From winappupdates-announcements at bigmail.bigfix.com Tue Oct 10 05:10:18 2017 From: winappupdates-announcements at bigmail.bigfix.com (Notification of New Windows Application Messages) Date: Tue, 10 Oct 2017 05:10:18 -0700 Subject: [WinAppUpdates-Announcements] BES Auto Notification: New Fixlets Published in Fixlet Site: 'Updates for Windows Applications' Message-ID: Fixlet Site - 'Updates for Windows Applications' Current Version: 1072 Published: Tue, 10 Oct 2017 10:08:11 GMT New Fixlets: ============ *************************************************************** Title: Mozilla Firefox 52.4.0 ESR Available Severity: Critical Fixlet ID: 6081355 Fixlet Link: http://www.mozilla.org/en-US/firefox/52.4.0/releasenotes/ Fixlet Link: https://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html Fixlet Link: http://www.sans.org/top20/#c1 Fixlet Description: Mozilla has released a new version of the Firefox browser. Use the action below to update Firefox to the latest version (52.4.0 ESR). Important Note: Choosing the "Upgrade Firefox regardless of whether or not Firefox running action" will close any running instance of Firefox on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable. *************************************************************** Title: Mozilla Firefox 56.0 Available Severity: Critical Fixlet ID: 6081380 Fixlet Link: http://www.mozilla.com/en-US/firefox/56.0/releasenotes/ Fixlet Link: https://www.mozilla.org/security/known-vulnerabilities/firefox.html Fixlet Link: http://www.sans.org/top20/#c1 Fixlet Description: Mozilla has released a new version of the Firefox browser. Use the action below to update Firefox to the latest version (56.0). Important Note: Choosing the "Upgrade Firefox regardless of whether or not Firefox running action" will close any running instance of Firefox on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable. *************************************************************** Title: Mozilla Firefox 56.0.1 Available Severity: Unspecified Fixlet ID: 6081382 Fixlet Link: http://www.mozilla.com/en-US/firefox/56.0.1/releasenotes/ Fixlet Link: https://www.mozilla.org/security/known-vulnerabilities/firefox.html Fixlet Link: http://www.sans.org/top20/#c1 Fixlet Description: Mozilla has released a new version of the Firefox browser. Use the action below to update Firefox to the latest version (56.0.1). Important Note: Choosing the "Upgrade Firefox regardless of whether or not Firefox running action" will close any running instance of Firefox on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable. *************************************************************** Title: Mozilla Thunderbird 52.4.0 Available Severity: Unspecified Fixlet ID: 6101305 Fixlet Link: http://www.mozilla.org/en-US/thunderbird/52.4.0/releasenotes/ Fixlet Link: https://www.mozilla.org/security/known-vulnerabilities/thunderbird.html Fixlet Description: Mozilla has released a new version of the Thunderbird. Use the action below to update Thunderbird to the latest version (52.4.0). Important Note: Choosing the "Upgrade Thunderbird regardless of whether or not Thunderbird running action" will close any running instance of Thunderbird on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable. From winappupdates-announcements at bigmail.bigfix.com Wed Oct 11 05:10:19 2017 From: winappupdates-announcements at bigmail.bigfix.com (Notification of New Windows Application Messages) Date: Wed, 11 Oct 2017 05:10:19 -0700 Subject: [WinAppUpdates-Announcements] BES Auto Notification: New Fixlets Published in Fixlet Site: 'Updates for Windows Applications' Message-ID: Fixlet Site - 'Updates for Windows Applications' Current Version: 1073 Published: Wed, 11 Oct 2017 08:58:01 GMT New Fixlets: ============ *************************************************************** Title: Flash Player 27.0.0.159 Available - PPAPI Severity: Unspecified Fixlet ID: 1091342 Fixlet Link: http://www.adobe.com/support/flashplayer/downloads.html Fixlet Link: http://www.adobe.com/support/security/#flashplayer Fixlet Link: http://www.sans.org/top20/#c4 Fixlet Description: Adobe has released a new version of the Flash Player Plugin (27.0.0.159) for PPAPI. Use the action below to update Flash Player to the latest version. Important Note: If the Flash Player is running, a pop-up message may be displayed prompting the user to reboot their computer once the update is complete. The action will not complete until the prompt is closed. To prevent this behavior, you may want to deploy this action with the user constraint "Run only when no user is present" or display a message box before action execution instructing the user to shut down all web browsers before applying this update. *************************************************************** Title: Flash Player 27.0.0.159 Available - Plugin-based Severity: Unspecified Fixlet ID: 1091344 Fixlet Link: http://www.adobe.com/support/flashplayer/downloads.html Fixlet Link: http://www.adobe.com/support/security/#flashplayer Fixlet Link: http://www.sans.org/top20/#c4 Fixlet Description: Adobe has released a new version of the Flash Player Plugin (27.0.0.159) for Netscape-based browsers. Use the action below to update Flash Player to the latest version. Important Note: If the Flash Player is running, a pop-up message may be displayed prompting the user to reboot their computer once the update is complete. The action will not complete until the prompt is closed. To prevent this behavior, you may want to deploy this action with the user constraint "Run only when no user is present" or display a message box before action execution instructing the user to shut down all web browsers before applying this update. Important Note: For the update to