Software Update: Symantec Encryption Management Server 3.3.2 MP10

Symantec Encryption Management Server is a software appliance that can be deployed on physical hardware or in a VMware environment to automatically encrypt and decrypt email flows, provide public encryption keys to others, and manage connected systems with Symantec Encryption Desktop. For more information, please refer to this page. The version number of Encryption Management Server has arrived at 3.3.2 MP10 and includes the following changes:

What’s Changed in Symantec Encryption Management Server 3.3.2 MP10

General

• Resolved incompatibilities with Red Hat Enterprise Linux 7.1 (64-bit version).
• Resolved an issue with Symantec Encryption Management Server so that hostnames are no longer case-sensitive, while adding new members to server clusters. [3736860]
• Resolved an issue with Symantec Encryption Management Server so that the Home button graphic is now displayed correctly on the key search results screen of the Verified Directory web site. [3468916]
• Resolved an issue with Symantec Encryption Management Server so that that the servers that have more than 16 GB of RAM no longer stop responding during upgrades or migration. [2858815]
• In response to the following security vulnerabilities, updated the Kerberos 5 libraries to version 1.6.1-80.el5_11: [3775065]
  • CVE-2002-2443
  • CVE-2013-1418
  • CVE-2013-6800
  • CVE-2014-4341
  • CVE-2014-4344
  • CVE-2014-4345
• In response to security vulnerability CVE-2013-6435, updated the RPM Package Manager (RPM) packages to the following versions: [3701271]
  • rpm-4.4.2.3-36.el5_11.i386
  • rpm-python-4.4.2.3-36.el5_11.i386
  • rpm-libs-4.4.2.3-36.el5_11.i386
  • popt-1.10.2.3-36.el5_11.i386
• Updated the Bash package version to bash-3.2-33.el5_11.4.i386 to prevent vulnerability scanners from providing false alerts about the following issues: [3629188]
  • CVE-2014-7169
  • CVE-2014-7186
  • CVE-2014-7187
• Resolved an issue so that processes that use the adjust_sequences function no longer cause “out of range” errors. [3798605]
• In response to the following security vulnerabilities, updated the Red hat Enterprise Linux kernel packages to version 2.6.18-404.el5: [3734162, 3798786]
  • CVE-2015-1805
  • CVE-2014-8159
  • CVE-2014-8867
  • CVE-2014-7822
  • CVE-2014-9322
  • CVE-2014-0181
  • CVE-2014-3917
  • CVE-2014-2678
  • CVE-2014-1737
  • CVE-2014-1738
  • CVE-2013-7339
  • CVE-2013-2888
  • CVE-2013-4483
  • CVE-2013-6381
  • CVE-2013-6383
  • CVE-2013-6885
  • CVE-2013-4554
  • CVE-2013-4588
  • CVE-2013-7263
  • CVE-2013-7264
  • CVE-2013-7265
  • CVE-2013-7281
  • CVE-2013-2929
  • CVE-2013-4494
  • CVE-2013-4299
  • CVE-2013-4355
  • CVE-2013-4345
  • CVE-2013-0343
  • CVE-2012-6638
• In response to the following security vulnerabilities, updated the BIND libraries to version 9.3.6-25.P1.el5_11.2: [3734162]
  • CVE-2014-8500
  • CVE-2012-5166
  • CVE-2012-4244
  • CVE-2012-3817
  • CVE-2012-1667
  • CVE-2012-1033

Keys and certificates

• Resolved an issue so that administrators can now use the new –update-group-keys option with the pgpkeymaint –update-sigs command to update the Group Keys signatures when the Organization Key is changed. For more information about the –update-group-keys option, see “New pgpkeymaint command option for updating Group Keys” in the Documentation Errata section of this document. [3556270]
• Resolved an issue so that group keys that were published through LDAP are now immediately removed from the ldap_key table when they are deleted in the Symantec Encryption Management Server interface. [3537919]

Symantec Encryption Desktop

• Added compatibility with Microsoft Windows 10 (32-bit and 64-bit versions).

Symantec File Share Encryption

• Resolved an issue with Symantec File Share Encryption so that group key users can now successfully decrypt protected folders in which their group key is configured with the Group Admin permission. [3738266]

Symantec Web Email Protection

• Resolved an issue with Symantec Web Email Protection so that browser caching is now disabled while downloading email attachments. [3609315]