Data Loss Prevention (DLP) Prevent 10.0 Patch 2 Hotfix 5 is now available. This release includes new features, fixes, and enhancements including:

• All of the previous issues resolved in 10.0.204
• This release corrects a fault where DLP Prevent failed to handle ICAP Preview messages with their size greater than the Preview limit.

To download DLP Prevent 10.0 Patch 2 Hotfix 5, go to the Product Downloads site at:
http://www.mcafee.com/us/downloads/downloads.aspx.   

Data Loss Prevention Prevent 11.0 Hotfix 2 is now available. This release includes new features, fixes, and enhancements including:

• All of the previous issues in 11.0.0.1
• Corrects a fault where McAfee DLP Prevent failed to handle ICAP Preview messages with their size greater than the Preview limit.

To download Data Loss Prevention Prevent 11.0 Hotfix 2 go to the Product Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx.   

For a full list of changes, see the Release Notes in PD27217: https://kc.mcafee.com/corporate/index?page=content&id=PD27217

For a list of Known Issues, see KB89301: https://kc.mcafee.com/corporate/index?page=content&id=KB89301

Data Loss Prevention Data Loss Prevention Hotfix 9.3.4.1.5 is now available. This release includes new features, fixes, and enhancements including:

• You can now automatically back up files to Windows 2012 server.
• Changes or additions to policy, rule, or concept are now saved successfully without timing out.
• The uid is now displayed in the syslog incident reports.
• McAfee DLP now supports Czechoslovakian content.
• You can now back up files to Windows 10 CIFS share successfully.
• McAfee DLP now supports OpenSSL 1.0.2k.

To download Data Loss Prevention Data Loss Prevention Hotfix 9.3.4.1.5, go to the Product Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx  
For a full list of changes, see the Release Notes in PD27198: https://kc.mcafee.com/corporate/index?page=content&id=PD27198 

Three vulnerabilities in ePolicy Orchestrator (ePO) have been discovered and resolved.

AFFECTED SOFTWARE

• 5.1.3 and earlier
• 5.3.2 and earlier
• 5.9.0

REMEDIATED/PATCHED VERSIONS
The vulnerability is remediated in these versions:

• 5.9.0 with EPO590HF1202868
• 5.3.3  
• 5.3.2 with EPO532HF1202868
• 5.3.1 with EPO531HF1202868
• 5.1.3 with EPO513HF1202868

IMPACT

• CVE-2017-3169 (CVSS: 3.7; Severity: Low)- In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port.
• CVE-2017-7668  (CVSS: 6.5; Severity: Medium)- The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value.
• CVE-2017-7679 (CVSS: 3.7; Severity: Low) - In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.

RECOMMENDATION
McAfee recommends that all customers verify that they have applied the latest updates. Impacted users should install the relevant patches or hotfixes. For full instructions and information, see Knowledge Base article SB10206, McAfee – Security Bulletin: ePO update fixes multiple latest apache vulnerabilities. (https://kc.mcafee.com/corporate/index?page=content&id=SB10206

Data Loss Prevention Prevent 10 Patch 2 Hotfix 4 is now available. This release includes new features, fixes, and enhancements including:

• Includes Network Time Protocol (NTP) version 4.2.8 Patch 10 to address the CVE-2016-9042 vulnerability in the ntpd server.
• Populates the suser field in web events in syslog.
• Decodes and displays email sender and recipient display names correctly in the DLP Incident Manager.
• Provides improved character set detection in email messages.
• Supports non-classification criteria such as tagging for rules that contain file extension conditions.
• Compatible with ICAP preview requests sent by the A10 web gateway.
• The admin account password for a McAfee DLP appliance can now contain spaces.
• Correctly matches rules containing file-based classification criteria when files are uploaded to the following cloud storage services: Microsoft OneDrive, Google Drive, Box, Dropbox

To download Data Loss Prevention Prevent 10 Patch 2 Hotfix 4, go to the Product Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx.   

For a full list of changes, see the Release Notes in PD27147:
https://kc.mcafee.com/corporate/index?page=content&id=PD27147.

For a list of Known Issues, see KB86523:
https://kc.mcafee.com/corporate/index?page=content&id=KB86523

McAfee Data Loss Prevention Prevent 11 Hotfix 1 (11.0.0.1) is now available. This release includes new features, fixes, and enhancements including:

• McAfee DLP Prevent now decodes and displays email sender and recipient display names correctly in the DLP Incident Manager.
• McAfee DLP Prevent now provides improved character set detection in email messages.
• McAfee DLP Prevent now supports non-classification criteria such as tagging for rules that contain file extension conditions.
• McAfee DLP Prevent is now compatible with ICAP preview requests sent by the A10 web gateway.
• The admin account password for a McAfee DLP appliance can now contain spaces.
• McAfee DLP Prevent now correctly matches rules containing file-based classification criteria when file are uploaded to the following cloud storage services: Microsoft OneDrive, Google Drive, Box, Dropbox.

To download McAfee Data Loss Prevention Prevent 11 Hotfix 1 (11.0.0.1), go to the Product Downloads site at:
http://www.mcafee.com/us/downloads/downloads.aspx

Data Loss Prevention (DLP) 11.0 Hotfix 2 is now available.  This release includes new features, fixes, and enhancements including:

• Google Chrome V60 now responds normally when McAfee DLP clipboard protection is enabled. The issue was resolved by changing the hooking mechanism.
• Drilling down to the DLP Incident Manager details page now displays evidence file information, rules, and classification names.

To download Data Loss Prevention 11.0 Hotfix 2, go to the Product Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx.   

For a full list of changes, see the Release Notes in PD27179: https://kc.mcafee.com/corporate/index?page=content&id=PD27179.