take effect immediately, choose the "Close Firefox and upgrade the Flash Player." action. The action will close any running instance of Firefox on the client machines. Schedule the update to occur at a time when a service interruption is acceptable. *************************************************************** Title: Flash Player 27.0.0.159 Available - Internet Explorer Severity: Unspecified Fixlet ID: 1091355 Fixlet Link: http://www.adobe.com/support/flashplayer/downloads.html Fixlet Link: http://www.adobe.com/support/security/#flashplayer Fixlet Link: http://www.sans.org/top20/#c4 Fixlet Description: Adobe has released a new version of Flash Player (27.0.0.159) for Internet Explorer. Use one of the actions below to update the Flash Player ActiveX control to the latest version. Important Note: There are two different installer packages for deploying this version of Flash Player ActiveX. Both will update your Flash Player to the latest version. Important Note: For the update to take effect immediately, choose the "Close Internet Explorer and deploy the Flash Player ActiveX .EXE Installer." action. The action will close any running instance of Internet Explorer on the client machines. Schedule the update to occur at a time when a service interruption is acceptable. *************************************************************** Title: Mozilla Firefox 52.4.1 ESR Available Severity: Unspecified Fixlet ID: 6081357 Fixlet Link: http://www.mozilla.org/en-US/firefox/52.4.1/releasenotes/ Fixlet Link: https://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html Fixlet Link: http://www.sans.org/top20/#c1 Fixlet Description: Mozilla has released a new version of the Firefox browser. Use the action below to update Firefox to the latest version (52.4.0 ESR). Important Note: Choosing the "Upgrade Firefox regardless of whether or not Firefox running action" will close any running instance of Firefox on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable. From winappupdates-announcements at bigmail.bigfix.com Wed Oct 18 05:10:20 2017 From: winappupdates-announcements at bigmail.bigfix.com (Notification of New Windows Application Messages) Date: Wed, 18 Oct 2017 05:10:20 -0700 Subject: [WinAppUpdates-Announcements] BES Auto Notification: New Fixlets Published in Fixlet Site: 'Updates for Windows Applications' Message-ID: Fixlet Site - 'Updates for Windows Applications' Current Version: 1076 Published: Tue, 17 Oct 2017 14:21:08 GMT New Fixlets: ============ *************************************************************** Title: Flash Player 27.0.0.170 Available - PPAPI Severity: Critical Fixlet ID: 1091346 Fixlet Link: http://www.adobe.com/support/flashplayer/downloads.html Fixlet Link: http://www.adobe.com/support/security/#flashplayer Fixlet Link: http://www.sans.org/top20/#c4 Fixlet Description: Adobe has released a new version of the Flash Player Plugin (27.0.0.170) for PPAPI. Use the action below to update Flash Player to the latest version. Important Note: If the Flash Player is running, a pop-up message may be displayed prompting the user to reboot their computer once the update is complete. The action will not complete until the prompt is closed. To prevent this behavior, you may want to deploy this action with the user constraint "Run only when no user is present" or display a message box before action execution instructing the user to shut down all web browsers before applying this update. *************************************************************** Title: Flash Player 27.0.0.170 Available - Plugin-based Severity: Critical Fixlet ID: 1091348 Fixlet Link: http://www.adobe.com/support/flashplayer/downloads.html Fixlet Link: http://www.adobe.com/support/security/#flashplayer Fixlet Link: http://www.sans.org/top20/#c4 Fixlet Description: Adobe has released a new version of the Flash Player Plugin (27.0.0.170) for Netscape-based browsers. Use the action below to update Flash Player to the latest version. Important Note: If the Flash Player is running, a pop-up message may be displayed prompting the user to reboot their computer once the update is complete. The action will not complete until the prompt is closed. To prevent this behavior, you may want to deploy this action with the user constraint "Run only when no user is present" or display a message box before action execution instructing the user to shut down all web browsers before applying this update. Important Note: For the update to take effect immediately, choose the "Close Firefox and upgrade the Flash Player." action. The action will close any running instance of Firefox on the client machines. Schedule the update to occur at a time when a service interruption is acceptable. *************************************************************** Title: Flash Player 27.0.0.170 Available - Internet Explorer Severity: Critical Fixlet ID: 1091357 Fixlet Link: http://www.adobe.com/support/flashplayer/downloads.html Fixlet Link: http://www.adobe.com/support/security/#flashplayer Fixlet Link: http://www.sans.org/top20/#c4 Fixlet Description: Adobe has released a new version of Flash Player (27.0.0.170) for Internet Explorer. Use one of the actions below to update the Flash Player ActiveX control to the latest version. Important Note: There are two different installer packages for deploying this version of Flash Player ActiveX. Both will update your Flash Player to the latest version. Important Note: For the update to take effect immediately, choose the "Close Internet Explorer and deploy the Flash Player ActiveX .EXE Installer." action. The action will close any running instance of Internet Explorer on the client machines. Schedule the update to occur at a time when a service interruption is