cancel
Showing results for 
Search instead for 
Did you mean: 
Reliable Contributor twenden
Reliable Contributor
Report Inappropriate Content
Message 1 of 19

Confused about new ePO Hotfix 1229850

Jump to solution

Has anyone looked at the recent hotifx 1229850 for ePO 5.9.1. This was just releae today. It is very vague at what was fixed but that it is mandatory. It states it fixes CVE-2018-6671 and CVE-2018-6672 neither of which I can find detail about.

I did test this hotfix on a test ePO server. However, It states to verify installation that you go to

 

On a non-cluster ePO server, navigate to the following folder: [ePO Installation Folder]\Server\extensions\installed\ePOCore\5.3.2.156\webapp\WEB-INF\lib and right click the filer callededitProxySettings.jsp .

I can't seem to find that file under the path mentioned. Also look under ePOCore\5.9.1.251 but can't find it there also.

 

I am confused about this hotfix and if McAfee has documented it incorrectly.

 

hotfix.jpeg

 

1 Solution

Accepted Solutions
McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 18 of 19

Re: Confused about new ePO Hotfix 1229850

Jump to solution

Ok thanks for clarification.  Yes, it should be fine.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

18 Replies
Highlighted
hserra
Level 8
Report Inappropriate Content
Message 2 of 19

Re: Confused about new ePO Hotfix 1229850

Jump to solution

Hi,

I've open a SR about this situation. I have 5.3.3 epo

For what I see in installation logs the file changed is "EPOCore.jar" and not  "editProxySettings.jsp" in 5.3.3.279\webapp\WEB-INF\lib .

For server.xml I cannot find what file it is modifed.

I hope McAfee can reply with the right answer . 

Reliable Contributor twenden
Reliable Contributor
Report Inappropriate Content
Message 3 of 19

Re: Confused about new ePO Hotfix 1229850

Jump to solution

Thanks. Keep up posted what McAfee support tells you. Don't want to apply a hotfix with such confusing instructions.

hserra
Level 8
Report Inappropriate Content
Message 4 of 19

Re: Confused about new ePO Hotfix 1229850

Jump to solution

Hi,

McAfee confirm there is an issue with the current hotfix not updating the version in the server.ini and the release notes are misleading

I think it is better not to update...

I will post soon I have more information

Reliable Contributor twenden
Reliable Contributor
Report Inappropriate Content
Message 5 of 19

Re: Confused about new ePO Hotfix 1229850

Jump to solution

Thanks for the update. I plan on not installng the hotfix until this gets resolved.

McAfee Employee kabney
McAfee Employee
Report Inappropriate Content
Message 6 of 19

Re: Confused about new ePO Hotfix 1229850

Jump to solution

The file path for ePO 5.9.1 is different. Check %ePOdir%/Server/extensions/installed/EPOCore/5.9.1.251/webapp/proxy for the"editProxySettings.jsp" file change (Step 2 on Install Verification - Properties, details, modified on 5/30).

Reliable Contributor twenden
Reliable Contributor
Report Inappropriate Content
Message 7 of 19

Re: Confused about new ePO Hotfix 1229850

Jump to solution

Thanks. Found the file that we need to check for. I will install this hotfix on a test ePO server. Hopefully, McAfee can update the release notes. 

McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 8 of 19

Re: Confused about new ePO Hotfix 1229850

Jump to solution

The release notes have been re-published to correct the validation instructions.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 9 of 19

Re: Confused about new ePO Hotfix 1229850

Jump to solution

Slight delay in re-publishing it yet, but it will be fixed soon.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 10 of 19

Re: Confused about new ePO Hotfix 1229850

Jump to solution

I am checking into getting the release notes corrected, as they are incorrect. 

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

More McAfee Tools to Help You

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community