Title.

Assuria Auditor AutoUpdate #89

Introduction

This update is an Assuria content update suitable for application to all Assuria Auditor agents.

Security Content Updates

Security content based on newly published vendor security bulletins (or similar) is included for the agents listed below:

• HPUX 11.0, 11.11, 11.23, 11.31 (PA-RISC)
• HPUX 11.23, 11.31 (Itanium)
• IBM AIX 4.3.3, 5.1, 5.2, 5.3
• IBM AIX 6.1
• Microsoft Windows 2000 (Server and Professional)
• Microsoft Windows Server 2003
• Microsoft Windows Server 2008
• Microsoft Windows Vista
• Novell SUSE Enterprise Linux 9 (x86)
• Novell SUSE Enterprise Linux 10 (x86)
• Red Hat Enterprise Linux 3 and later (x86 and x64)
• Sun Solaris 8
• Sun Solaris 9
• Sun Solaris 10 (SPARC)
   

New XML Extract

The update introduces a new customer requested XML export, as part of session based reporting. The new export produces output conforming to a new XML schema. A definition of this schema, in Relax NG format, is available on request. This new export is available by selecting 'New XML' in the session reporting pane. The previous XML format is still available, under the option 'Classic XML'.

The Classic XML format is retained for backwards compatibility with existing consumer applications. Any new applications wishing to consume XML output from Assuria Auditor should use the new format.
 

Optional inclusion of session name in report file name

The update introduces a new customer requested option, to include the session name in the file names of session reports. The option is switched off by default, and must be switched on through the Maintenance-Options-Reporting tab.

Selecting this option will cause all session report files, including xml and csv extracts and files exported using the export option, to be named !cardinal-date!_!session_name!.!extension! or, in the case of csv reports, !cardinal-date!_!session_name!_!level!.!extension!. If the option is not selected, all such files will continue to have their previous names.

 

Invoked by information in policy navigators

The policy navigators for all fully supported platforms now include 'invoked by' information for each check, indicating the policies and check groups which invoke the check.

Update details

Console update

   o Database update

    o New Files

      - bin/tcl/newxmlrep.tbc

    o Updated Files

      - etc/masteragentvariables.ini

      - bin/config.tbc

      - bin/tcl/IndexedResults.tbc

      - bin/tcl/rep_utils.tbc

      - bin/tcl/report.tbc

      - bin/tcl/startup.tbc

      - bin/tcl/treeutils.tbc

      - bin/tcl/xmlexcp.tbc

    o Updated Policy Navigators for all supported platforms

Agent updates

Updates are included for the following agents:

    o HP 11.00, 11.11, 11.23, 11.31 (PA-RISC)

    o HP 11.23, 11.31 (Itanium)

    o IBM AIX 4.3.3, 5.1, 5.2, 5.3

    o IBM AIX 6.1

    o Microsoft Windows 2000 (Server and Professional)

    o Microsoft Windows Server 2003

    o Microsoft Windows Server 2008

    o Microsoft Windows Vista

    o Novell SUSE Enterprise Linux 9 (x86)

    o Novell SUSE Enterprise Linux 10 (x86)

    o Red Hat Enterprise Linux 3, 4, 5

    o Sun Solaris 8

    o Sun Solaris 9

    o Sun Solaris 10 (SPARC)

HP 11.00, 11.11, 11.23, 11.31 (PA-RISC)

    o Updated Patch Databases

      - bin/patch_HP-UX.data

      - bin/patch_HP-UX.ref

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_89.zip

      - lib/xpud3_89.sgn

      - etc/update.ini

HP 11.23, 11.31 (Itanium)