acceptable. From winappupdates-announcements at bigmail.bigfix.com Fri Oct 20 05:10:18 2017 From: winappupdates-announcements at bigmail.bigfix.com (Notification of New Windows Application Messages) Date: Fri, 20 Oct 2017 05:10:18 -0700 Subject: [WinAppUpdates-Announcements] BES Auto Notification: New Fixlets Published in Fixlet Site: 'Updates for Windows Applications' Message-ID: Fixlet Site - 'Updates for Windows Applications' Current Version: 1078 Published: Fri, 20 Oct 2017 10:54:49 GMT New Fixlets: ============ *************************************************************** Title: Java Runtime Environment 8 update 152 Available - CORRUPT PATCH Severity: High Fixlet ID: 7051369 Fixlet Link: http://www.oracle.com/technetwork/java/javase/8train-relnotes-latest-2153846.html Fixlet Link: http://java.sun.com/javase/technologies/security/index.jsp#overview Fixlet Link: http://www.sans.org/top20/#c1 *************************************************************** Title: Java Runtime Environment 8 update 152 Available (JRE < 8 Installed) Severity: High Fixlet ID: 7051371 Fixlet Link: http://www.oracle.com/technetwork/java/javase/8train-relnotes-latest-2153846.html Fixlet Link: http://java.sun.com/javase/technologies/security/index.jsp#overview Fixlet Link: http://www.sans.org/top20/#c1 Fixlet Description: Oracle has released a new version of the Java SE Runtime Environment (JRE). Use the action below to update Java to version 8, update 152. Important Note: The Java Runtime Environment update does not remove versions of JRE older than JRE 8 update 152. Multiple versions of JRE may be present on affected computers after applying the action below. Fixlet message "Multiple JRE Versions Installed" (ID 7052001) can be used to uninstall older versions of the Java Runtime Environment. Important Note: Follow the link for the 'Java SE Runtime Environment (JRE) 8 update 152' download on this page. The file "jre-8u152-windows-i586.exe" must be downloaded, renamed "97b81310c1e851823071a2579bb7bbe992c68d05", and placed in the BES Server download cache for this action to complete successfully. For more information about manually caching file downloads on the BES Server, please see the following BigFix Support Knowledge Base article. Important Note: To avoid any service interruption on the client computer, use the default action only when client computers do not have any running instances of Java, Internet Explorer, or Firefox. The default action does not close any running instances these applications on the client machines. If any of these applications are running on the client computers, the default action might fail. Schedule the update to occur at a time when the client machine is not using these applications. Important Note: Choosing the "Upgrade to the latest JRE regardless of whether or not Internet Explorer, Firefox, or Java is currently running action" will close any running instance of Internet Explorer, Firefox, or Java on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable. *************************************************************** Title: Java Runtime Environment 8 update 152 Available (JRE 8 Installed) Severity: High Fixlet ID: 7051373 Fixlet Link: http://www.oracle.com/technetwork/java/javase/8train-relnotes-latest-2153846.html Fixlet Link: http://java.sun.com/javase/technologies/security/index.jsp#overview Fixlet Link: http://www.sans.org/top20/#c1 Fixlet Description: Oracle has released a new version of the Java SE Runtime Environment (JRE). Use the action below to update Java to version 8, update 152. Important Note: The Java Runtime Environment update does not remove versions of JRE older than JRE 8 update 152. Multiple versions of JRE may be present on affected computers after applying the action below. Fixlet message "Multiple JRE Versions Installed" (ID 7052001) can be used to uninstall older versions of the Java Runtime Environment. Important Note: Follow the link for the 'Java SE Runtime Environment (JRE) 8 update 152' download on this page. The file "jre-8u152-windows-i586.exe" must be downloaded, renamed "97b81310c1e851823071a2579bb7bbe992c68d05", and placed in the BES Server download cache for this action to complete successfully. For more information about manually caching file downloads on the BES Server, please see the following BigFix Support Knowledge Base article. Important Note: Choosing the "Upgrade to the latest JRE regardless of whether or not Internet Explorer, Firefox, or Java is currently running action" will close any running instance of Internet Explorer, Firefox, or Java on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable. *************************************************************** Title: Java Runtime Environment 8 update 152 Available (x64) (JRE 8 Installed) Severity: High Fixlet ID: 7056631 Fixlet Link: http://www.oracle.com/technetwork/java/javase/8train-relnotes-latest-2153846.html Fixlet Link: http://java.sun.com/javase/technologies/security/index.jsp#overview Fixlet Link: http://www.sans.org/top20/#c1 Fixlet Description: Oracle has released a new version of the Java SE Runtime Environment (JRE). Use the action below to update Java to version 8, update 152. Important Note: The Java Runtime Environment update does not remove versions of JRE older than JRE 8 update 152. Multiple versions of JRE may be present on affected computers after applying the action below. Fixlet message "Multiple JRE Versions Installed" (ID 7057001) can be used to uninstall older versions of the Java Runtime Environment. Important Note: Follow the link for the 'Java SE Runtime Environment (JRE) 8 update 152' download on this page. The file "jre-8u152-windows-x64.exe" must be downloaded, renamed "ade739382b8ca9c3d30eea82ac0a8c41423bf05b", and