Product:  IBM BigFix Compliance      Title:  Updated DISA Checklists for Microsoft Windows Server 2008 to support a more recent version of benchmark     Security Benchmark:  Microsoft Windows 2008 STIG, V6, R37    Published Sites:  DISA STIG Checklist for Windows 2008 DC, site version 23 DISA STIG Checklist for Windows 2008 MS, site version 22  (The site version is provided for air-gap customers.)     Details: · Both analysis and remediation checks are included... [More]

Tags:  bigfix_compliance bigfix endpoint-manager scm endpoint endpoint-management

IBM BigFix Patch is pleased to announce that Fixlet content for SUSE Linux Enterprise Server (SLES) and SUSE Linux Enterprise Desktop (SLED) version 12 SP3 (x86_64) are now available.   These Fixlets are based on the supported packages that are available in the following SUSE repositories: SLED12-SP3-Pool, SLED12-SP3-Updates, SLES12-SP3-Pool, and SLES12-SP3-Updates.   Actions to Take: Gather the updates from the listed sites.   Affected Sites: Patches for SLE 12 Native Tools site, version 154 Patching Support site, version 796... [More]

Tags:  suse patch bigfix

IBM BigFix is pleased to announce the release of IBM BigFix Compliance Analytics version 1.9 Patch 3 [formerly called IBM Endpoint Manager for Security and Compliance Analytics (SCA)]. Product: IBM BigFix Compliance Title: Availability of BigFix Compliance Analytics version 1.9 Patch 3 Details: The BigFix Compliance Analytics version 1.9 Patch 3 release includes the following new features, fixes, and updates. Published site: SCM Reporting, version 114. New features and updates: Update of IBM JRE to version 8.0.4.10. No user action is required... [More]

Tags:  sca 1.9.91 compliance

IBM BigFix Patch released content to accommodate the Microsoft Office 365 changes to Fixlet names. The content were released on September 12, 2017 and can be used to set endpoints to the channel. The name change is indicated in the following table.         Microsoft applied the Office 365 channel name change, along with changes to the release cadence and support duration, on September 12, 2017. For more information about these changes, see http://bit.ly/2vFdHZa . Highlights: [Major] Office 2016 Version 16.0.8201.2193... [More]

Content in the Patches for Windows Site has been released. New Fixlets: Fixlets for September Microsoft Security Updates [Major] Disable Solution to CVE-2017-8529 - Windows 7 SP1 / 8.1 / 10 / Windows Server 2008 SP2 / 2008 R2 SP1 / 2012 / 2012 R2 / 2016 (ID: 170852901) [Major] Enable Solution to CVE-2017-8529 - Windows 7 SP1 / 8.1 / 10 / Windows Server 2008 SP2 / 2008 R2 SP1 / 2012 / 2012 R2 / 2016 (ID: 170852903) [Major] MS16-087: Security Update for Windows Server 2008 - Windows Server 2008 SP2 - KB3170455 (V2.0) (ID: 317045501) [Major]... [More]

Tags:  windows bigfix patchtuesday patch

IBM BigFix Patch for Windows is pleased to announce that it has extended its support for the Acrobat 2017 Release of Adobe Acrobat Classic Track and Adobe Acrobat Reader Classic Track.　   Highlights:　 8200043 Adobe Acrobat Reader 2017 Available (MUI Installer) - Classic Track　 8101181 Adobe Acrobat Reader DC 2017.011.30066 Available (MUI Installer) - Adobe Acrobat Reader DC - Out of Cycle Update - Classic Track　 9102004 Adobe Acrobat DC 2017.011.30066 Available (MUI Installer) - Adobe Acrobat DC - Out of Cycle Update - Classic Track　... [More]

Tags:  patch classic_track adobereaderdc2017 adobeacrobatreader2017

IBM BigFix Patch will be making changes to Office 365 content. This is in alignment with Microsoft Office 365 changes that include a change of channel names, as indicated in the following table.         Microsoft announced that the name change begins on September 12, 2017 . BigFix will be updating existing tasks for users to set endpoints to the new channel. The Fixlet IDs of existing content will remain unchanged. Moving forward, users will receive updates as per usual and the change is in name only.   What actions... [More]

Tags:  office365 namechange patch

Product:   IBM BigFix Compliance    Title:  Updated CIS Checklist for CentOS Linux 6 to support a more recent version of benchmark Security Benchmark:  CIS CentOS Linux 6 Benchmark, V 2.0.2   Published Sites:  CIS Checklist for CentOS Linux 6, site version 3 (The site version is provided for air-gap customers.)   Details: ·    Both analysis and remediation checks are included ·    Some of the checks allow you to use the parameterized setting to enable... [More]

Tags:  usgcb endpoint bigfix_compliance endpoint-management cis bigfix endpoint-manager scm

IBM BigFix Compliance PCI Add-on: New Support for AIX 7.2 published 2017-08-24   Product: IBM BigFix Compliance PCI Add-on   Title: PCI DSS Checklist for AIX 7 site updated to support AIX 7.2   Category: Updated PCI DSS checklist   Published Benchmark: Payment Card Industry Data Security Standard v3.2   Details: - AIX 7.2 is now supported in the PCI DSS Checklist for AIX 7 site. This additional support is based on the guidance provided by the Payment Card Industry Data Security Standard (PCI DSS) v3.2 and on existing... [More]

