Release Notes
Abstract
This document provides a listing of the updates that have been done and are available for IBM Security Guardium Database Protection Service (DPS). DPS is a subscription service that provides periodic updates to vulnerability tests as well as other predefined content (reports, groups, policies).
Content
This document is intended for IBM Security Guardium Data Protection version 12.x and 11.x customers.
Known issues
DB2 z/OS Security APAR SIA-DB2-2019.10-1: When executing this test on DB2 v11.1 and 12.1, you may get a test score error message like "Modules listed for PTF not present in DB2 MEPL". The modules impacted on this security APAR are not found in the DB2 MEPL, which is a rare occurrence, as these are DB2 early code modules which are loaded at IPL time. Manually verify the impacted modules in SMPE after your database is patched.
Requirements
| Version | Requirements |
|---|---|
| 12.x | There are no specific requirements for loading the quarterly DPS release on Guardium version 12.x. |
| 11.x | There are no specific requirements for loading the quarterly DPS release on Guardium version 11.x. |
Notes
| Version | Notes |
|---|---|
| 12.x | None |
| 11.x | None |
DPS files
| Version | Filename and MD5SUM |
|---|---|
| 12.x |
Filename: Guardium_V12_Quarterly_DPS_2024_Q3_20240815.enc
MD5SUM: 5a18cf371b7a700349e668ed42324517
|
| 11.x |
Filename: Guardium_V11_Quarterly_DPS_2024_Q3_20240815.enc
MD5SUM: 52dd378ee1c8f0c1edaad0c0ce12ef02 |
Updated database vendor version + patches
| Version 12.x | Version 11.x |
|---|---|
|
Informix Database
14.10+FC11
7.51+FC2 MS Sql Server Database
16.0+4131
15.0+4382 14.0+3471 13.0+7037 MySql Database
9.0+1*
8.4+2* 8.0+39* Oracle Database
21+RU 21.15.0.0.240716
19+RU 19.24.0.0.240716 Sybase Database
16.0+04.06
Teradata PDE
17.20.03+28
Teradata TDBMS
17.20.03+28
Teradata TDGSS
17.20.03+28
Teradata TGTW
17.20.03+28
Postgres
12.19+0*
13.15+0* 14.12+0* 15.7+0* 16.3+0* SybaseIQ Database
16.1+sp05.13
MongoDB Database
5.0+28
6.0+16 7.0+12 SAP Hana Database
2.00+79
Cloudera Hadoop
7.1+9.p14
DataStax Cassandra DSE
5.1+45
6.8+50 Couchbase
7.6+2
7.2+5 Neo4j
4.4+36
5.20+0 5.21+2 5.22+0 MariaDB
11.4+2
11.2+4 11.1+5 11.0+6 10.11+8 10.6+18 10.5+25 10.4+34 Percona MySQL
8.3+0
8.2+0 8.1+0 Apache Cassandra
4.1+5
4.0+13 EDB Postgres
14.12+0*
15.7+0* 16.3+0* |
Informix Database
14.10+FC11
7.51+FC2 MS Sql Server Database
16.0+4131 15.0+4382 14.0+3471 13.0+7037 MySql Database
9.0+1* 8.4+2* 8.0+39* Oracle Database
21+RU 21.15.0.0.240716 19+RU 19.24.0.0.240716 Sybase Database
16.0+04.06
Teradata PDE
17.20.03+28
Teradata TDBMS
17.20.03+28
Teradata TDGSS
17.20.03+28
Teradata TGTW
17.20.03+28
Postgres
12.19+0*
13.15+0* 14.12+0* 15.7+0* 16.3+0* SybaseIQ Database
16.1+sp05.13
MongoDB Database
5.0+28
6.0+16 7.0+12 SAP Hana Database
2.00+79
Cloudera Hadoop
7.1+9.p14
DataStax Cassandra DSE
5.1+45
6.8+50 Couchbase
7.6+2
7.2+5 Neo4j
4.4+36
5.20+0 5.21+2 5.22+0 MariaDB
11.4+2
11.2+4 11.1+5 11.0+6 10.11+8 10.6+18 10.5+25 10.4+34 Percona MySQL
8.3+0
8.2+0 8.1+0 Apache Cassandra
4.1+5
4.0+13 |
VA test enhancements
| Versions | Test ID | Description | Database type | What changed? |
|---|---|---|---|---|
| 12.x, 11.x | -- | -- | -- | -- |
New VA tests
| Versions | Test ID | Description | Database type |
|---|---|---|---|
| 12.x, 11.x | -- | -- | -- |
Updated groups
| Versions | ID | Name type | New or updated items | What changed? |
|---|---|---|---|---|
| 12.x, 11.x | -- | -- | -- | -- |
Common vulnerabilities and exposures
| Versions | Test name | Database type |
|---|---|---|
| 12.x, 11.x | CVE-2024-21176 | MYSQL |
| 12.x, 11.x | CVE-2024-21177 | MYSQL |
| 12.x, 11.x | CVE-2024-21179 | MYSQL |
| 12.x, 11.x | CVE-2024-21184 | ORACLE |
| 12.x, 11.x | CVE-2024-21185 | MYSQL |
| 12.x, 11.x | CVE-2024-6375 | MONGODB |
| 12.x, 11.x | SIA-MVS-2024.06-2 | IBM DB2 Z/OS |
[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"ARM Category":[{"code":"a8m3p000000PCTuAAO","label":"Platform\/Installation\/Deployment"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Was this topic helpful?
Document Information
Modified date:
19 August 2024
UID
ibm17164154