Re: [Security] Symantec vulnerability update

Hi all,

As an update to Allison's note from last week:

We now have an updated "slipstreamed" installer for SCS 3.1 + MP1
available on the Software download site cited below. This reduces the
patching to a single patch (install 3.1 + MP1, then add PP1) for those
not already at the SCS 3.1 level. Symantec claims that an integrated MR1
release for SCS 3.1 is due in two or three weeks.

In addition, to help recover from failed installations or patching jobs,
the NoNav2.49 unsupported cleanup tool from Symantec is made available
on the same Software download page. Use this with discretion as an
alternative to the manual uninstall procedures for SCS which Symantec
officially publishes and which are also referenced on the IST KB
(kb.berkeley.edu).

--Karl

Karl Grose
IST

=======
On Tue, 2006-05-30 at 13:35 -0700, Allison Henry wrote:
> Symantec has released patches for the security vulnerability in Symantec
> Anti-Virus announced on Friday. These patches must be installed on each
> workstation running Symantec Anti-virus v10.x (including Symantec Client
> Security 3.x) to protect against this vulnerability. To make sure the
> updates are applied and to get the benefits of the latest version of
> Symantec, we are recommending the following actions:
>
> 1) Go to http://software.berkeley.edu/windows/scs3/current/
> 2) Download and install the SCS 3.1 desktop client
> 3) Download and install MP1 for 3.1
> 4) Download and install PP1 for SCS 3.1 MP1
>
> For system administrators:
> We recommend that you upgrade all Symantec clients to 3.1 and apply the
> appropriate patches. However, if you wish to stay at your current
> version of Symantec, you can find the appropriate patches for your
> version number at
> http://www.symantec.com/techsupp/enterprise/products/sym_client_security/scs_3/files.html.
>
> Please make sure you apply the appropriate patches in the correct order
> for your version of Symantec. We are working on developing tools to aid
> in the distribution of patches to large numbers of workstations, so
> watch for further updates.
>
> Please help us get the word out to the campus community. There are still
> no exploits out based on this vulnerability and with your help we want
> to get campus users protected before the exploits are released.
>
> Thank you,
>
> --
> Allison Henry
> System and Network Security
> University of California, Berkeley
> http://security.berkeley.edu

------------------------------------------------------------------------
The following was automatically added to this message by the list server:

For information about Micronet, including subscribing to
or unsubscribing from its mailing list and finding out
about upcoming meetings, please visit the Micronet Web site:
<http://micronet.berkeley.edu/>.
Received on Mon Jun 5 10:20:42 2006