Summary:

RSA announces the availability of the 2016 Q2 Appliance Updater release for the RSA Via Lifecycle and Governance (RSA Via L&G) and RSA Identify Management & Governance (RSA IMG) product lines.  This quarterly release enables customers to update their hardware appliances with the latest database and operating system patches.  Customers with soft appliance deployments can update their environment with the latest database updates, if leveraging the RSA provided database.

This quarterly release of the Appliance Updater helps us to align with the vendor patch updates for the database and operating system.

This release of the Appliance Updater includes the Operating System patches needed to address the Badlock vulnerability (CVE-2016-2118 and CVE-2016-0128).

Patching the operating system and database components is integral to the security of your environment.  To ensure that hardware appliance and soft appliance installations maintain the most up-to-date patches for these components, RSA provides the Appliance Updater, which bundles a certified patch set for the operating system (SUSE or Red Hat) and the local RSA supplied Oracle database.  Downloading and running the latest appliance updater closes vulnerabilities and bugs addressed by the patches.  The Appliance Updater does not patch the RSA product itself.

Appliance Updater files are available for the following customer environment configurations:

   -  RSA Via L&G 7.0 or later:

          --  Oracle 12c and SUSE deployments

          --  Oracle 12c and Red Hat deployments

   -  RSA IMG v6.8.1 or v6.9.1

          --  Oracle 11g and SUSE deployments

          --  Oracle 11g and Red Hat deployments

Please reference the Appliance Updater Guide document available on the RSA Link downloads pages noted below for the specific supported configurations for the Appliance Updater.

Recommendation:

RSA strongly recommends that customers download and run the appropriate Appliance Updater file for their environment.

Obtaining Software:

Customers can obtain the documentation and software for this release by downloading them from the Downloads area on RSA Identity Governance and Lifecycle space of RSA Link. (https://community.rsa.com/community/products/governance-and-lifecycle)

   -  RSA Via L&G 7.0 or later:  RSA Via Lifecycle and Governance Appliance Updater - Q2 2016​

   -  RSA IMG v6.8.1 or v6.9.1:  RSA Identity Management and Governance Appliance Updater​

For additional documentation, downloads, and more, visit the RSA Identity Governance and Lifecycle page on RSA Link.

EOPS Policy:

RSA has a defined End of Primary Support policy associated with all major versions. Please refer to the Product Version Life Cycle​ for additional details.