Linux gateway server güvenliği

Version 4.5.16.0

• Fixed: Failed to start product after import of ESET Mail Security license
• Fixed: High memory load on the server where Gateway Security component is installed
• Fixed: Product is causing occasional crashes of Google Chrome browser
• Fixed: Quarantined files with long names could not be restored
• Fixed: File command fails with "Bad system call"
• Fixed vulnerability: Arbitrary file truncate vulnerability - which allowed unprivileged user to misuse product and truncate any system file
• Updated: EULA
• Updated: PHP version to 5.6.40

Version 4.5.15.0

• Fixed: Excessive growth eventlog.dat caused by irrelevant entries
• Fixed: esets_daemon sometimes consumes 100% of CPU during email scan

Version 4.5.13.0

• Fixed: An XSS vulnerability in the WebGUI that allows a potential attacker to hijack a previously established admin session and perform an operation on the web interface without authorization
• Fixed: Vulnerability that allows a potential attacker to delete any file using malware or a special script including symlink functionality (Thanks to RACK911Labs.com for reporting this vulnerability)
• Fixed: Unexpected error occurs after attempting to download a file from quarantine

Version 4.5.11.0

• Fixed: Excluded paths are scanned by On-Demand scan started from ESET Remote Administrator or GUI
• Fixed: Link for Mail Security in GUI Help section directs to ESET Mobile Security

Version 4.5.10.0

• Added: Compatibility with SLES12 and OpenSUSE 13.2
• Changed: ThreatSense.Net early warning system is now enabled by default
• Changed: PHP updated to 5.6.34
• Fixed: Mails might not be received if contains Japanese characters while libesets_pac.so is loaded

Version 4.5.9.0

• Improved: Scanning capability for PAC on-access scans
• Fixed: SMTP agent could not connect to socket after daemon restart
• Fixed: Scanning exclusions would not be applied in certain circumstances
• Fixed: Update status not properly displayed in ESET Remote Administrator
• Fixed: In certain circumstances ESET smfi agent did not delete malware but displayed threats as deleted
• Fixed: Web interface could not be open with libssl 1.1

Version 4.5.7.0 (compared to 4.5.6.0 released on October 27, 2016)

• Updated: PHP version updated to 5.6.30
• Fixed: Updating license does not refresh properly in ESET Remote Administrator
• Fixed: Server with CentOS 7 and ESET File Security for Linux 4.5.6.0 freeze in some cases
• Fixed: PAC scanner on chrooted sftp server does not work properly
• Fixed: Minor bug fixes

Version 4.5.6.0 (compared to 4.5.5.0 released on June 21, 2016)

• Improved: Compatibility on XFS file system with inode64
• Fixed: Full installation path is displayed in the wwwi interface after typing in URL
• Fixed: Files are not deleted properly after uninstallation
• Fixed: Horus Anti-spam engine does not properly update after activation with ESET Secure Business license
• Fixed: Configuration settings on the endpoint product and the ERA policy do not match

Version 4.5.5.0 (compared to 4.5.3.0 released on December 17, 2015)

• Improved: Default certificate for web console now uses SHA-256 and RSA-2048
• Fixed: SMTP-session was not correctly recognized in some cases
• Fixed: Fully Qualified Domain Name (FQDN) is now properly loaded from /etc/domainname
• Fixed: Copyright information now shows current year
• Fixed: Resolved vulnerability where attacker could disable ESET Mail/File/Gateway Security before initialization

Version 4.5.3.0

• Added: Full compatibility with ESET Remote Administrator 6
• Added: Online Help available on help.eset.com (Business tab)
• Changed: New ESET Antispam Engine and corresponding settings
• Changed: Removed support for Sun Solaris 10 and NetBSD 4
• Improved: ESET Gateway Security is able to recognize "X-Forwarded-For" HTTP header when used by another proxy
• Improved: Updated manual pages and product documentation
• Fixed: Problem scanning archives and large files with on-access protection
• Fixed: Problem running multiple, simultaneous update processes
• Fixed: Configuration changes made in esets.cfg cannot be changed using web management interface (WWWi)
• Fixed: Problem with "virus_log" being sent to ESET Remote Administrator multiple times
• Fixed: Other minor fixes and optimizations