Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Hot Patch Releases

This section describes the new features, installation procedure, and resolved issue in Policy Enforcer Release 23.1R1 hot patch.

Note:

Security vulnerabilities are addressed in the Policy Enforcer Release 23.1R1 hot patch.

Installation Instructions

During hot patch installation, the script performs the following operations:

  • Stops controller, feed-collector and feed-provider services of Policy Enforcer.

  • Backs up existing configuration files and libraries.

  • Updates the Red Hat Package Manager (RPM) file for Policy Enforcer.

  • Restarts the controller, feed-collector and feed-provider.

Note:

You must install the hot patch on Policy Enforcer Release 23.1 or on any previously installed hot patch. The hot patch installer backs up all the files which are modified or replaced during hot patch installation.

Perform the following steps in the CLI:

  1. Download the Policy Enforcer 23.1R1 Patch Policy_Enforcer-23.1R1-XX-PE-Upgrade.rpm from the download site.

    Here, XX is the hot patch version.

  2. Copy the Policy_Enforcer-23.1R1-XX-PE-Upgrade.rpm file to the /tmp location.
  3. Verify the checksum of the hot patch for data integrity:

    md5sum Policy_Enforcer-23.1R1-XX-PE-Upgrade.rpm.

  4. Install the rpm using the command:

    rpm -Uvh Policy_Enforcer-23.1R1-XX-PE-Upgrade.rpm

Note:

We recommend that you install the latest available hot-patch version, which is the cumulative patch.

Resolved Issues

Table 1 lists the resolved issues in the Policy Enforcer Release 23.1R1 Hot Patch.

Table 1: Resolved Issues in the Policy Enforcer Release 23.1R1 Hot Patch

PR

Description

Hot Patch Version

PR1814706

The ports 443 and 8080 of the standalone Policy Enforcer server support TLS1.0 and TLS1.1.

v2

PR1825122

Dynamic object feed fails to update the last updated timestamp.

v2

PR1570837

Policy Enforcer fails to resolve the IP address of the AWS resources after fetching the tags from AWS resources.

v1