placed in the BES Server download cache for this action to complete successfully. For more information about manually caching file downloads on the BES Server, please see the following BigFix Support Knowledge Base article. Important Note: To avoid any service interruption on the client computer, use the default action only when client computers do not have any running instances of Java, Internet Explorer, or Firefox. The default action does not close any running instances these applications on the client machines. If any of these applications are running on the client computers, the default action might fail. Schedule the update to occur at a time when the client machine is not using these applications. Important Note: Choosing the "Upgrade to the latest JRE regardless of whether or not Internet Explorer, Firefox, or Java is currently running action" will close any running instance of Internet Explorer, Firefox, or Java on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable. *************************************************************** Title: Java Runtime Environment 8 update 152 (32-bit) Available (JRE 8 32-bit version Installed) (x64) Severity: High Fixlet ID: 7056633 Fixlet Link: http://www.oracle.com/technetwork/java/javase/8train-relnotes-latest-2153846.html Fixlet Link: http://java.sun.com/javase/technologies/security/index.jsp#overview Fixlet Link: http://www.sans.org/top20/#c1 Fixlet Description: Oracle has released a new version of the Java SE Runtime Environment (JRE). Use the action below to update Java to version 8, update 152. Important Note: The Java Runtime Environment update does not remove versions of JRE older than JRE 8 update 152. Multiple versions of JRE may be present on affected computers after applying the action below. Fixlet message "Multiple JRE Versions Installed" (ID 7052001) can be used to uninstall older versions of the Java Runtime Environment. Important Note: Follow the link for the 'Java SE Runtime Environment (JRE) 8 update 152' download on this page. The file "jre-8u152-windows-i586.exe" must be downloaded, renamed "97b81310c1e851823071a2579bb7bbe992c68d05", and placed in the BES Server download cache for this action to complete successfully. For more information about manually caching file downloads on the BES Server, please see the following BigFix Support Knowledge Base article. Important Note: For Windows Vista, Windows 7, Windows Server 2008, and Windows Server 2008 R2 users, the installation may fail if the User Account Control (UAC) is enabled. Important Note: To avoid any service interruption on the client computer, use the default action only when client computers do not have any running instances of Java, Internet Explorer, or Firefox. The default action does not close any running instances these applications on the client machines. If any of these applications are running on the client computers, the default action might fail. Schedule the update to occur at a time when the client machine is not using these applications. Important Note: Choosing the "Upgrade to the latest JRE regardless of whether or not Internet Explorer, Firefox, or Java is currently running action" will close any running instance of Internet Explorer, Firefox, or Java on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable. *************************************************************** Title: Java Runtime Environment 8 update 152 (32-bit) Available (JRE < 8 32-bit version Installed) (x64) Severity: High Fixlet ID: 7056635 Fixlet Link: http://www.oracle.com/technetwork/java/javase/8train-relnotes-latest-2153846.html Fixlet Link: http://java.sun.com/javase/technologies/security/index.jsp#overview Fixlet Link: http://www.sans.org/top20/#c1 Fixlet Description: Oracle has released a new version of the Java SE Runtime Environment (JRE). Use the action below to update Java to version 8, update 152. Important Note: The Java Runtime Environment update does not remove versions of JRE older than JRE 8 update 152. Multiple versions of JRE may be present on affected computers after applying the action below. Fixlet message "Multiple JRE Versions Installed" (ID 7052001) can be used to uninstall older versions of the Java Runtime Environment. Important Note: Follow the link for the 'Java SE Runtime Environment (JRE) 8 update 152' download on this page. The file "jre-8u152-windows-i586.exe" must be downloaded, renamed "97b81310c1e851823071a2579bb7bbe992c68d05", and placed in the BES Server download cache for this action to complete successfully. For more information about manually caching file downloads on the BES Server, please see the following BigFix Support Knowledge Base article. Important Note: For Windows Vista, Windows 7, Windows Server 2008, and Windows Server 2008 R2 users, the installation may fail if the User Account Control (UAC) is enabled. Important Note: To avoid any service interruption on the client computer, use the default action only when client computers do not have any running instances of Java, Internet Explorer, or Firefox. The default action does not close any running instances these applications on the client machines. If any of these applications are running on the client computers, the default action might fail. Schedule the update to occur at a time when the client machine is not using these applications. Important Note: Choosing the "Upgrade to the latest JRE regardless of whether or not Internet Explorer, Firefox, or Java is currently running action" will close any running instance of Internet Explorer, Firefox, or Java on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable. *************************************************************** Title: Java Runtime Environment 8 update 152 (32-bit) Available (x64) - CORRUPT PATCH Severity: High Fixlet ID: 7056637 Fixlet Link: http://www.oracle.com/technetwork/java/javase/8train-relnotes-latest-2153846.html Fixlet Link: http://java.sun.com/javase/technologies/security/index.jsp#overview Fixlet Link: http://www.sans.org/top20/#c1 *************************************************************** Title: Java Runtime Environment 8 update 152 Available (x64) - CORRUPT PATCH Severity: High Fixlet ID: 7056639 Fixlet Link: http://www.oracle.com/technetwork/java/javase/8train-relnotes-latest-2153846.html Fixlet Link: http://java.sun.com/javase/technologies/security/index.jsp#overview Fixlet Link: http://www.sans.org/top20/#c1 *************************************************************** Title: Java Runtime Environment 8 update 152 Available (x64) (JRE < 8 Installed) Severity: High Fixlet ID: 7056641 Fixlet Link: http://www.oracle.com/technetwork/java/javase/8train-relnotes-latest-2153846.html Fixlet Link: http://java.sun.com/javase/technologies/security/index.jsp#overview Fixlet Link: http://www.sans.org/top20/#c1 Fixlet Description: Oracle has released a new version of the Java SE Runtime Environment (JRE). Use the action below to update Java to version 8, update 152. Important Note: The Java Runtime Environment update does not remove versions of JRE older than JRE 8 update 152. Multiple versions of JRE may be present on affected computers after applying the action below. Fixlet message "Multiple JRE Versions Installed" (ID 7057001) can be used to uninstall older versions of the Java Runtime Environment. Important Note: Follow the link for the 'Java SE Runtime Environment (JRE) 8 update 152' download on this page. The file "jre-8u152-windows-x64.exe" must be downloaded, renamed "ade739382b8ca9c3d30eea82ac0a8c41423bf05b", and placed in the BES Server download cache for this action to complete successfully. For more information about manually caching file downloads on the BES Server, please see the following BigFix Support Knowledge Base article. Important Note: To avoid any service interruption on the client computer, use the default action only when client computers do not have any running instances of Java, Internet Explorer, or Firefox. The default action does not close any running instances these applications on the client machines. If any of these applications are running on the client computers, the default action might fail. Schedule the update to occur at a time when the client machine is not using these applications. Important Note: Choosing the "Upgrade to the latest JRE regardless of whether or not Internet Explorer, Firefox, or Java is currently running action" will close any running instance of Internet Explorer, Firefox, or Java on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable. From winappupdates-announcements at bigmail.bigfix.com Tue Oct 24 05:10:16 2017 From: winappupdates-announcements at bigmail.bigfix.com (Notification of New Windows Application Messages) Date: Tue, 24 Oct 2017 05:10:16 -0700 Subject: [WinAppUpdates-Announcements] BES Auto Notification: New Fixlets Published in Fixlet Site: 'Updates for Windows Applications' Message-ID: Fixlet Site - 'Updates for Windows Applications' Current Version: 1079 Published: Tue, 24 Oct 2017 09:26:38 GMT New Fixlets: ============ *************************************************************** Title: Java Runtime Environment 8 update 151 Available - CORRUPT PATCH Severity: Critical Fixlet ID: 7051375 Fixlet Link: http://www.oracle.com/technetwork/java/javase/8train-relnotes-latest-2153846.html Fixlet Link: http://java.sun.com/javase/technologies/security/index.jsp#overview Fixlet Link: http://www.sans.org/top20/#c1 *************************************************************** Title: Java Runtime Environment 8 update 151 Available (JRE < 8 Installed) Severity: Critical Fixlet ID: 7051377 Fixlet Link: http://www.oracle.com/technetwork/java/javase/8train-relnotes-latest-2153846.html Fixlet Link: http://java.sun.com/javase/technologies/security/index.jsp#overview Fixlet Link: http://www.sans.org/top20/#c1 Fixlet Description: Oracle has released a new version of the Java SE Runtime Environment (JRE). Use the action below to update Java to version 8, update 151. Important Note: The Java Runtime Environment update does not remove versions of JRE older than JRE 8 update 151. Multiple versions of JRE may be present on affected computers after applying the action below. Fixlet message "Multiple JRE Versions Installed" (ID 7052001) can be used to uninstall older versions of the Java Runtime Environment. Important Note: Follow the link for the 'Java SE Runtime Environment (JRE) 8 update 151' download on this page. The file "jre-8u151-windows-i586.exe" must be downloaded, renamed "94f6903ef5514405131298fc351af9467adf945d", and placed in the BES Server download cache for this action to complete successfully. For more information about manually caching file downloads on the BES Server, please see the following BigFix Support Knowledge Base article. Important Note: To avoid any service interruption on the client computer, use the default action only when client computers do not have any running instances of Java, Internet Explorer, or Firefox. The default action does not close any running instances these applications on the client machines. If any of these applications are running on the client computers, the default action might fail. Schedule the update to occur at a time when the client machine is not using these applications. Important Note: Choosing the "Upgrade to the latest JRE regardless of whether or not Internet Explorer, Firefox, or Java is currently running action" will close any running instance of Internet Explorer, Firefox, or