Cumulative Pointfixes applicable to ITMS 8.0 HF6

book

Article ID: 150581

calendar_today

Updated On:

Products

Management Platform (Formerly known as Notification Server) Deployment Solution

Issue/Introduction

This article contains cumulative point fixes provided to customers Post-8.0 HF6 for SMP, SMA, SMF, PATCH, SWM, ECV, TASK, ASSET, RTSM, ULM, INV, INVPACK, VMM, ND, RAC, WF, and DS issues.
Each section can be installed independently from the others when indicated. Apply any of the attached files that may apply to your issue.

Resolution

Latest SMA/SMF/SMP/TASK pointfix

See attached "SMP_SMF_SMA_TASK_8.0_POST_HF6_v7.zip"

SMA (Symantec Management Agent) fixes:

Peer to Peer downloads across wan when p2p port 56118 is not blocked N/A
Jobs with conditions fail to run correctly if the user schedules them with the defer option enabled N/A
Numerous cross-subnet downloads detected after P2P installation N/A
P2P will be used if there is no package server defined in a site  
User targeted Managed Delivery Policies disappear from user's machines after about 2 days  
Long lasting hashing operations during service stopping cause SMA to terminate improperly  

 

SMP (Symantec Management Platform) fixes:

Failed to process NSE while doing an AD Import. Invalid resource ref was looked up, corrupt Xml document! TECH236649
Command line User Defined Right Click action fails with error "Error running command. Err=Invalid flags specified". N/A
When editing a filter with computers, selected resources are not listed. N/A
Uncontrolled ItemNSSource table growth TECH229103
Missing CoreSettings.config. SMP services do not start N/A
Old Security Group references still remain after User AD Import in the Inv_Security_Groups data class TECH240652
New Bulk Resource Export Rule should allow export of resources without GUID  
I.E 11 on Win 10 RS3 latest win updates, throws UAC pop-up each time when user works with detection rules on SMP 8.0 HF6 + pf where UAC 3 Level enabled and Win latest updates installed N/A
Maintenance window in UI shows default schedule despite the change TECH247251

Some items going to one child server are not replicating during differential replications. All other child servers work fine and most items work correctly to the one server

N/A

 

SMF (Software Management Framework) fixes:

See Attachment: SMF_Rollup_8.0HF6v3.zip

Path Traversal Vulnerability in Software Management Framework N/A
Managed Delivery Policies (MDP in future) scheduled to run on Maintenance (MW in future) window and waiting restart for some another MDP, are rescheduled to the next Maintenance window after restart instead of execution in this particular Maintenance window N/A
SWD policy executes twice within maintenance window N/A
Quick, Package Delivery tasks and Managed Policies hang while running, detection and downloads continue  
Path Traversal Vulnerability in Software Management Framework SYM17-013
Managed Delivery Policy result shows Not Applicable if any part of the policy does not apply but others do TECH248814


TASK (Task Management) fixes:

Error "Event XML is badly formed." When task status is sent up to SMP N/A
Run-script tasks running simultaneously with common (input token) declaration"  
   
   
   

 

Other Pointfixes

 

ASSET (Asset Management Solution) fixes:

Software license model in 8.0 prevents user with limited access to create Software Licenses for permitted Locations TECH239882
General improvements and bug fixes for multiple Asset Management pages.
Duplicate scope collection created when creating resources under AppIdentity credentials N/A
   

See attached "AMS_8.0_POST_HF6_v5.zip"

 

SWM (Software Management Solution) fixes:

   
   

 

ECV (Enhanced Console Views) fixes:

Code changes N/A
Child server files are not always showing up on the Parent when picking files to Meter - Error in Profiler (possible timeout) N/A
If several file resources have same name and version they are shown as single record in Add Program picker and not added as expected N/A
   

See "ECV_8.0_POST_HF6_v3.zip"
 

PATCH (Patch Management Solution) fixes:

In case of seldom maintenance, windows client does not send data that status of update is installed after pending reboot N/A
Novell import: SLE-12-SP1-SAP-Updates channel not imported N/A
SWU does not install due to Patch Install Tools package not ready within single cycle N/A

Sometimes Patch download task stages files partially

TECH248141
Patch Traversal vulnerability fix  SYM17-013
The Status column in the report Policy Execution by Computer is returning Undefined in cases where there is data available  

Patch Advertisements are being orphaned in an enabled state

 

See attached "PATCH_8_0_POST_HF6_v6.zip" (NOTE: Hierarchy fix for this issue provided in addition to this PF on TECH248422)

 

RTSM (Real-Time Systems Management) fixes:

   
   
   

 

MONITOR

   
   
   
   
   

See "Monitor_8.0_POST_HF6_v1.zip"
 

ULM (Unix, Linux, Mac Agent) fixes:

CVE-2016-9840 and CVE-2016-9842 in zlib 1.2.8 N/A
Mac Agent ignores the Warning Countdown Duration setting; only uses 5 minutes N/A
   
   
   

Click here to download file

 

INV (Inventory Solution) fixes:

SVM18-025: CRITICAL Zero Day Vulnerability in the Altiris Management Agent  
Software components with Russian names not being associated with software products during NS.Nightly task TECH237005
8.0 HF6 Rollup v2 - General improvements and bug fixes N/A
PluginManager is crashed during inventory collection, if InvTaskConfig contains common data class which is not collected on ULM client  
Events for not available anymore Inventory data are sent incorrectly resulting displaying old non-zero information  
The inventory for [SW Patch Windows] is an empty string, will create an empty NSI  
Symantec Level 1 workers are able to do things that they do not have permissions to  
Newer systems do not report the Model correctly for Hardware Inventory  
Fatal error occured in module 'AMAgent.dll (8.0.3338.0)' in 'AeXNSAgent.exe' TECH250415

