Skip navigation
All Places > Snow Product Hub > Snow Inventory > Blog
1 2 3 Previous Next

Snow Inventory

44 posts

Snow Inventory Agents for Linux, Unix and macOS 6.1 were released on May 16

Snow Inventory agent for Linux, Version 6.1.0

Release information

Product:                 Snow Inventory Agent for Linux
New version:          6.1.0
Release date:         May 16, 2019
Distribution:            Snow Update Service
Revision Number:   584
 

Updated technical documentation 

 Updated technical documents in this release is: 

 

Features 

Public key pinning

Additional technology has been added to verify the authenticity of Snow Inventory Server endpoints that the agent communicates with. During the initial process of establishing communication with an endpoint, the Inventory Agent now compares the public key provided by the endpoint with the value it expects (stored in a hash). If the keys do not match, the connection is closed. Public key pinning is a best practice handshaking mechanism to protect systems against man-in-the-middle attacks that target agent-server communication by using a forged certificate.

NOTE

 For public key-pinning to function correctly, the encoded key needs to be included in the agent configuration file (snowagent.config).  The key needs to be encoded using a SHA base 64 algorithm. Multiple keys should be separated with a semicolon.

For example:

For more information on how to retrieve a base-64 encoded key, see the User Guide: Configuration for Snow Inventory Agents version 6.

 

Enhancements 

Support for new chassis types

Support for handling of new chassis types introduced in 2018 is now provided in Snow Inventory Server and supported in versions 5.4.2 and higher and 6.0.5 and higher. This feature ensures that certain tablets and computers with detachable keyboards and rotating screens are correctly recognized as portable.

To support this feature, the Linux agent now retrieves chassis type data and includes it in the scan results.

 

Operating-system name in the manifest

For Snow Inventory Server to implement hostname-only mode, it needs to match the scan data sent by a computer with the handshake information sent from the same machine. To do this when hostname-only mode is configured on operating-system, manifest needs to include the name of the operating system.

In this release of the Snow Inventory Agent for Linux, the handshake manifest now includes the name of the operating system of the local machine.

NOTE

Correct matching logic for hostname-only mode configured on operating system will be implemented in an upcoming release of Snow Inventory Server.

Deprecated Linux commands

According to best practices, ifconfig, used to retrieve network adapter configuration, has been deprecated in favor of the ip command.

 

Corrections 

  • The agent parses SMBIOS information retrieved from the local machine so that BIOS version numbers of more than two levels, such as n.n.n, are now extracted correctly and the correct hardware/vendor information is displayed in Snow License Manager.
  • Additional logic has been added to ensure that additional command-line parameters passed to the agent are also picked up by the Snow Inventory Oracle Scanner (PRB0041871).
  • The Snow Linux Agent can once again be conȴJured using a relative path for the custom encryption key.
  • The query used by the Linux Agent to extract information about rpm installed packages was logging an error when running a scan for the ȴrst time. This issue has been resolved so that the error is no longer logged and the agent collects information about installed packages (PRB0041915).
  • In previous versions, the Linux Agent was querying the local machine for rpm installed packages multiple times. Additional intelligence has been added to reduce the number of times the agent performs this query, reducing the amount of time it takes to complete a scan (PRB0041914).
  • Additional logic has been implemented to prevent computers incorrectly reporting as Amazon Elastic Cloud (PRB0041917).

Snow Inventory agent for Unix, version 6.1.0

Release information

Product:                  Snow Inventory Agent for Unix
New version:          6.1.0
Release date:         May 16, 2019
Distribution:           Snow Update Service
 

Updated technical documentation 

 Updated technical documents in this release is: 

 

Features

Exclude autofs mount points from the file scan

Through a system setting, it is now possible to control whether the agent scans parts of the ȴles\stem that are automatically mounted through the autofs command, a service that automatically mounts locations when a user accesses it and unmounts it after a period of inactivity. Excluding such locations from the scan, results in less data collected by the agent and consequently shorter scan times, and reduced processing in Snow Inventory Server. This feature is controlled by the software.scan.ignore_autofs_mounts system setting in the snowagent.config file. By default, this setting is false, mimicking the way the agent currently works. To prevent scanning of automatically mounted points, set the value to true.

