Patch Management Solution

Bellow is list of KB that I currently do not have them, and would like to download for emgergency patch. Would you please adivse, please. It's Altiris SMP 7.1

Kb2264072 -- Microsoft Security Advisory: Elevation of privilege using Windows service isolation bypass

Kb2264107 --  A new CWDIllegalInDllSearch registry entry is available to control the DLL search path algorithm

Kb2565057 -- Ms11-025 -- Description of the security update for Visual Studio 2010 Service Pack 1: August 9, 2011 – does not have a patch. Manually.

KB2647518 -- Update Rollup for ActiveX Killbits for Windows 7, Windows Server 2008 R2, Windows Server 2008, Windows Vista, Windows Server 2003, and Windows XP (KB2647518)

KB2695962 -- Update Rollup for ActiveX Killbits for Windows 7, Windows Server 2008 R2, Windows Server 2008, Windows Vista, Windows Server 2003, and Windows XP (KB2695962)

kb2641653 -- MS12-018: Vulnerability in Windows kernel-mode drivers could allow elevation of privilege: March 13, 2012

Thanks very much,

Charlie.

Hi Charlie,
What version of Patch Data do you have?
I have checked that these KBs are actually included to Patch Data 7.1.396.
Please navigate to Patch Remediation Center, select Show All Software Updates and search the following bulletins:

Kb2264107 --  A new CWDIllegalInDllSearch registry entry is available to control the DLL search path algorithm
 

Kb2264107 is included to bulletin MSWU-435

Kb2565057 -- Ms11-025 -- Description of the security update for Visual Studio 2010 Service Pack 1: August 9, 2011 – does not have a patch. Manually.

Kb2565057 is included to bulletin MS11-025

KB2647518 -- Update Rollup for ActiveX Killbits for Windows 7, Windows Server 2008 R2, Windows Server 2008, Windows Vista, Windows Server 2003, and Windows XP (KB2647518)

KB2647518 is included to bulletin MS12-A01

KB2695962 -- Update Rollup for ActiveX Killbits for Windows 7, Windows Server 2008 R2, Windows Server 2008, Windows Vista, Windows Server 2003, and Windows XP (KB2695962)

KB2695962 is included to bulletin MS12-A02

kb2641653 -- MS12-018: Vulnerability in Windows kernel-mode drivers could allow elevation of privilege: March 13, 2012
 

KB2695962 is included to bulletin MS12-018

As for KB2264072, looks like there is no patch associated with it, at least I could not determine it from Microsoft Page.

Thanks,
Roman

Hi Roman,

You're absolutely correct. Most of them are there, but MS11-025 and KB2264072.

I'll probably refer KB2264072 to Microsoft on-site.

For MS11-025, I have to download it manually. I guess it is hard to download it from Altiris SMP.

Thanks very much, Roman, for your time and great support

Charlie.

Hi everyone,

I am wonderfing if anyone tried to import old MS bulletins before. I'm trying to find a way to import MS11-025. For the old MS bulletins, if I could find it in PMImport, but not downloaded, then I could easily select to download it, but in this scenario, I could not find MS11-025.

I could download it form Microsoft site, but how we could incorporate it into Altiris for the auto push deployment?

Thanks very much,

Charlie.

Hi Charlie,

Could you please provide screenshot where MS11-025 cannot be found in NS Console?
I managed to download MS11-025 from Patch Remediation Center with imported Patch Data 7.1.400.
Please see attached screenshot.

Thanks,
Roman

Hi Roman,

Both of our Lab and Production Altiris NS do not have MS11-025.  I guess it was because I chose 70 products specific to servers only, out of 525 products from Microsoft in PMImport. Or maybe other unknown missing.

I tried to find if Symantec could incorporate old bulletins/KB into specific Patch Data, but found it to no avail.

Btw, how you find out Patch Data version (e.g. 7.1.400), please.?

Thanks very much, Roman

Charlie.

Hi Charlie,

I guess you are right. Most likely MS11-025 has not been imported on your Notification Servers because product associated with this bulletin has been excluded in PM import settings.
Please check that all versions of Microsoft Visual Studio 2010 are selected in the list of Vendors and Software(please see attached screenshot). In case if they are not selected, select them and updates related to these products(including Kb2565057 from MS11-025) will be imported during next PM import run.

Regarding version of Patch Data, it should be shown in Import Patch Data task details - Navigate to Import Patch Data for Windows page and double click on last instance of Import Patch Data task. Version of imported data will be shown (please see attached screenshot)
Also you can check it from Manifest.xml located under Altiris installation directory(../Altiris/Patch Management/Downloads/Manifext.xml). Manifest version equals to version of imported Patch Data.

Hope this helps,
Roman

Yes, Roman. We'll have to include MS Visual Studio in next PMImport.

Thanks very much, Roman, for your confirmation and great support.

Charlie.