まっちゃだいふくの日記

セキュリティのこと、ITの気になった記事をリンクしています。

Deep Security Agent 20.0.0-4726 (Linux/Windows/UNIX Agent) (20 LTS Update 2022-05-31)がリリースされました ＠ 機能追加でDSの各種ステータス等を出すようになったみたいだけどSOCでは欲しかったかも。

IT セキュリティ トレンドマイクロ

Deep Security Linux Agent - 20.0.0-4726 (20 LTS Update 2022-05-31)

Deep Security Agent - 20.0.0-4726 (20 LTS Update 2022-05-31)
Release date: May 31, 2022
Build number: 20.0.0-4726

Enhancements

  • Updated Deep Security Relay to record its status and other metrics for potential troubleshooting. DS-65763

Resolved issues

  • Trust entities "allow by target" rules sometimes blocked processes they weren't intended to block. SF04922652/SEG-131710/DS-71060
  • Deep Security Agent reported false positive "Created/Deleted" Integrity Monitoring events under some configurations. SF05434164/SEG-136425/DS-70656
  • With Activity Monitoring enabled, Deep Security Agent had high system CPU usage when events were being generated rapidly. 05107582/SEG-128170/DS-71486
  • Deep Security Agent Scanner library didn't work properly with highly-interrupted SAP applications on Linux systems. This resulted in files were scanned, but results might be unable to report to the SAP applications. SF05390384/SEG-136659/DS-71251
  • Following an upgrade, Deep Security Agent would send continuous "Security update in progress" reports to Deep Security Manager. SF05253107/SEG-131983/DS-69747
  • With Intrusion Prevention enabled, a packet transmission error caused some systems to crash. SEG-136843/DSSEG-7524
  • Updated Deep Security Relay to prevent Deep Security Agent from retrieving incomplete signature files for packages. SF05332854/SEG-134394/DS-71228
  • Deep Security Agent had connectivity issues caused when a Server Name Indicator (SNI) used an invalid format. SEG-127761/DS-70806
  • An abnormal restart of Deep Security Agent sometimes lead to "Anti-Malware Engine Offline" errors. SEG-140234/DS-71333

Security updates

Security updates are included in this release. For more information about how we protect against vulnerabilities, visit Vulnerability Response. Please note, in line with responsible disclosure practices, CVE details will only be made available for select security updates once patches have been made available for all impacted releases. DS-52329

  • Highest CVSS score: 7.5
  • Highest severity: High
What's new in Deep Security Agent? | Deep Security

Deep Security Windows Agent - 20.0.0-4726 (20 LTS Update 2022-05-31)

Deep Security Agent - 20.0.0-4726 (20 LTS Update 2022-05-31)
Release date: May 31, 2022
Build number: 20.0.0-4726

Enhancements

  • Updated Deep Security Relay to record its status and other metrics for potential troubleshooting. DS-65763

Resolved issues

  • Trust entities "allow by target" rules sometimes blocked processes they weren't intended to block. SF04922652/SEG-131710/DS-71060
  • Deep Security Agent reported false positive "Created/Deleted" Integrity Monitoring events under some configurations. SF05434164/SEG-136425/DS-70656
  • Updated Deep Security Relay to prevent Deep Security Agent from retrieving incomplete signature files for packages. SF05332854/SEG-134394/DS-71228
  • Deep Security Agent had connectivity issues caused when a Server Name Indicator (SNI) used an invalid format. SEG-127761/DS-70806
  • An abnormal restart of Deep Security Agent sometimes lead to "Anti-Malware Engine Offline" errors. SEG-140234/DS-71333

Security updates

Security updates are included in this release. For more information about how we protect against vulnerabilities, visit Vulnerability Response. Please note, in line with responsible disclosure practices, CVE details will only be made available for select security updates once patches have been made available for all impacted releases. DS-52329

  • Highest CVSS score: 7.5
  • Highest severity: High
What's new in Deep Security Agent? | Deep Security

Deep Security UNIX Agent - 20.0.0-4726 (20 LTS Update 2022-05-31)

Deep Security Agent - 20.0.0-4726 (20 LTS Update 2022-05-31)
Release date: May 31, 2022
Build number: 20.0.0-4726

Resolved issues

  • Deep Security Agent reported false positive "Created/Deleted" Integrity Monitoring events under some configurations. SF05434164/SEG-136425/DS-70656
  • Deep Security Agent had connectivity issues caused when a Server Name Indicator (SNI) used an invalid format. SEG-127761/DS-70806
  • An abnormal restart of Deep Security Agent sometimes lead to "Anti-Malware Engine Offline" errors. SEG-140234/DS-71333

Security updates

Security updates are included in this release. For more information about how we protect against vulnerabilities, visit Vulnerability Response. Please note, in line with responsible disclosure practices, CVE details will only be made available for select security updates once patches have been made available for all impacted releases. DS-52329

  • Highest CVSS score: 7.5
  • Highest severity: High
What's new in Deep Security Agent? | Deep Security