<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
HCL BigFix is pleased to announce the release of BigFix Compliance Analytics version 2.0 Patch 5</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<div><br>
</div>
<div>Product: BigFix Compliance</div>
<div><br>
</div>
<div>Title: <span style="background-color:rgb(255, 255, 255);display:inline !important">
Availability of BigFix Compliance Analytics version 2.0 Patch 5</span></div>
<div><br>
</div>
<div>Published site: SCM Reporting, version 145</div>
<div><br>
</div>
<div>BigFix Compliance Analytics version 2.0 Patch 5 includes a fix for the recent Log4j vulnerabilities. Internal testing made by the Compliance team has revealed that this vulnerability is not exploitable in the BigFix Compliance product, but the BigFix team
has removed the library to eliminate any exploitation risk</div>
<div> * Removal of Log4j library to address CVE-2021-44228, CVE-2021-45046, CVE-2021-45105</div>
<div><br>
</div>
<div>Actions to take:</div>
<div> 1. To take advantage of the fix, upgrade BigFix Compliance Analytics to version 2.0.5.</div>
<div><br>
</div>
<div>For first time installation:</div>
<div><br>
</div>
<div> 1. In the License Overview Dashboard in the BigFix console (BigFix Management domain), enable the SCM Reporting site.</div>
<div> 2. In the Security Configuration domain in the console, open the Configuration Management navigation tree.</div>
<div> 3. Select the Fixlet named BigFix Compliance Server 2.0 - First-time Install Fixlet under the BigFix Compliance Install/Upgrade menu tree node.</div>
<div> 4. Follow the Fixlet instructions and take the associated action to install your BigFix Compliance deployment.</div>
<div><br>
</div>
<div>For upgrade installation: Refer to the prescribed upgrade steps for the BigFix Compliance version that you are using.</div>
<div><br>
</div>
<div>IMPORTANT: Before you start any upgrade process, perform a server and database backup.</div>
<div><br>
</div>
<div>A. For BigFix Compliance Analytics versions 1.9.x, 1.10.x and 2.0.x:</div>
<div> 1. Make sure that you completed the server and database backup.</div>
<div> 2. In the Security Configuration domain in the console, open the Configuration Management navigation tree.</div>
<div> 3. Under the BigFix Compliance Install/Upgrade menu tree item, select the BigFix Compliance Server 2.0 - Upgrade Fixlet which automatically installs and upgrades to the new version.</div>
<div> 4. Follow the Fixlet instructions and take the associated action to upgrade your BigFix Compliance deployment.</div>
<div> 5. Update the data schema. To do this, log in to the BigFix Compliance web interface from the host server and proceed with configuration. Upgrading the data scheme is expected and it will take some time to complete. NOTE: Automatic upgrade installation
only affects installations running under the LocalSystem account. Follow the Fixlet instructions to install the update manually if this fix cannot be applied.</div>
<div><br>
</div>
<div>B. For BigFix Compliance Analytics versions prior to 1.9:</div>
<div> 1. Manually upgrade to version 1.10.1.48. The 1.10.1.48 installer can be found here http://software.bigfix.com/download/bfc/server/1.10/bfc-server-1.10.1.48.exe</div>
<div> 2. After manually upgrading to version 1.10.1.48, use the BigFix Compliance Server 2.0 Upgrade Fixlet to upgrade to version 2.0 (See step A).</div>
<div><br>
</div>
<div>More information:</div>
<div> * Security Bulletin: <a href="https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0095719" id="LPNoLPOWALinkPreview">https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0095719</a></div>
<div class="_Entity _EType_OWALinkPreview _EId_OWALinkPreview _EReadonly_1"></div>
<div> * BigFix Compliance Guides: <span style="background-color:rgb(255, 255, 255);display:inline !important">
<a href="https://help.hcltechsw.com/bigfix/10.0/compliance/analytics.html" id="LPNoLPOWALinkPreview_1">https://help.hcltechsw.com/bigfix/10.0/compliance/analytics.html</a></span></div>
<div class="_Entity _EType_OWALinkPreview _EId_OWALinkPreview_1 _EReadonly_1"></div>
<div> * BigFix Forums - Release Announcements Channel: <span style="background-color:rgb(255, 255, 255);display:inline !important">
<a href="https://forum.bigfix.com/c/release-announcements/compliance" id="LPNoLPOWALinkPreview_2">https://forum.bigfix.com/c/release-announcements/compliance</a></span></div>
<div class="_Entity _EType_OWALinkPreview _EId_OWALinkPreview_2 _EReadonly_1"></div>
<div><br>
</div>
<div>BigFix Compliance team</div>
HCL BigFix<br>
</div>
</body>
</html>