 

Enhancements

Operating-system name in the manifest

For Snow Inventory Server to implement hostname-only mode, it needs to match the scan data sent by a computer with the handshake information sent from the same machine. To do this when hostname-only mode is conȴJured on operating-system, manifest needs to include the name of the operating system. In this release of the Snow Inventory Agent for Unix, the handshake manifest now includes the name of the operating system of the local machine.

NOTE Correct matching logic for hostname-only mode conȴJured on operating system will be implemented in an upcoming       release of Snow Inventory Server

Snow Inventory agent for macOS, version 6.1.0

Release information

Product:                 Snow Inventory Agent for macOS
New version:          6.1.0
Release date:         May 16, 2019
Distribution:           Snow Update Service
Revision Number: 1627

Updated technical documentation 

 Updated technical documents in this release is: 

 

Features

Public key pinning

Additional technology has been added to verify the authenticity of Snow Inventory Server endpoints that the agent communicates with. During the initial process of establishing communication with an endpoint, the Inventory Agent now compares the public key provided by the endpoint with the value it expects (stored in a hash). If the keys do not match, the connection is closed. Public key pinning is a best practice handshaking mechanism to protect systems against man-in-the-middle attacks that target agent-server communication by using a forged certificate.

NOTE

For public key-pinning to function correctly, the encoded key needs to be included in the agent configuration file (snowagent.config). The key needs to be encoded using a SHA base 64 algorithm. Multiple keys should be separated with a semicolon.

For example:

For more information on how to retrieve a base-64 encoded key, see the User Guide: Configuration for Snow Inventory Agents version 6.

 

Enhancements

Operating-system name in the manifest

For Snow Inventory Server to implement hostname-only mode, it needs to match the scan data sent by a computer with the handshake information sent from the same machine. To do this when hostname-only mode is configured on operating-system, manifest needs to include the name of the operating system.

In this release of the Snow Inventory Agent for macOS, the handshake manifest now includes the name of the operating system of the local machine.

 NOTE

Correct matching logic for hostname-only mode configured on operating system will be implemented in an upcoming release of Snow Inventory Server.

 

Corrections

  • When the agent tries to retrieve information about AFPS volumes on machines running macOS Sierra (10.2) or earlier, it hangs indefinitely as the disk utility is only supported on higher versions of the operating system. The agent now runs AFPS-related commands on machines running macOS High Sierra 10.3 or later.
  • The Snow macOS Agent can once again be conȴJuUed using a relative path for the custom encryption key.
  • In some cases, it is not possible for the agent to extract the install date for an application from the local machine. Previously, the agent entered the scan date into this field. It now leaves the install date field empty so that incorrect data is not presented to the user in Snow License Manager (PRB0041783).

Released April 25, 2019

Release information

Product:Snow Inventory Script Repository
Version:2.3
Distribution:SUS
Current statusReleased
Release date:2019-04-25

ABOUT THE INVENTORY SCRIPT REPOSITORY

The Snow Inventory Script Repository provides a set of PowerShell scripts that Snow Inventory agent for Windows uses to gather additional data from the local machine where the agent is installed.

The data gathered by Snow PowerShell scripts is included in the ordinary scan data snowpack delivered by the agent to Snow Inventory Server, and is used to, for example, enrich license compliance calculations and provide more granular information in Snow License Manager.

All the PowerShell scripts contained in the script repository are digitally signed by Snow to prevent malicious modification or execution.

In addition to the four default scripts outlined below, Snow Inventory Script Repository, includes additional scripts to support customers managing industry-specific niche applications.

The default scripts are:

  • MSInfo – gathers data for Office 2019, Office365, and MSDN installed applications. New version is 1.2. 
  • Autodesk – gathers details from the registry about installed Autodesk products. New version is 3.0. 
  • SWIDTAG – gathers SWIDTAG files (*.swidtag and *.swtag) on the local machine and data about Adobe products. New version is 1.2. .
  • Toad – gathers information about Toad products. New version is 1.6. 