Java on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable. *************************************************************** Title: Java Runtime Environment 8 update 151 Available (JRE 8 Installed) Severity: Critical Fixlet ID: 7051379 Fixlet Link: http://www.oracle.com/technetwork/java/javase/8train-relnotes-latest-2153846.html Fixlet Link: http://java.sun.com/javase/technologies/security/index.jsp#overview Fixlet Link: http://www.sans.org/top20/#c1 Fixlet Description: Oracle has released a new version of the Java SE Runtime Environment (JRE). Use the action below to update Java to version 8, update 151. Important Note: The Java Runtime Environment update does not remove versions of JRE older than JRE 8 update 151. Multiple versions of JRE may be present on affected computers after applying the action below. Fixlet message "Multiple JRE Versions Installed" (ID 7052001) can be used to uninstall older versions of the Java Runtime Environment. Important Note: Follow the link for the 'Java SE Runtime Environment (JRE) 8 update 151' download on this page. The file "jre-8u151-windows-i586.exe" must be downloaded, renamed "94f6903ef5514405131298fc351af9467adf945d", and placed in the BES Server download cache for this action to complete successfully. For more information about manually caching file downloads on the BES Server, please see the following BigFix Support Knowledge Base article. Important Note: Choosing the "Upgrade to the latest JRE regardless of whether or not Internet Explorer, Firefox, or Java is currently running action" will close any running instance of Internet Explorer, Firefox, or Java on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable. *************************************************************** Title: Java Runtime Environment 8 update 151 Available (x64) (JRE 8 Installed) Severity: Critical Fixlet ID: 7056643 Fixlet Link: http://www.oracle.com/technetwork/java/javase/8train-relnotes-latest-2153846.html Fixlet Link: http://java.sun.com/javase/technologies/security/index.jsp#overview Fixlet Link: http://www.sans.org/top20/#c1 Fixlet Description: Oracle has released a new version of the Java SE Runtime Environment (JRE). Use the action below to update Java to version 8, update 151. Important Note: The Java Runtime Environment update does not remove versions of JRE older than JRE 8 update 151. Multiple versions of JRE may be present on affected computers after applying the action below. Fixlet message "Multiple JRE Versions Installed" (ID 7057001) can be used to uninstall older versions of the Java Runtime Environment. Important Note: Follow the link for the 'Java SE Runtime Environment (JRE) 8 update 151' download on this page. The file "jre-8u151-windows-x64.exe" must be downloaded, renamed "57747ce996b5b2f1786601b04a0b0355fc82493a", and placed in the BES Server download cache for this action to complete successfully. For more information about manually caching file downloads on the BES Server, please see the following BigFix Support Knowledge Base article. Important Note: To avoid any service interruption on the client computer, use the default action only when client computers do not have any running instances of Java, Internet Explorer, or Firefox. The default action does not close any running instances these applications on the client machines. If any of these applications are running on the client computers, the default action might fail. Schedule the update to occur at a time when the client machine is not using these applications. Important Note: Choosing the "Upgrade to the latest JRE regardless of whether or not Internet Explorer, Firefox, or Java is currently running action" will close any running instance of Internet Explorer, Firefox, or Java on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable. *************************************************************** Title: Java Runtime Environment 8 update 151 (32-bit) Available (JRE 8 32-bit version Installed) (x64) Severity: Critical Fixlet ID: 7056645 Fixlet Link: http://www.oracle.com/technetwork/java/javase/8train-relnotes-latest-2153846.html Fixlet Link: http://java.sun.com/javase/technologies/security/index.jsp#overview Fixlet Link: http://www.sans.org/top20/#c1 Fixlet Description: Oracle has released a new version of the Java SE Runtime Environment (JRE). Use the action below to update Java to version 8, update 151. Important Note: The Java Runtime Environment update does not remove versions of JRE older than JRE 8 update 151. Multiple versions of JRE may be present on affected computers after applying the action below. Fixlet message "Multiple JRE Versions Installed" (ID 7052001) can be used to uninstall older versions of the Java Runtime Environment. Important Note: Follow the link for the 'Java SE Runtime Environment (JRE) 8 update 151' download on this page. The file "jre-8u151-windows-i586.exe" must be downloaded, renamed "94f6903ef5514405131298fc351af9467adf945d", and placed in the BES Server download cache for this action to complete successfully. For more information about manually caching file downloads on the BES Server, please see the following BigFix Support Knowledge Base article. Important Note: For Windows Vista, Windows 7, Windows Server 2008, and Windows Server 2008 R2 users, the installation may fail if the User Account Control (UAC) is enabled. Important Note: To avoid any service interruption on the client computer, use the default action only when client computers do not have any running instances of Java, Internet Explorer, or Firefox. The default action does not close any running instances these applications on the client machines. If any of these applications are running on the client computers, the default action