Release notes for BigFix Compliance Analytics version 2.0 Patch 11

Release Announcements Compliance (Release Announcements)
1

HCL BigFix is pleased to announce the release of BigFix Compliance Analytics version 2.0 Patch 11

Product: BigFix Compliance

Title: Availability of BigFix Compliance Analytics version 2.0 Patch 11

Published site: SCM Reporting 157

BigFix Compliance Analytics version 2.0 Patch 11 includes enhancements and fixes.

Highlights of this release:

  • Upgrade Rails to 6.1.7.7
  • Update JRE Version to 8.0.8.20
  • Update IBM WebSphere Application Server Liberty version to 23.0.0.12.
  • Scan issues are fixed in this release.

Following are the Fixed Jira Tickets in this release.

    • IBM SDK Java Technology Edition Version updated to 8.0.8.20 to address vulnerabilities: CVE-2023-44487, CVE-2024-20918, CVE-2024-20952, CVE-2023-33850, CVE-2023-50312, CVE-2023-46158, CVE-2024-27270, CVE-2023-44483, CVE-2023-33850, CVE-2024-30125, CVE-2024-30126, CVE-2024-30127
  • [BSU-15031] Improved Java Heap Size Memory Usage during import of Patch and Vulnerabilities.
  • [KB0110113 / BSU-14603] Update code to check SCA/Config/cacerts folder for certificates, if the folder is not present it will check Java/lib/security/cacerts during the upgrade.
  • Pen testing (Security): Add object source none for response headers.
  • The vulnerability report CSV export for a same-day issue is fixed.
  • Added X-Frame-Options SameOrigin to the response Header.
  • Added new patch sites to SCM Reporting.
  • The last 2 column display issues are fixed in the release.

Actions to take:

  1. upgrade BigFix Compliance Analytics to version 2.0.11 to take advantage of the fixes.

For first-time installation:

  1. In the License Overview Dashboard in the BigFix console (BigFix Management domain), enable the SCM Reporting site.
  2. In the Security Configuration domain in the console, open the Configuration Management navigation tree.
  3. Select the Fixlet named BigFix Compliance Server 2.0 - First-time Install Fixlet under the BigFix Compliance Install/Upgrade menu tree node.
  4. Follow the Fixlet instructions and take the associated action to install your BigFix Compliance deployment.

For upgrade installation: Refer to the prescribed upgrade steps for the BigFix Compliance version that you are using.

IMPORTANT: Before you start any upgrade process, perform a server and database backup.

A. For BigFix Compliance Analytics versions 1.9.x, 1.10.x and 2.0.x:

  1. Make sure that you complete the server and database backup.
  2. It is recommended to stop the BigFix Compliance Server or at least disable scheduled Data Imports to ensure that Data Import is not in progress during the upgrade.
  3. In the Security Configuration domain in the console, open the Configuration Management navigation tree.
  4. Under the BigFix Compliance Install/Upgrade menu tree item, select the BigFix Compliance Server 2.0 - Upgrade Fixlet which automatically installs and upgrades to the new version.
  5. Follow the Fixlet instructions and take the associated action to upgrade your BigFix Compliance deployment.
  6. Update the data schema. To do this, log in to the BigFix Compliance web interface from the host server and proceed with configuration. Upgrading the data scheme is expected and it will take some time to complete. NOTE: Automatic upgrade installation only affects installations running under the LocalSystem account. Follow the Fixlet instructions to install the update manually if this fix cannot be applied.

B. For BigFix Compliance Analytics versions before 1.9:

  1. Manually upgrade to version 1.10.1.48. The 1.10.1.48 installer can be found here http://software.bigfix.com/download/bfc/server/1.10/bfc-server-1.10.1.48.exe
  2. After manually upgrading to version 1.10.1.48, use the BigFix Compliance Server 2.0 Upgrade Fixlet to upgrade to version 2.0 (See step A).

More information:

BigFix Compliance team
HCL BigFix