 

ENHANCEMENTS

The following enhancements have been implemented in Snow Inventory Repository version 2.3:

Manifest file for all scripts

All default scripts have been updated to include a manifest file, which generates a software row about the script itself. In this way, the script will appear as an application in Snow License Manager.

Autodesk

The Autodesk script now gathers licensing type information for Autodesk applications. This data will improve recognition accuracy for Autodesk products released after 2016, and enables Snow License Manager to distinguish between applications running on a network or standalone user license.

SWIDTAG

The SWIDTAG script now scans additional locations in the local filesystem for SWIDTAG files (*.swidtag and *.swtag) and can now detect trial editions of Adobe products.

 

DISTRIBUTION AND TROUBLESHOOTING

Distribution

As of this release, Snow Inventory Script Repository will be distributed through Snow Update Service for all customers on Snow Inventory Server version 5.0 or higher.

All default PowerShell scripts are included when requesting Snow Inventory client/agent for Windows MSI packages from Snow Support.

Troubleshooting

Please reach out to Snow Support if you encounter any issues with our scripts.

Snow for ServiceNow Release Communication

Released on March 14, 2019.

 

Snow for ServiceNow 3.3 is a certified platform integration between Snow License Manager and the ServiceNow NOW platform. Building on features and capabilities introduced in earlier versions, this latest release of Snow for ServiceNow further enhances the integration between the world’s leading Software Asset Management and ITSM platform, providing customers with a combined value through standardized and certified integration.

Release information

Product:                Snow for ServiceNow
New version:         3.3
Release date:        March 14, 2019
Distribution:          ServiceNow  store
Current status:      Released

FEATURES

Software usage for ServiceNow Software usage data – which includes, for example, information about when an application was installed, when it was first used, most recent usage, number of times used (runs), the average length of each run, and a user count – provides insight into how an application is being consumed by users. Usage data is now extracted from Snow License Manager for use in ServiceNow. Stored in standard software instance tables and linked directly to each computer CI, usage data is now available to all applications, processes, and workflows across the ServiceNow platform.

Support for Snow License Manager custom fields

Custom fields defined in Snow License Manager can now be added to the list of fields maintained by Snow for ServiceNow. Once transferred to ServiceNow, customfield data is stored in dedicated staging tables and linked to dedicated transform maps. This feature enables custom fields created in Snow License Manager to be correlated with the desired destination in ServiceNow and provides a standardized method for aggregating customfield data from Snow to ServiceNow.

Additional filtering options

To further refine the data Snow for ServiceNow needs to maintain, additional filterLnJ options Include Servers and Include Non-Servers are now part of the connector configuration for ServiceNow CMDB. These options increase the flexibility of Snow for ServiceNow, by supporting aggregations that target specific computer environments such as, just the server estate, or the workstation/ laptop/mobile/cloud estate.

A full version of the release notes can be found here

Download from ServiceNow Store

Product and Service Catalog Update:

https://store.servicenow.com/sn_appstore_store.do#!/store/application/a4c988b60f936a0029698c9ce1050e10/3.3.6

 

CMDB Integration:

https://store.servicenow.com/sn_appstore_store.do#!/store/application/04a81ff90fbde200bb508fbce1050e2e/3.3.28

 

Released on March 14, 2019

Release information

Product:                 Snow Inventory Agent for Windows
New version:          6.1.0
Release date:         March 14, 2019
Distribution:           SUS package
Current status:      Released
 

Updated technical documentation 

Updated technical documents in this release is: 

 

Features 

Browser extension for Microsoft Edge

Web-application metering for Microsoft Edge is now supported. When cloud-application metering is enabled in Snow Inventory Admin Console, the Windows agent monitors SaaS applications accessed through Microsoft Edge via a browser extension installed on the target machine. The agent gathers metering data for SaaS applications running in Microsoft Edge, as well as the name of the browser. This data is packed together with the normal inventory scan of the target machine and sent to Snow Inventory Server for storage and processing.