Tags:  aix7.2 pcidss compliance aix7

  Product:  IBM BigFix Compliance      Title:  Updated CIS Checklist for Microsoft Windows Server 2012 to fix bug in site relevance     Security Benchmark:  CIS Microsoft Windows Server 2012 non-R2 Benchmark 2.0.0     Published Sites:  CIS Checklist for Windows 2012 DC, site version 4 CIS Checklist for Windows 2012 MS, site version 3  (The site version is provided for air-gap customers.)     Details: · The site level relevance for the above mentioned checklist has... [More]

Tags:  cis bigfix_compliance scm bigfix endpoint_manager endpoint

Product:  IBM BigFix Compliance    Title:  Updated CIS Checklist for Red Hat Enterprise Linux 6 to fix bugs Security Benchmark:  CIS Red Hat Enterprise Linux 6 Benchmark, V2.0.2   Published Sites:   CIS Checklist for RHEL 6, site version 15 (The site version is provided for air-gap customers.)   Details: ·    xccdf_org.cisecurity.benchmarks_rule_6.2.7_Ensure_all_users_home_directories_exist : “(L1) Ensure_all_users_home_directories_exist”, the check was showing relevant... [More]

Tags:  bigfix endpoint endpoint-manager usgcb scm cis bigfix_compliance endpoint_manager endpoint-management

IBM BigFix Patch is deprecating the Linux RPM Patching site on September 29, 2017 . The site will no longer appear in the License Overview dashboard after the said date. In line with the site deprecation, BigFix Patch will no longer provide content and will end support for the analyses, wizard, tasks, and dashboard associated with the BigFix endpoint dependency resolution method. As part of its commitment to continuous improvement, in recent years, BigFix Patch shifted from the BigFix endpoint dependency resolution to using the native tools of... [More]

Tags:  end_of_support endpoint_dependency_resol... deprecate linux_rpm_patching

Product: IBM BigFix Compliance   Title: IBM BigFix Compliance Client Manager for Endpoint Protection (CMEP) now supports Windows 10 and Windows Server 2016 for the supported ant-virus products   Published Sites: Client Manager for Endpoint Protection, site version 3663.   Details: IBM BigFix is pleased to announce that the Client Manager for Endpoint Protection (CMEP) content now supports Windows 10 and Windows Server 2016 for the supported ant-virus products.   More information: For more information about the anti-virus... [More]

Tags:  windows10 cmep windows_server_2016

Content in the Patches for Windows Site has been released.     New Fixlets:   Fixlets for Microsoft Security Bulletins:        MS17-Aug   Fixlets for Office 365 Version 16.0.8326.2070 current channel. Fixlet for Office Non-Security updates.     Modified Fixlets: [Major] MS14-016: Vulnerability in Security Account Manager Remote (SAMR) Protocol Could Allow Security Feature Bypass - Windows Vista SP2 (ID: 140161) [Major] MS14-016: Vulnerability in Security Account Manager Remote (SAMR) Protocol... [More]

IBM BigFix Patch deprecated the Patches for Ubuntu 1204 site and ended support for Ubuntu 12.04 LTS, which reached its end of life (EOL) in April 2017.   Actions to take: Upgrade to the later versions of BigFix Patches for Ubuntu sites. Enable the site from the License Overview dashboard and subscribe your endpoints to the site.   References: For the earlier BigFix post, see http://bit.ly/2o7WpRZ .   Applications Engineering Team IBM BigFix

Tags:  ubuntu ubuntu_1204_lts patch deprecation

Product:   IBM BigFix Compliance    Title:  Updated CIS Checklist for Red Hat Enterprise Linux 7 to support a more recent version of benchmark Security Benchmark:  CIS Red Hat Enterprise Linux 7 Benchmark, V2.1.1 Published Sites:  CIS Checklist for RHEL 7,  site version 4 (The site version is provided for air-gap customers.) Details: ·    Both analysis and remediation checks are included ·    Some of the checks allow you to use the parameterized setting to enable... [More]

Tags:  endpoint_manager usgcb endpoint-manager cis bigfix_compliance bigfix endpoint scm endpoint-management

IBM BigFix deprecated the RHEL download plug-in and several Patches for RHEL sites on July 31, 2017.   Deprecation of the RHEL download plug-in The RHEL download plug-in was deprecated and replaced by the RHSM download plug-in. BigFix will no longer support the RHEL download plug-in.   Patches for RHEL site deprecation IBM BigFix deprecated the following sites: • Patches for RHEL 5 - Native tools site • Patches for RHEL 6z • Patches for RHEL 7z BigFix ended support for the RHEL 5, subsequent to its end of life. If you... [More]

Tags:  deprecationsites rheldownloadplugin patch

BigFix Patch has deprecated the 'Patches for CentOS 5 Native Tools' site on July 31, 2017.   This site remains accessible from the License Overview dashboard to allow CentOS 5 patching. However, note that the site is no longer supported and is not going to contain any new Fixlet content moving forward.   Actions to Take: Update to later versions of CentOS Linux.   Additional References: Previous announcements:   https://ibm.biz/BdswAH   and   https://ibm.biz/BdjdgE   For information about the CentO5... [More]

Tags:  bigfix eol centos deprecation oatch

Product: IBM BigFix Compliance PCI Add-on   Title: Updated PCI DSS Checklists for Windows Embedded Standard 7 for various enhancements   Category: Updated PCI DSS checklist   Published Benchmark: Payment Card Industry Data Security Standard v3.2   Details: The IBM BigFix Compliance PCI Add-on team has updated the PCI DSS Checklists for Windows Embedded Standard 7 to provide remediation actions for more checks. These remediation actions allow BigFix operators to efficiently remediate a non-compliance issue with a single... [More]

Tags:  pcidss pci compliance bigfix scm