See attached "Inv_8.0_Post_HF6_v6.zip"

 

WF (Workflow Server) fixes:

   
   
   
   
   

See "WF_8.0_POST_HF6.zip"
 

VMM (Virtual Machine Management) fixes:

   
   
   

See "VMM_8.0_POST_HF6_v1.zip"
 

RAC (Remote Access Connector) fixes:

   
   
   

See "RAC_8.0_POST_HF6.zip"

 

SUITE PORTALS fixes:

   
   
   

See "SUITE_PORTALS_8.0_POST_HF6.zip"
 

DS (Deployment Solution) fixes:
DS 8.0 POST_HF6v6:
Click here to download file

Installation Instructions

Predefined machine not picking up to boot into PXE Boot TECH240515
Predefined Computers added through ASDK not available as fast as manually added predefined resources N/A
Drivermanager stops because of a bad download, We should continue the rest not stop N/A
Error: Operating System API %0 failed. [RegistryOperations::UnLoadHive] RegUnLoadKeyW( target_system ) N/A
When running DA in automation the Error is displayed: Error: Registry key %1 not found on system. target_software\\Microsoft\\Windows NT\\CurrentVersionRegisteredOwner N/A
DA fails out on a specific storage driver N/A
Importing Predefined computers using ASDK with Name and Serial number causing all computers imported to use the same GUID N/A
Ghost crashes with 'Invalid URL failed to open the image file' when deploying UEFI image modified by Ghost Explorer N/A
Ghost fails to run -chkimg when uppercase driver letter is specified N/A
Ghost 12 is not burning valid image files to DVD for some hardware N/A
Ghost crashes when trying to restore image that was captured to DVD N/A
Ghost not properly restoring Span images from DVD N/A
When restoring an image from @CDR an error is seen 'This disk was not created by symantec Ghost' N/A
Running a command without the User and password and @ symbol, fails with -dcrypt N/A
Dscrypt file is deleted prior to Ghost being executed N/A
Importing Predefined computers using ASDK with Name and Serial number causing all computers imported to use the same GUID N/A
Uninstall of DSPS should remove all entries added to web.config file by the DSPS install N/A
/NoRestart /Quiet needs added to the pkgmgr.exe command line to properly install certs N/A
WinPE10 1607 & 1703 initial  support N/A
Security Update N/A
Extract SSL Certificate (x64) -Install Fails when Altiris Agent on a different drive than the notification server N/A
Prepare for Image Capture task ignores decryption errors and attempts to complete N/A
PC Transplant Personality Distribute does not work in 3.1, 7.6 HF7, or 8.0. N/A

SSL setting for the 'Altiris' application in IIS has to be set to ‘ignore’ on the NS for the SBS server service to get the menu options

N/A
Client machine fail to download the SSL certificate from the Site server in WINPE

N/A

PC Transplant Personality Distribute does not work in 3.1, 7.6 HF7, or 8.0 N/A
Uninstall of DSPS should remove all entries added to web.config file by the DSPS install N/A
Extract SSL Certificate (x64) -Install Fails when Altiris Agent on a different drive than the notification server N/A
/NoRestart /Quiet needs added to the pkgmgr.exe command line to properly install certs N/A
Automation environment fails to download PS Cert if it's already a task server N/A
Security Update N/A
WinPE10 1607 & 1703 limited support N/A
Prepare for Image Capture task ignores decryption errors and attempts to complete N/A
Client machine fail to download the SSL certificate from the Site server in WINPE N/A
With Accept SSL setting ON, Ghost create image falls back on unc code from https N/A
PXE does not work in a TLS 1.2 environment N/A
DS automation environment does not work in a TLS 1.2 environment N/A
Custom unattend.xml file associated with a 'Deploy image' task doesn't get replicated from Parent SMP to Child SMP N/A
Unable to import SOI packages by ResourceImportTool after installation of DS POST_HF6v2 N/A
Custom unattend.xml file associated with a 'Install Windows OS' task doesn't get replicated from Parent SMP to Child SMP N/A
Prepare for image capture task needs to determine if system is 1511 or 1607, 1703 for proper sysprep operation N/A
Prepare for Image capture task fails when ran on Windows 10 with UAC is turned on N/A
After running SOI task for Windows 10 Red stone 2/3, Client hangs on Regional Settings page. N/A
Import of WinPE 10 1709 (RS3) needs to be enabled. N/A
Pxe Preboot configurations that are deleted from the console do not get deleted from the site servers. N/A
Path Traversal Vulnerability in Deployment Solution SYM17-013
Altiris.Deployment.OSFlavors throw exceptions that are preventing user form using Scripted OS Install tasks  
Import of WinPE 10 1803 (RS4) needs to be enabled  
Partition Disk task is not working properly giving error when running chkdsk with WinPE10  
Automation folder does not work in non-english locale  

 

Attachments

WF_8.0_POST_HF6.zip get_app
VMM_8.0_POST_HF6_v1.zip get_app
SUITE_PORTALS_8.0_POST_HF6.zip get_app
SMP_SMF_SMA_TASK_8.0_POST_HF6_v7.zip get_app
SMF_Rollup_8.0HF6v3.zip get_app
RAC_8.0_POST_HF6.zip get_app
PATCH_8_0_POST_HF6_v6.zip get_app
Monitor_8.0_POST_HF6_v1.zip get_app
Inv_8.0_Post_HF6_v6.zip get_app
ECV_8.0_POST_HF6_v3.zip get_app
AMS_8.0_POST_HF6_v5.zip get_app