 

Enhancements 

Security hardening through compilation options

The agent has been security hardened through the application of Windows compilation flags that enable additional protection against buffer overflow and memory corruption

 

Reduced memory usage for web metering rules

Cloud metering rules created by Snow’s Data Intelligence Service enable web traffic data (URLs) gathered by a browser extension to be recognized as use of a SaaS application. Snow constantly creates new rules to expand the intelligence of the data extracted by the browser extension. The agent regularly downloads updates and stores them in a web-metering-rules file on the target machine. However, as the number of rules increases, the agent's memory requirements to process this information rises in a linear fashion. To limit agent memory usage, additional intelligence has been added to the way the agent stores and processes cloud metering rules. For example, only recentlyused rules are stored, faster lookup based on domains has replaced regular-expression matching, and the loading of web-metering files happens later in the process to prevent service timeouts when the agent starts.

 

Enhanced script-tampering protection

PowerShell scripts run by the agent are encrypted by default. To provide an additional layer of protection, the Windows agent can now run PowerShell scripts that are encrypted locally with a custom key.

 

Diagnostics enabler for cloud application metering

To provide cloud-application discovery-and-metering, Snow agents rely on browser extensions installed on the target machine. These extensions extract usage data for SaaS applications and information about the source web browser. Snow currently provides browser extensions for Google Chrome, Mozilla Firefox, Microsoft Internet Explorer 11, and now with this version of the Windows agent, Microsoft Edge. The source web browser name is used by Snow Inventory Server for diagnostic purposes. To, for example, assess whether extensions and software recognition rules for the different browsers are functioning correctly.

 

Hardening of dll search path.

Automated checks have been added to prevent the agent from sideloading dll files stored in shared file locations. The agent is now hardened against executing potentially harmful code in dll files that may arise if shared folders are not sifficiently protected by system-level access control.

 

Corrections 

  • When no value is set for encryption path in snowagent.config the default value now points to the correct folder.
  • Issues related to invalid metering data collected from computers that are locked at midnight or locked when the agent runs the scheduled scan have been resolved, ensuring that all data collected by the agent is processed. 
  • Logging of registry entry errors arising due to the 32-bit version of the agent looking in the 64-bit registry for install/uninstall data have been corrected. The agent now searches the correct registry based on its architecture.
  • Product keys for Windows 8 and higher are now correctly extracted from the target machine.
  • The number of monitors connected to a machine and their resolution is now correctly reported in inventory scans.

Release information

Product:                 Snow Inventory Server
New version:          5.4.2
Release date:         March 05, 2019
Distribution:           SUS package
Revision Number: 405
Build number:       5.4.2.1278
Current status:      Released

Enhancements in Snow Inventory Server 5.4.2

  • Error handling for invalid characters.
  • Support for new chassis types.
  • Improved IP address normalization.
  • Simplified logging.

Corrections in Snow Inventory Server 5.4.2

  • Pre-recognized software rows created by external data sources are no longer generating a duplicate key in object errors. Hashing has been extended beyond the first 100 characters to the entire product name ensuring unique entries (PRB0040341).
  • Processing of snowpack files now ignores duplicate user login entries to ensure that primary key violation errors are no longer generated (PRB0041653).
  • Hostname only mode has been modified to identify different types of agent reporting for the same hostname, ensuring that correct network topologies are created (PRB0041654).
  • Applications installed on a Windows computer that is neither a server nor virtual desktop infrastructure (VDI) is no longer incorrectly tagged as Terminal Server (TS) applications (PRB0041666). This correction is also supported in Snow Inventory Server version 6.0.1 and higher.
  • Additional error handling has been added to prevent incorrect processing of application pathnames containing a period (.). Such pathnames are now correctly interpreted, and a corresponding software row for the application is created in the Inventory database (PRB0041931).
  • If a name cannot be retrieved for a web application, then it is not possible to extract metering for that application. Additional error handling has been added to log such scenarios, ensuring that the Data Update Job no longer fails when it tries to process empty application names, as such entries will no longer be stored in the Inventory database (PRB0041992).
  • Virtual machines (VMs) running on Red Hat Linux environments are now correctly recognized as such (PRB0042115).
  • Snowpack files are now processed by Snow Inventory Server in chronological order ensuring that errors logged due to processing on a first come first served basis no longer arise (PRB0040756). This correction is also supported in Snow Inventory Server version 6.0.1 and higher.

