Security Management System (SMS)
Release Notes
Version 6.2.0.2
This release includes all issues fixed in the Security Management System Release Notes Version 6.2.0 and
Security Management System Release Notes Version 6.2.0.1. For details about those changes, refer to therespective Release Notes on the Online Help Center.

Important notes for SMS•All v6.2.0 customers can optionally apply this patch so that the issues it addresses are corrected.
However, upgrades to a later TOS do not require an installation of this patch first.

•Patch installation should take approximately 15 minutes.

•To prevent your account from being disabled while you wait for authentication resources to become
available after the reboot, navigate to Edit > Preferences and make sure that you deselect Lock user
after failed login attempts and Auto reconnect client to server after a disconnect occurs. The SMS
automatically reboots after you install this release. You will then be prompted to update the SMS client.

•This patch can be uninstalled or rolled back to the previous version.

Release contents
The following enhancements or repairs are included in this release.
Description

ReferenceA Linux-based regreSSHion vulnerability (CVE-2024-6387) relating to a race condition thatunauthenticated attackers could trigger through an OpenSSH server (sshd) has beenaddressed in this release.

VRTS-12508

An issue that prevented the Vertica log rotations from working has been fixed.

TIP-119177

The SMS no longer sends historical syslog entries after an upgrade or reboot.

PCT-15826
PCT-10500

This patch enables you to verify data integrity and detect data corruption by automaticallylogging a checksum whenever downloadable files are generated.

1TIP-101070

Security Management System Release Notes

Fixed an open file handle leak for Trend Vision OneTM

TIP-109599
TIP-111277
PCT-15707
PCT-16314

TLS Telemetry.

A condition that caused RADIUS authentication to fail intermittently has been repaired.

TIP-116312
PCT-18412

Port 443 must remain open for downloading installer applications from a web browser. When
TIP-116410
port 443 is enabled, the client UI will use it for downloading updates and patches during login; if PCT-20438
this port is disabled, the client UI will fall back to java message Service (JMS) ports.
A condition that caused SNMP to fail has been fixed.

TIP-109752
PCT-20128

Geolocation IPs now continue to display correctly after an upgrade.

TIP-117156
PCT-20591

An SQL syntax error that affected SMS logins has been corrected.

TIP-109658
PCT-1996

Additional telemetry has been added for syslog diagnostics.

TIP-106815
TIP-117335
PCT-7954

Performance issues affecting SMS profile distributions have been repaired.

TIP-107299
PCT-2015

An issue that caused an internal error to be displayed on the SMS Web Console whenTIP-116815
attempting to display Suspicious Objects through the Trend Vision One account has been fixed. PCT-15707
Time zone data file has been updated to tzdata-2024a.

PCT-25743

Product support
For assistance, contact the Technical Assistance Center (TAC).

© Copyright 2024 Trend Micro Incorporated. All rights reserved. Trend Micro, the Trend Micro t-ball logo, TippingPoint, the TippingPoint logo, and Digital
Vaccine are trademarks or registered trademarks of Trend Micro Incorporated. All other company and/or product names may be trademarks of their respective
owners.

2Security Management System Release Notes