    o Updated Patch Databases

      - bin/patch_HP-UX.data

      - bin/patch_HP-UX.ref

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_89.zip

      - lib/xpud3_89.sgn

      - etc/update.ini

IBM AIX 4.3.3, 5.1, 5.2, 5.3

    o New Checks

      - aix-IZ10840-fix

      - aix-IZ10841-fix

      - aix-IZ10842-fix

      - aix-IZ10843-fix

      - aix-IZ10844-fix

      - aix-IZ11214-fix

      - aix-IZ11328-fix

      - aix-IZ11687-fix

      - aix-IZ17891-fix

      - aix-IZ19071-fix

      - aix-IZ19080-fix

      - aix-IZ19420-fix

      - aix-IZ19425-fix

      - aix-IZ19765-fix

      - aix-IZ19905-fix

      - aix-IZ19911-fix

      - aix-IZ20613-fix

      - aix-IZ20635-fix

      - aix-IZ20843-fix

      - aix-IZ20969-fix

      - aix-IZ21481-fix

      - aix-IZ21494-fix

      - aix-IZ21506-fix

      - aix-IZ22346-fix

      - aix-IZ22347-fix

      - aix-IZ22348-fix

      - aix-IZ26667-fix

      - aix-IZ26668-fix

      - aix-IZ26669-fix

      - aix-IZ26670-fix

      - aix-IZ26671-fix

      - aix-IZ26672-fix

      - aix-IZ29014-fix

      - aix-IZ29046-fix

      - aix-IZ30231-fix

      - aix-IZ30238-fix

      - aix-IZ30248-fix

      - aix-IZ32016-fix

      - aix-IZ32051-fix

      - aix-IZ32172-fix

      - aix-IZ33088-fix

      - aix-IZ34393-fix

      - aix-IZ34478-fix

      - aix-IZ34481-fix

      - aix-IZ34753-fix

      - aix-IZ34783-fix

      - aix-IZ34785-fix

      - aix-IZ35170-fix

      - aix-IZ35181-fix

      - aix-IZ35209-fix

    o Updated Policies

      - aix-fixes

      - Initial-1

      - Initial-All

      - Maintenance-1

      - Maintenance-All

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_89.zip

      - lib/xpud3_89.sgn

      - etc/update.ini

IBM AIX 6.1

    o New Checks

      - aix-IZ10840-fix

      - aix-IZ10841-fix

      - aix-IZ10842-fix

      - aix-IZ10843-fix

      - aix-IZ10844-fix

      - aix-IZ11214-fix

      - aix-IZ11328-fix

      - aix-IZ11687-fix

      - aix-IZ17891-fix

      - aix-IZ19071-fix

      - aix-IZ19080-fix

      - aix-IZ19420-fix

      - aix-IZ19425-fix

      - aix-IZ19765-fix

      - aix-IZ19905-fix

      - aix-IZ19911-fix

      - aix-IZ20613-fix

      - aix-IZ20635-fix

      - aix-IZ20843-fix

      - aix-IZ20969-fix

      - aix-IZ21481-fix

      - aix-IZ21494-fix

      - aix-IZ21506-fix

      - aix-IZ22346-fix

      - aix-IZ22347-fix

      - aix-IZ22348-fix

      - aix-IZ26667-fix

      - aix-IZ26668-fix

      - aix-IZ26669-fix

      - aix-IZ26670-fix

      - aix-IZ26671-fix

      - aix-IZ26672-fix

      - aix-IZ29014-fix

      - aix-IZ29046-fix

      - aix-IZ30231-fix

      - aix-IZ30238-fix

      - aix-IZ30248-fix

      - aix-IZ32016-fix

      - aix-IZ32051-fix

      - aix-IZ32172-fix

      - aix-IZ33088-fix

      - aix-IZ34393-fix

      - aix-IZ34478-fix

      - aix-IZ34481-fix

      - aix-IZ34753-fix

      - aix-IZ34783-fix

      - aix-IZ34785-fix

      - aix-IZ35170-fix

      - aix-IZ35181-fix

      - aix-IZ35209-fix

    o Updated Policies

      - PatchChecks

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_89.zip

      - lib/xpud3_89.sgn

      - etc/update.ini

Microsoft Windows 2000 (Server and Professional)

    o New Checks

      - win-ms08kb954600-update

      - win-ms08kb956802-update

      - win-ms08kb957173-update

      - win-ms08kb958215-update

      - win-ms08kb960714-update

    o Updated Policies

      - Initial-1

      - Initial-All

      - Maintenance-1

      - Maintenance-All

      - versionChecks

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_89.zip

      - lib/xpud3_89.sgn

      - etc/update.ini

Microsoft Windows Server 2003

    o New Checks

      - win-ms08kb954600-update

      - win-ms08kb956802-update

      - win-ms08kb957173-update

      - win-ms08kb958215-update

      - win-ms08kb960714-update

    o Updated Policies

      - Initial-1

      - Initial-All

      - Maintenance-1

      - Maintenance-All

      - versionChecks

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_89.zip

      - lib/xpud3_89.sgn

      - etc/update.ini

Microsoft Windows Server 2008

o New Checks
- win-ms08kb954600-update
- win-ms08kb956802-update
- win-ms08kb957173-update
- win-ms08kb958215-update
- win-ms08kb959349-update
- win-ms08kb960714-update