Snow is pleased to announce the patch release of Snow Inventory Server 6.0.4, which includes support for Snow License Manager 9.0.1. The update to Snow Inventory Server 6.0.4 is carried out through Snow Update Service (SUS).

Release information

Product:                 Snow Inventory Server
New version:          6.0.4
Release date:         February 05, 2019
Distribution:           SUS package

Revision Number:  396

Build number:        6.0.4.1217
Current status:       Released

Enhancements in Snow Inventory Server 6.0.4

  • Compatibility with Snow License Manager 9.0.1.

Known limitations in Snow Inventory Server 6.0.4

Disk-space information about the APFS file system (introduced in macOS High Sierra) and gathered by the Snow Inventory agent for macOS versions 6.0.0 and higher, is not yet fully supported by Snow Inventory Server. Full support will be provided in an upcoming release of Snow Inventory Server

Product Dependencies

Upgrading to Snow License Manager 9.0.1 requires Snow Inventory Server 6.0.4 or higher.

 

Release Notes

Released on January 16, 2019.

Release information

Product:                 Snow Inventory Server
New version:          6.0.3
Release date:         January 16, 2019
Distribution:           SUS package

Revision Number: 385

Build number:       6.0.3.1174

Current status:      Released

Enhancements in Snow Inventory Server 6.0.3

  • Compatibility with Snow License Manager 9.
  • Additional diagnostics in cloud application metering.

Known limitations in Snow Inventory Server 6.0.3

Disk-space information about the APFS file system (introduced in macOS High Sierra) and gathered by the Snow Inventory agent for macOS versions 6.0.0 and higher, is not yet fully supported by Snow Inventory Server. Full support will be provided in an upcoming release of Snow Inventory Server

Product Dependencies

Upgrading to Snow License Manager 9.0.0 requires Snow Inventory Server 6.0.3 or higher.

 

Release Notes: Snow Inventory Server 6.0.3

Release information

Product:                Snow Inventory Agent for Unix
New version:         6.0.2
Release date:        December 12, 2018 
Distribution:          SUS
Current status:     Released

Corrections

  • In order to get a full software inventory on Solaris 11, both the commands "pkginfo" and "pkg info" are used. 
  • Solved an issue where the agent would exit with error code due to characters not belonging to POSIX character set in the name of a file belonging to a package. 
  • Solved an issue with sparc64 processor model not being recognized due to the agent comparing the name case sensitive. 
  • Solved an issue where the agent could get stuck during scanning if the output from the "file"-command outputs more data than the system is prepared to handle. 
  • The version number of the Solaris 10 operating system is now correctly inventoried.

Released on 22nd of November 2018.

Release information

Product:                Snow Inventory Server
New version:         6.0.2
Release date:        Nov 22nd, 2018
Distribution:          MSI & SUS package

Current status:      Released

Enhancements in Snow Inventory Server 6.0.2

  • The following enhancement has been implemented in Snow Inventory Server version 6.0.2: Minor modifications have been made in the contract between Snow Inventory Server and Snow License Manager. These changes support the upcoming major release of Snow License Manager and relate to data quality and architecture modifications implemented in the Data Update Job for Snow License Manager 9. As such, this release of Snow Inventory Server is significant for customers planning to upgrade to Snow License Manager 9.

Known limitations in Snow Inventory Server 6.0.2

  • Disk-space information about the APFS file system (introduced in macOS High Sierra) and gathered by the Snow Inventory agent for macOS versions 6.0.0 and higher, is not yet fully supported by Snow Inventory Server. Full support will be provided in an upcoming release of Snow Inventory Server.

Released on 22nd November 2018

Release information

Product:                 Snow Inventory Oracle Middleware Scanner
New version:         1.0.0
Release date:        November 22, 2018
Distribution:          SUS
Current status:      Released

Product Overview

To optimize spend on Oracle middleware, an understanding of the software installed on an estate is crucial. However, achieving such insight for Oracle middleware can be challenging and time-consuming. Similar to databases, middleware licensing is further complicated by virtualization technologies. In our commitment to optimizing enterprise software spend and mitigating risk, this first middleware offering from Snow provides inventory data for Oracle WebLogic Server. The Snow Inventory Oracle Middleware Scanner is a dedicated component of Snow Inventory that collects information related to Oracle WebLogic Server installations.
This version of Snow Inventory Oracle Middleware Scanner supports Oracle WebLogic Server version 12 and higher.