might fail. Schedule the update to occur at a time when the client machine is not using these applications. Important Note: Choosing the "Upgrade to the latest JRE regardless of whether or not Internet Explorer, Firefox, or Java is currently running action" will close any running instance of Internet Explorer, Firefox, or Java on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable. *************************************************************** Title: Java Runtime Environment 8 update 151 (32-bit) Available (JRE < 8 32-bit version Installed) (x64) Severity: Critical Fixlet ID: 7056647 Fixlet Link: http://www.oracle.com/technetwork/java/javase/8train-relnotes-latest-2153846.html Fixlet Link: http://java.sun.com/javase/technologies/security/index.jsp#overview Fixlet Link: http://www.sans.org/top20/#c1 Fixlet Description: Oracle has released a new version of the Java SE Runtime Environment (JRE). Use the action below to update Java to version 8, update 151. Important Note: The Java Runtime Environment update does not remove versions of JRE older than JRE 8 update 151. Multiple versions of JRE may be present on affected computers after applying the action below. Fixlet message "Multiple JRE Versions Installed" (ID 7052001) can be used to uninstall older versions of the Java Runtime Environment. Important Note: Follow the link for the 'Java SE Runtime Environment (JRE) 8 update 151' download on this page. The file "jre-8u151-windows-i586.exe" must be downloaded, renamed "94f6903ef5514405131298fc351af9467adf945d", and placed in the BES Server download cache for this action to complete successfully. For more information about manually caching file downloads on the BES Server, please see the following BigFix Support Knowledge Base article. Important Note: For Windows Vista, Windows 7, Windows Server 2008, and Windows Server 2008 R2 users, the installation may fail if the User Account Control (UAC) is enabled. Important Note: To avoid any service interruption on the client computer, use the default action only when client computers do not have any running instances of Java, Internet Explorer, or Firefox. The default action does not close any running instances these applications on the client machines. If any of these applications are running on the client computers, the default action might fail. Schedule the update to occur at a time when the client machine is not using these applications. Important Note: Choosing the "Upgrade to the latest JRE regardless of whether or not Internet Explorer, Firefox, or Java is currently running action" will close any running instance of Internet Explorer, Firefox, or Java on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable. *************************************************************** Title: Java Runtime Environment 8 update 151 (32-bit) Available (x64) - CORRUPT PATCH Severity: Critical Fixlet ID: 7056649 Fixlet Link: http://www.oracle.com/technetwork/java/javase/8train-relnotes-latest-2153846.html Fixlet Link: http://java.sun.com/javase/technologies/security/index.jsp#overview Fixlet Link: http://www.sans.org/top20/#c1 *************************************************************** Title: Java Runtime Environment 8 update 151 Available (x64) - CORRUPT PATCH Severity: Critical Fixlet ID: 7056651 Fixlet Link: http://www.oracle.com/technetwork/java/javase/8train-relnotes-latest-2153846.html Fixlet Link: http://java.sun.com/javase/technologies/security/index.jsp#overview Fixlet Link: http://www.sans.org/top20/#c1 *************************************************************** Title: Java Runtime Environment 8 update 151 Available (x64) (JRE < 8 Installed) Severity: Critical Fixlet ID: 7056653 Fixlet Link: http://www.oracle.com/technetwork/java/javase/8train-relnotes-latest-2153846.html Fixlet Link: http://java.sun.com/javase/technologies/security/index.jsp#overview Fixlet Link: http://www.sans.org/top20/#c1 Fixlet Description: Oracle has released a new version of the Java SE Runtime Environment (JRE). Use the action below to update Java to version 8, update 151. Important Note: The Java Runtime Environment update does not remove versions of JRE older than JRE 8 update 151. Multiple versions of JRE may be present on affected computers after applying the action below. Fixlet message "Multiple JRE Versions Installed" (ID 7057001) can be used to uninstall older versions of the Java Runtime Environment. Important Note: Follow the link for the 'Java SE Runtime Environment (JRE) 8 update 151' download on this page. The file "jre-8u151-windows-x64.exe" must be downloaded, renamed "57747ce996b5b2f1786601b04a0b0355fc82493a", and placed in the BES Server download cache for this action to complete successfully. For more information about manually caching file downloads on the BES Server, please see the following BigFix Support Knowledge Base article. Important Note: To avoid any service interruption on the client computer, use the default action only when client computers do not have any running instances of Java, Internet Explorer, or Firefox. The default action does not close any running instances these applications on the client machines. If any of these applications are running on the client computers, the default action might fail. Schedule the update to occur at a time when the client machine is not using these applications. Important Note: Choosing the "Upgrade to the latest JRE regardless of whether or not Internet Explorer, Firefox, or Java is currently running action" will close any running instance of Internet Explorer, Firefox, or Java on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable. From winappupdates-announcements at bigmail.bigfix.com Thu Oct 26 05:10:20 2017 From: winappupdates-announcements