TIBCO LogLogic 6.2.0 Hotfix SEC1-HF-2819 is now available

TIBCO LogLogic 6.2.0 Hotfix SEC1-HF-2819 is now available

book

Article ID: KB0102089

calendar_today

Updated On:

Products Versions
TIBCO LogLogic Log Management Intelligence 6.2.0

Description

This is a cumulative security hotfix to deploy package update for LMI 6.2.0.
This hotfix includes all previously available cumulative security hotfixes
for TIBCO LogLogic LMI 6.2.0.


This hotfix has no dependencies on any other non-cumulative hotfixes and 
cumulative maintenance hotfixes. It can be used in conjunction with other 
non-cumulative hotfixes and cumulative maintenance hotfixes.

================================================================================
Closed Issues in 6.2.0 SEC1-HF-2819

LLCE-2815: 
Security scan: samba CVE-2017-7494

LLCE-2817:
Security scan: Bind CVE-2017-3145

LLCE-2818:
Security scan: dhcp CVE-2018-5732, CVE-2018-5733 

LLCE-2819:
6.2.0 package updates v1 non-cumulative HF for package updates

LLCE-2824:
Oracle Linux update for OpenJDK-1.8.0

The following security issues are resolved with listed packages or newer ones:

bind (ELSA-2018-0101): CVE-2017-3145 by bind-libs-9.8.2-0.62.rc1.el6_9.5,
bind-utils-9.8.2-0.62.rc1.el6_9.5

dhcp (ELSA-2018-1454): CVE-2018-1111 by dhclient-4.1.1-53.P1.0.1.el6_9.4,
dhcp-common-4.1.1-53.P1.0.1.el6_9.4

procps (ELSA-2018-1777): CVE-2018-1124, CVE-2018-1126 by
procps-3.2.8-45.0.1.el6_9.3

java-1.8.0-openjdk (ELSA-2018-1188): several CVEs are addressed by the latest
update of Java java-1.8.0-openjdk-1.8.0.171-8.b10.el6_9.x86_64.rpm,
java-1.8.0-openjdk-headless-1.8.0.171-8.b10.el6_9.x86_64.rpm
================================================================================
This hotfix can be downloaded from the TIBCO Support Customer Portal at https://support.tibco.com.
You will need to provide your TIBCO Support Portal credentials. Once logged in you can download
the hotfix by selecting “Downloads” -> “Hotfixes” under AvailableDownloads/LogLogic/LMI/6.2.0_Hotfixes 

 

Issue/Introduction

TIBCO LogLogic 6.2.0 Hotfix SEC1-HF-2819 is now available

Environment

All TIBCO LogLogic LMI and EVA appliances running software version 6.2.0

Resolution

Install this security hotfix following the instructions in the attached Readme.

Attachments

TIBCO LogLogic 6.2.0 Hotfix SEC1-HF-2819 is now available get_app