Product Dependencies

The Snow Inventory Oracle Middleware Scanner is a standalone component that must be triggered either by crontab job in Linux/Unix environments or by a PowerShell script in Windows. The Snow Inventory Oracle Middleware Scanner requires Inventory agents 6 and higher and is compatible with Snow Inventory Server 6.0.2 environments and higher. Snow License Manager 9 or higher is required to process, normalize, and perform software recognition for Oracle WebLogic Server.

Known Limitations

  • This version of Snow Inventory Oracle Middleware Scanner supports Oracle WebLogic Server version 12 and higher.
  • In this first version, Snow Inventory Oracle Middleware Scanner uses file scanning to find installations and identify Oracle WebLogic Server editions. It does not support process scanning.
  • Correct recognition requires that Oracle WebLogic Server be installed according to the standard installation process.
  • Recognition is limited to Standard and Enterprise Editions.

Released on November 21, 2018

Release information

Product:                Snow Inventory Oracle Scanner
New version:         6.0.1
Release date:        November 21, 2018
Distribution:          SUS
Current status:     Released

Enhancements

The following enhancements have been implemented in Snow Inventory Oracle Scanner version 6.0.1:

  • Data about Oracle databases is now extracted from the Oracle environment even if it is not possible to run the inventory scan on an instance, or if the scan fails.
  • Discovery of the ORACLE_HOME for running Oracle Database instances has been enhanced to avoid manual configuration of an oratab file or the ORACLE_HOME variable for each database instance.
  • Oracle user credentials are no longer passed to sqlplus on the command line.
  • Initial checks are now carried out on a server to determine if Oracle databases are present. If not, no scanning takes place, improving the response time for Windows environments.
  • Logging for configuration issues has been improved.

Corrections

The following corrections have been implemented in Snow Inventory Oracle Scanner version 6.0.1:

  • Detection of the Locator feature and Spatial and Graph options are now clearly separated to avoid erroneous detection of these options.
  • Error handling for NullPointerException when aggregating Options has been improved so that inventory of Oracle databases is no longer incomplete.
  • Multiple item entries are no longer reported for a database if the scan of another database generates errors.
  • Debug mode no longer generates corrupted .snowpack files

Release information

Product:                 Snow Inventory Agent for Linux
New version:         6.0.0
Release date:        October 23, 2018
Distribution:          SUS and MSI package
Current status:     Released

Features

The following feature has been implemented in Snow Inventory Agent for Linux version 6.0.0:

Support for additional types of inventory information

Snow Inventory Agent for Linux 6.0.0 has been prepared to support the extraction of additional types of inventory data to be included in a scan. In this release, support has been added for Snow Oracle Middleware Scanner – a component that will be released later this year. Details of the data extracted will be shared in the release notes for Snow Oracle Middleware Scanner.


Enhancements

The following enhancements have been implemented in Snow Inventory Agent for Linux version 6.0.0:

  • To ease troubleshooting, the agent now logs the full pathnames of the locations it scans.
  • OpenSSL library has been updated from version 1.0.2 to 1.0.2n. 
  • cURL library has been updated from version 7.40 to 7.58.0. 
  • Zlib library has been updated from version 1.2.08 to 1.2.11.


Corrections

The following corrections have been implemented in Snow Inventory Agent for Linux version 6.0.0:

  • Invalid (non UTF-8) characters are no longer included in inventory scan files (snowpack) but are now replaced with the valid � character.
  • The Snow Inventory Oracle Scanner (SIOS) now executes correctly even if the inventory agent is run from a different working directory. The SIOS executable must, however, be placed in the same location as the agent (PRB0041359).
  • Instead of returning a count of 1, the agent now calculates the correct CPU count for virtualized environments containing multiple Linux virtual servers with identical physical IDs. (PRB0041430)
  • Amazon Linux AMI versions 2016.03 and 2014.3 are now recognized by the agent. (PRB0041486)
  • The Model and Manufacturer data are now stored correctly for Parallels desktop environments.