at bigmail.bigfix.com (Notification of New Windows Application Messages) Date: Thu, 26 Oct 2017 05:10:20 -0700 Subject: [WinAppUpdates-Announcements] BES Auto Notification: New Fixlets Published in Fixlet Site: 'Updates for Windows Applications' Message-ID: Fixlet Site - 'Updates for Windows Applications' Current Version: 1080 Published: Thu, 26 Oct 2017 10:02:36 GMT New Fixlets: ============ *************************************************************** Title: Flash Player 27.0.0.183 Available - PPAPI Severity: Unspecified Fixlet ID: 1091350 Fixlet Link: http://www.adobe.com/support/flashplayer/downloads.html Fixlet Link: http://www.adobe.com/support/security/#flashplayer Fixlet Link: http://www.sans.org/top20/#c4 Fixlet Description: Adobe has released a new version of the Flash Player Plugin (27.0.0.183) for PPAPI. Use the action below to update Flash Player to the latest version. Important Note: If the Flash Player is running, a pop-up message may be displayed prompting the user to reboot their computer once the update is complete. The action will not complete until the prompt is closed. To prevent this behavior, you may want to deploy this action with the user constraint "Run only when no user is present" or display a message box before action execution instructing the user to shut down all web browsers before applying this update. *************************************************************** Title: Flash Player 27.0.0.183 Available - Plugin-based Severity: Unspecified Fixlet ID: 1091352 Fixlet Link: http://www.adobe.com/support/flashplayer/downloads.html Fixlet Link: http://www.adobe.com/support/security/#flashplayer Fixlet Link: http://www.sans.org/top20/#c4 Fixlet Description: Adobe has released a new version of the Flash Player Plugin (27.0.0.183) for Netscape-based browsers. Use the action below to update Flash Player to the latest version. Important Note: If the Flash Player is running, a pop-up message may be displayed prompting the user to reboot their computer once the update is complete. The action will not complete until the prompt is closed. To prevent this behavior, you may want to deploy this action with the user constraint "Run only when no user is present" or display a message box before action execution instructing the user to shut down all web browsers before applying this update. Important Note: For the update to take effect immediately, choose the "Close Firefox and upgrade the Flash Player." action. The action will close any running instance of Firefox on the client machines. Schedule the update to occur at a time when a service interruption is acceptable. *************************************************************** Title: Flash Player 27.0.0.183 Available - Internet Explorer Severity: Unspecified Fixlet ID: 1091359 Fixlet Link: http://www.adobe.com/support/flashplayer/downloads.html Fixlet Link: http://www.adobe.com/support/security/#flashplayer Fixlet Link: http://www.sans.org/top20/#c4 Fixlet Description: Adobe has released a new version of Flash Player (27.0.0.183) for Internet Explorer. Use one of the actions below to update the Flash Player ActiveX control to the latest version. Important Note: There are two different installer packages for deploying this version of Flash Player ActiveX. Both will update your Flash Player to the latest version. Important Note: For the update to take effect immediately, choose the "Close Internet Explorer and deploy the Flash Player ActiveX .EXE Installer." action. The action will close any running instance of Internet Explorer on the client machines. Schedule the update to occur at a time when a service interruption is acceptable. *************************************************************** Title: WinZip 22.0 Available (x64) Severity: Unspecified Fixlet ID: 10060022 Fixlet Link: http://www.winzip.com Fixlet Description: Note: This Fixlet Message is for audit purposes only. WinZip Computing has released a new version of WinZip (22.0 Build 12663). Important Note: WinZip 22.0 is not a free upgrade. Please see this page for more information. *************************************************************** Title: WinZip 22.0 Available Severity: Unspecified Fixlet ID: 10060025 Fixlet Link: http://www.winzip.com Fixlet Description: Note: This Fixlet Message is for audit purposes only. WinZip Computing has released a new version of WinZip (22.0 Build 12663). Important Note: WinZip 22.0 is not a free upgrade. Please see this page for more information. From winappupdates-announcements at bigmail.bigfix.com Fri Oct 27 05:10:19 2017 From: winappupdates-announcements at bigmail.bigfix.com (Notification of New Windows Application Messages) Date: Fri, 27 Oct 2017 05:10:19 -0700 Subject: [WinAppUpdates-Announcements] BES Auto Notification: New Fixlets Published in Fixlet Site: 'Updates for Windows Applications' Message-ID: Fixlet Site - 'Updates for Windows Applications' Current Version: 1081 Published: Fri, 27 Oct 2017 09:27:07 GMT New Fixlets: ============ *************************************************************** Title: Mozilla Firefox 56.0.2 Available Severity: Unspecified Fixlet ID: 6081384 Fixlet Link: http://www.mozilla.com/en-US/firefox/56.0.2/releasenotes/ Fixlet Link: https://www.mozilla.org/security/known-vulnerabilities/firefox.html Fixlet Link: http://www.sans.org/top20/#c1 Fixlet Description: Mozilla has released a new version of the Firefox browser. Use the action below to update Firefox to the latest version (56.0.2). Important Note: Choosing the "Upgrade Firefox regardless of whether or not Firefox running action" will close any running instance of Firefox on the client machines. Please schedule the update to occur at a time when a service interruption is acceptable.