[hdawg]

BlackBerry Enterprise Server v4.1 Service Pack 6 MR6 for Domino Released

[SteveO86]

I stumbled upon this one Monday, thought it was posted about already lol.

I was gonna install MR5 but since MR6 is out I'm gonna install this tomorrow, will post my results.

Also note, this patches the PDF vulnerability again..

[hdawg]

Originally Posted by SteveO86

...Also note, this patches the PDF vulnerability again...

Will they ever end?

[SteveO86]

I would hope so... If it wasn't for the PDF piece I would hold off on MR 6 for another week or 2..

[hdawg]

Oh ... then do the PDF patch on its own. It takes 10 minutes and doesn't require a reboot only a stop of the Dispatcher and Attachment services.

[TreeDude]

Originally Posted by SteveO86

Also note, this patches the PDF vulnerability again..

Are you sure? I do not see it in the release notes. I was planning on installing MR5 and the PDF patch this Saturday, so this was pretty good timing.

[SteveO86]

Originally Posted by TreeDude

Are you sure?

That's what T-Support said.... I called because I was curious if Interim Security Update had to applied after I installed MR6 they said Nope.. So I figure since I'm taking the server down to install an MR I might as well only install one thing.

Originally Posted by TreeDude

I do not see it in the release notes. I was planning on installing MR5 and the PDF patch this Saturday, so this was pretty good timing.

That was my original plan...

It's the BlackBerry Attachment Server... It says it patches in MR5, but the latest Interim Security update 4 was released AFTER MR5.

[BBFlunkie]

I applied MR6 a few minutes ago, it does not appear to modify the PDF SecPatch 4 file dates, they are still 4-23-2009.

I will presume that PDF SecPatch 5 will be out soon.....

[SteveO86]

Just applied MR6.. All went well, except for my Attachment Service not stopping..

After a re-boot, re-ran the install and all was good..

I guess I should start monitoring the Attachment Service aye....

[hdawg]

... has anyone heard of anyone having issues with this PDF vulnerability? I know its a security issue ... and I know there are fixes out there for it that we should all be eager to apply ... but seriously, has ANYONE heard of ANYONE having an issue EVER?

I can't find anything discussing someone that was exploited.

[SteveO86]

Nope, it's rumored to give control of the BES to someone else.

But as far as this ever happening... I have not heard of a single incident.

[BBFlunkie]

The 'specially crafted document' escapes my grasp. I am unable to prove the 'fix' actually 'fixes' it.

My business case includes a comment - the vendor states that SecPatch4 fixes a problem that we haven't been able to duplicate, nor can we prove that the fix actually fixes it.........

The same was true with the previous SecPatch's......

[hdawg]

^ EXACTLY!

<sigh>

[alex555550]

Originally Posted by SteveO86

Just applied MR6.. All went well, except for my Attachment Service not stopping..

After a re-boot, re-ran the install and all was good..

I guess I should start monitoring the Attachment Service aye....

Went good so far. We had to close all open mmc`s. Missed it @ the first Server.