 

Releasenotes

Release information

Product:                Snow Inventory Agent for Windows
New version:         5.3.1
Release date:        October 23, 2018
Distribution:          SUS and MSI Package
Current status:     Released

 

Summary

A privilege escalation exploit vulnerability, CVE 2018-17778, has been identified. The external component cpuidsdk.dll v.1.2.0.6 in Snow Inventory Agent for Windows was reported as vulnerable to this privilege escalation exploit. At the time of publishing this bulletin this vulnerability has not been made public yet and is under review.
While this vulnerability has not yet been published, Snow is releasing an update of Snow inventory agent, the external component of cpuidsdk.dll was updated to the latest version v.1.2.1.2, which mitigates this vulnerability.

Security

Updated an external component CPUIDSDK.dll from 1.2.0.6 to 1.2.1.2 due to a discovered privilege escalation vulnerability CVE-2018-17778.
See security bulletin SN-181010-1 for additional information.

Enhancement

The following enhancements have been implemented in Snow Inventory Agent for Windows version 5.3.1:

  • A newer version of the third-party CPUID component has been included, which has improved CPU detection for:
    • AMD desktop Raven Ridge APU (AM4)
    • Intel Coffee Lake processors and Z370 platform
    • Intel Skylake-X HCC processors
    • Intel Xeon Skylake-SP and Xeon/W Skylake processors
    • Intel Xeon Phi Knight Landing Intel 9th generation Core family (Coffee Lake 9900K, 9700K, 9600K, 9600, 9500 and 9400).
    • Intel Coffee Lake-U processors.
    • Intel Z390.
    • AMD ThreadRipper 2000.

 

Release Notes and Security Note: Snow Inventory Agent 5.3.1 for Windows

Release information

Product:                 Snow Inventory Agent for Windows
New version:         6.0.2
Release date:        October 23, 2018
Distribution:          SUS and MSI Package
Current status:     Released

 

Summary

A privilege escalation exploit vulnerability, CVE 2018-17778, has been identified. The external component cpuidsdk.dll v.1.2.0.6 in Snow Inventory Agent for Windows was reported as vulnerable to this privilege escalation exploit. At the time of publishing this bulletin this vulnerability has not been made public yet and is under review.
While this vulnerability has not yet been published, Snow is releasing an update of Snow inventory agent, the external component of cpuidsdk.dll was updated to the latest version v.1.2.1.2, which mitigates this vulnerability.

Security

Updated an external component CPUIDSDK.dll from 1.2.0.6 to 1.2.1.2 due to a discovered privilege escalation vulnerability CVE-2018-17778.
See security bulletin SN-181010-1 for additional information.

Enhancement

The following enhancements have been implemented in Snow Inventory Agent for Windows version 6.0.2:

  • A new agent configuration setting has been added, http.timeout. This setting defines the timeout value, in seconds, for requests to the server endpoint. The default value is 15 seconds.
  • A newer version of the third-party CPUID component has been included, which has improved CPU detection for: 
    • Intel 9th generation Core family (Coffee Lake 9900K, 9700K, 9600K, 9600, 9500 and 9400)
    • Intel Coffee Lake-U processors.
    • Intel Z390.
    • AMD ThreadRipper 2000.

Release Information

ProductSnow Inventory Oracle Scanner  
New version6.0.0
Release DateOctober 3rd, 2018
DistributionSUS 
Current StatusReleased

 

Enhancements

The following enhancements have been implemented in Snow Inventory Oracle Scanner, version 6.0.0:

  • Additional detection checks have been added to support Oracle options:
    • SPATIAL_VECTOR_ACCELERATION – Spatial and Graph Option
    • ENCRYPT_NEW_TABLESPACES – Advanced Security Option

Corrections

  • The following corrections have been implemented in Snow Inventory Oracle Scanner, version 6.0.0:

    • Triggering the advanced compression option has been corrected to ensure that the capability runs as expected. (PRB0041673)
    • Logging of syslog can now be enabled and disabled using the Syslog setting in the logging section of the agent configuration file – applicable for Snow Inventory agents for Unix and Linux. (PRB0040657)

 

 

 

Link to Release Notes