o Updated Policies
- PatchChecks

o Auto Update Files
- rulesets/unarchivePolicy
- signatures/rulesets/unarchivePolicy.sgn
- lib/xpud3_89.zip
- lib/xpud3_89.sgn
- etc/update.ini
 

Microsoft Windows Vista

o New Checks
- win-ms08kb954600-update
- win-ms08kb956802-update
- win-ms08kb957173-update
- win-ms08kb958215-update
- win-ms08kb959349-update
- win-ms08kb960714-update
- IEJavaPermissions
- IEComponentManifest

o Updated Policies
- CheckAllBaselines
- Initial-1
- Initial-3
- Initial-4
- Initial-All
- Maintenance-1
- Maintenance-4
- Maintenance-5
- Maintenance-All
- PatchChecks

o Auto Update Files
- rulesets/unarchivePolicy
- signatures/rulesets/unarchivePolicy.sgn
- lib/xpud3_89.zip
- lib/xpud3_89.sgn
- etc/update.ini

Novell SUSE Enterprise Linux 9 (x86)

    o New checks

      - SuSE-SA-2008-054

      - SuSE-SA-2008-055

      - SuSE-SA-2008-056

      - SuSE-SA-2008-057

    o Updated policies

      - Initial-1

      - Initial-All

      - Maintenance-1

      - Maintenance-All

      - ssa

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_89.zip

      - lib/xpud3_89.sgn

      - etc/update.ini

Novell SUSE Enterprise Linux 10 (x86)

    o New Checks

      - SuSE-SA-2008-054

      - SuSE-SA-2008-055

      - SuSE-SA-2008-056

      - SuSE-SA-2008-057

    o Updated policies

      - Initial-1

      - Initial-All

      - Maintenance-1

      - Maintenance-All

      - ssa

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_89.zip

      - lib/xpud3_89.sgn

      - etc/update.ini

Red Hat Enterprise Linux 3, 4, 5

    o New Checks

      - RHSA-2008-0580

      - RHSA-2008-0617

      - RHSA-2008-0955

      - RHSA-2008-0967

      - RHSA-2008-0972

      - RHSA-2008-0974

      - RHSA-2008-0976

      - RHSA-2008-0977

      - RHSA-2008-0978

      - RHSA-2008-0980

      - RHSA-2008-0981

      - RHSA-2008-0982

      - RHSA-2008-0988

      - RHSA-2008-1001

      - RHSA-2008-1018

      - RHSA-2008-1025

    o Updated Checks

      - RHSA-2008-0789

      - RHSA-2008-0812

      - RHSA-2008-0885

      - RHSA-2008-0890

      - RHSA-2008-0891

      - RHSA-2008-0892

      - RHSA-2008-0897

      - RHSA-2008-0906

      - RHSA-2008-0945

      - RHSA-2008-0957

      - RHSA-2008-0965

    o Updated Policies

      - Initial-1

      - Initial-All

      - Maintenance-1

      - Maintenance-All

      - rhsa

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_89.zip

      - lib/xpud3_89.sgn

      - etc/update.ini

Sun Solaris 8

    o Updated Patch Databases

      - bin/patch_Solaris.data

      - bin/patch_Solaris.ref

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_89.zip

      - lib/xpud3_89.sgn

      - etc/update.ini

Sun Solaris 9

    o Updated Patch Databases

      - bin/patch_Solaris.data

      - bin/patch_Solaris.ref

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_89.zip

      - lib/xpud3_89.sgn

      - etc/update.ini

Sun Solaris 10 (SPARC)

    o Updated Patch Databases

      - bin/patch_Solaris.data

      - bin/patch_Solaris.ref

    o Auto Update Files

      - rulesets/unarchivePolicy

      - signatures/rulesets/unarchivePolicy.sgn

      - lib/xpud3_89.zip

      - lib/xpud3_89.sgn

      - etc/update.ini