Quantcast

February 2012 Patch Tuesday

classic Classic list List threaded Threaded
6 messages Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

February 2012 Patch Tuesday

Josh Turpin

Hello,

 

Please find attached the OVAL Vulnerability definitions for February 2012 Patch Tuesday.

 

 

 

Regards,

 

 

Josh Turpin
www.symantec.com
________________________________

 
[hidden email]
________________________________

 

wordlogo

 

This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication.

 

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email].

MS_PT_FEB_2012.zip (71K) Download Attachment
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: February 2012 Patch Tuesday

Hansbury, Matt
Hi Josh,

I have processed this submission and the content is now available in the OVAL Repository.  

There were two small issues that I want to mention, however.  In oval-def-MS12-008.xml, there was a State with a MITRE ID of oval:org.mitre.oval:ste:12589, and a version of 0.  I looked up the ID and it mapped to an different State, so my guess is that you had meant to give this State a non-MITRE namespace to create a new State, so I made that adjustment.  If that was not the intent for some reason, it is easy to fix, but I figured I'd make that change and process things, as the worst case was a non-reused State.  The attached file has the update I made.

I also had to update the version (and only the version) for oval:org.mitre.oval:obj:15714 in oval-def-MS12-015.xml, for some reason.  The content was identical, but the version number was slightly off.    That file is also attached.

Let me know if either of those cause problems.

Thanks
Matt

-----Original Message-----
From: Josh Turpin [mailto:[hidden email]]
Sent: Tuesday, February 21, 2012 9:28 AM
To: oval-discussion-list OVAL Discussion List/Closed Public Discussi
Subject: [OVAL-DISCUSSION-LIST] February 2012 Patch Tuesday

Hello,

 

Please find attached the OVAL Vulnerability definitions for February 2012 Patch Tuesday.

 

 

 

Regards,

 

 

Josh Turpin
www.symantec.com <http://www.symantec.com/>
________________________________

 
[hidden email]
________________________________

 

wordlogo

 

This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication.

 

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email].

To unsubscribe, send an email message to [hidden email] with
SIGNOFF OVAL-DISCUSSION-LIST
in the BODY of the message.  If you have difficulties, write to [hidden email].

oval-def-MS12-008.xml (134K) Download Attachment
oval-def-MS12-015.xml (20K) Download Attachment
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

March 2012 Patch Tuesday

Dragos Prisaca-3
In reply to this post by Josh Turpin

Hello,

 

Please find attached the OVAL Vulnerability definitions for March 2012 Patch Tuesday.

 

Regards,

_Dragos.

 

 

Dragos Prisaca
Princ. Software Engineer
Symantec Corporation 
www.symantec.com
                                                           

[hidden email]
                                                           

wordlogo

                                                                               

sig_green_bug

 

This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication.

 

 

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email].

ms-pt-mar-2012.7z (16K) Download Attachment
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: March 2012 Patch Tuesday

Aharon

Dragos, thank you sir!

 

DTCC Non-Confidential (White)
---------------------------------------------------
Michael "Aharon" Chernin
Security Automation Program Manager
Corporate Information Security -Depository Trust & Clearing Corporation
O: 813-470-2173

 

From: Dragos Prisaca [mailto:[hidden email]]
Sent: Friday, March 16, 2012 3:13 PM
To: [hidden email]
Subject: [OVAL-DISCUSSION-LIST] March 2012 Patch Tuesday

 

Hello,

 

Please find attached the OVAL Vulnerability definitions for March 2012 Patch Tuesday.

 

Regards,

_Dragos.

 

 

Dragos Prisaca
Princ. Software Engineer
Symantec Corporation 
www.symantec.com
                                                           

[hidden email]
                                                           

wordlogo

                                                                               

sig_green_bug

 

This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication.

 

 

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email].


_____________________________________________________________
DTCC DISCLAIMER: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify us immediately and delete the email and any attachments from your system. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.
To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email].
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: March 2012 Patch Tuesday

drothenberg
In reply to this post by Dragos Prisaca-3

Dragos/All,

                The Patch Tuesday content has been processed and is now available in the OVAL Repository. One side note on the “oval-def-MS12-017” file, your submission makes use of the wmi_test, wmi_object, and wmi_state. These have been deprecated in favor of the wmi57 entities. The submission was processed as is, but should we switch these over? It may also help to update this section in your tools if that part of your content generation is automated.

 

Thanks,

David Rothenberg

 

From: Dragos Prisaca [mailto:[hidden email]]
Sent: Friday, March 16, 2012 3:13 PM
To: oval-discussion-list OVAL Discussion List/Closed Public Discussi
Subject: [OVAL-DISCUSSION-LIST] March 2012 Patch Tuesday

 

Hello,

 

Please find attached the OVAL Vulnerability definitions for March 2012 Patch Tuesday.

 

Regards,

_Dragos.

 

 

Dragos Prisaca
Princ. Software Engineer
Symantec Corporation 
www.symantec.com
                                                           

[hidden email]
                                                           

wordlogo

                                                                               

sig_green_bug

 

This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication.

 

 

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email].

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email].
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: March 2012 Patch Tuesday

Dragos Prisaca-3
I am planning to update the wmi tests next week.


Thanks,
_Dragos.


On Mar 16, 2012, at 7:42 PM, "Rothenberg, David B." <[hidden email]> wrote:

Dragos/All,

                The Patch Tuesday content has been processed and is now available in the OVAL Repository. One side note on the “oval-def-MS12-017” file, your submission makes use of the wmi_test, wmi_object, and wmi_state. These have been deprecated in favor of the wmi57 entities. The submission was processed as is, but should we switch these over? It may also help to update this section in your tools if that part of your content generation is automated.

 

Thanks,

David Rothenberg

 

From: Dragos Prisaca [mailto:[hidden email]]
Sent: Friday, March 16, 2012 3:13 PM
To: oval-discussion-list OVAL Discussion List/Closed Public Discussi
Subject: [OVAL-DISCUSSION-LIST] March 2012 Patch Tuesday

 

Hello,

 

Please find attached the OVAL Vulnerability definitions for March 2012 Patch Tuesday.

 

Regards,

_Dragos.

 

 

Dragos Prisaca
Princ. Software Engineer
Symantec Corporation 
www.symantec.com
                                                           

[hidden email]
                                                           

<image001.jpg>

                                                                               

<image002.gif>

 

This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication.

 

 

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email].

To unsubscribe, send an email message to [hidden email] with SIGNOFF OVAL-DISCUSSION-LIST in the BODY of the message. If you have difficulties, write to [hidden email].
Loading...