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Contents =================================================================== 1. Overview of this OS Patch Release 1.1 Resolved Issues 1.2 Files Included in this Release 2. Documentation Set 3. System Requirements 4. Installation 4.1 Installing 4.2 Uninstalling 5. Post-installation Configuration 6. Known Issues 7. Release History 8. Contact Information 9. About Trend Micro 10. License Agreement =================================================================== 1. Overview of this OS Patch Release ======================================================================= Install this regular operating system (OS) patch to upgrade system resource packages to remove several vulnerabilities and defects in Smart Protection Server 3.3. This patch is equivalent to performing a YUM package update for November 2018. NOTE: The total installation time for this OS patch may take about five to 10 minutes to complete. 1.1 Resolved Issues ==================================================================== This OS patch resolves the following issue: Issue: The version of the Linux kernel used in Smart Protection Server 3.3 contains the SegmentSmack and FragmentSmack flaws where IP fragments and TCP segments with random offsets may cause a remote denial of service (CVE-2018-5390). ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution: This regular OS patch applies Linux kernel 3.10.0-862.14.4 to fix the vulnerability. 1.2 Files Included in this Release ==================================================================== A. Files for Current Issues -------------------------------------------------------------------- Filename Build No. -------------------------------------------------------------------- tmsss-os-patch-3.3-1002.x86_64.tgz 3.3.1098 B. Files for Previous Issues -------------------------------------------------------------------- Not applicable. 2. Documentation Set ======================================================================= To download or view electronic versions of the documentation for this product, go to http://docs.trendmicro.com 3. System Requirements ======================================================================= You must upgrade Smart Protection Server 3.3 to Patch 1 before installing this OS patch. 4. Installation ======================================================================= This section explains key steps for installing the OS patch. 4.1 Installing ==================================================================== To install: 1. Extract the files from the OS patch package to a temporary folder. 2. Log on to the Smart Protection Server web console using an account with administrator privileges. 3. Click "Updates > Program" on the main menu. 4. In the "Upload Component" section, browse to the correct folder, select the "tmsss-os-patch-3.3-1002.x86_64.tgz" OS patch file, and click "Upload". After the server loads the package, information on the available program files appear. This is needed to restart the server. 5. Click the "Update Now" button if you have no concerns. After the update process is completed, the current version of Smart Protection Server Operating System becomes 1002. 4.2 Uninstallation ==================================================================== There are no special uninstallation instructions. 5. Post-installation Configuration ======================================================================= No post-installation steps are required. 6. Known Issues ======================================================================= There are no known issues for this OS patch release. 7. Release History ======================================================================= For more information about updates to this product, go to: http://www.trendmicro.com/download 8. Contact Information ======================================================================= A license to Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, you must renew Maintenance on an annual basis at Trend Micro's then-current Maintenance fees. Contact Trend Micro via fax, phone, and email, or visit our website to download evaluation copies of Trend Micro products. http://www.trendmicro.com/us/about-us/contact/index.html NOTE: This information is subject to change without notice. 9. About Trend Micro ======================================================================= Smart, simple, security that fits As a global leader in IT security, Trend Micro develops innovative security solutions that make the world safe for businesses and consumers to exchange digital information. Copyright 2018, Trend Micro Incorporated. All rights reserved. Trend Micro and the t-ball logo are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 10. License Agreement ======================================================================= View information about your license agreement with Trend Micro at: http://www.trendmicro.com/us/about-us/legal-policies/ license-agreements Third-party licensing agreements can be viewed: - By selecting the "About" option in the application user interface - By referring to the "Legal" page of the Administrator's Guide