Skip navigation
All Places > Snow Product Hub > Snow Inventory > Blog
1 2 3 Previous Next

Snow Inventory

33 posts

Release information

Product:                 Snow Inventory Agent for Linux
New version:         6.0.0
Release date:        October 23, 2018
Distribution:          SUS and MSI package
Current status:     Released

Features

The following feature has been implemented in Snow Inventory Agent for Linux version 6.0.0:

Support for additional types of inventory information

Snow Inventory Agent for Linux 6.0.0 has been prepared to support the extraction of additional types of inventory data to be included in a scan. In this release, support has been added for Snow Oracle Middleware Scanner – a component that will be released later this year. Details of the data extracted will be shared in the release notes for Snow Oracle Middleware Scanner.


Enhancements

The following enhancements have been implemented in Snow Inventory Agent for Linux version 6.0.0:

  • To ease troubleshooting, the agent now logs the full pathnames of the locations it scans.
  • OpenSSL library has been updated from version 1.0.2 to 1.0.2n. 
  • cURL library has been updated from version 7.40 to 7.58.0. 
  • Zlib library has been updated from version 1.2.08 to 1.2.11.


Corrections

The following corrections have been implemented in Snow Inventory Agent for Linux version 6.0.0:

  • Invalid (non UTF-8) characters are no longer included in inventory scan files (snowpack) but are now replaced with the valid � character.
  • The Snow Inventory Oracle Scanner (SIOS) now executes correctly even if the inventory agent is run from a different working directory. The SIOS executable must, however, be placed in the same location as the agent (PRB0041359).
  • Instead of returning a count of 1, the agent now calculates the correct CPU count for virtualized environments containing multiple Linux virtual servers with identical physical IDs. (PRB0041430)
  • Amazon Linux AMI versions 2016.03 and 2014.3 are now recognized by the agent. (PRB0041486)
  • The Model and Manufacturer data are now stored correctly for Parallels desktop environments.

 

Releasenotes

Release information

Product:                Snow Inventory Agent for Windows
New version:         5.3.1
Release date:        October 23, 2018
Distribution:          SUS and MSI Package
Current status:     Released

 

Summary

A privilege escalation exploit vulnerability, CVE 2018-17778, has been identified. The external component cpuidsdk.dll v.1.2.0.6 in Snow Inventory Agent for Windows was reported as vulnerable to this privilege escalation exploit. At the time of publishing this bulletin this vulnerability has not been made public yet and is under review.
While this vulnerability has not yet been published, Snow is releasing an update of Snow inventory agent, the external component of cpuidsdk.dll was updated to the latest version v.1.2.1.2, which mitigates this vulnerability.

Security

Updated an external component CPUIDSDK.dll from 1.2.0.6 to 1.2.1.2 due to a discovered privilege escalation vulnerability CVE-2018-17778.
See security bulletin SN-181010-1 for additional information.

Enhancement

The following enhancements have been implemented in Snow Inventory Agent for Windows version 5.3.1:

  • A newer version of the third-party CPUID component has been included, which has improved CPU detection for:
    • AMD desktop Raven Ridge APU (AM4)
    • Intel Coffee Lake processors and Z370 platform
    • Intel Skylake-X HCC processors
    • Intel Xeon Skylake-SP and Xeon/W Skylake processors
    • Intel Xeon Phi Knight Landing Intel 9th generation Core family (Coffee Lake 9900K, 9700K, 9600K, 9600, 9500 and 9400).
    • Intel Coffee Lake-U processors.
    • Intel Z390.
    • AMD ThreadRipper 2000.

 

Release Notes and Security Note: Snow Inventory Agent 5.3.1 for Windows

Release information

Product:                 Snow Inventory Agent for Windows
New version:         6.0.2
Release date:        October 23, 2018
Distribution:          SUS and MSI Package
Current status:     Released

 

Summary

A privilege escalation exploit vulnerability, CVE 2018-17778, has been identified. The external component cpuidsdk.dll v.1.2.0.6 in Snow Inventory Agent for Windows was reported as vulnerable to this privilege escalation exploit. At the time of publishing this bulletin this vulnerability has not been made public yet and is under review.
While this vulnerability has not yet been published, Snow is releasing an update of Snow inventory agent, the external component of cpuidsdk.dll was updated to the latest version v.1.2.1.2, which mitigates this vulnerability.

Security

Updated an external component CPUIDSDK.dll from 1.2.0.6 to 1.2.1.2 due to a discovered privilege escalation vulnerability CVE-2018-17778.
See security bulletin SN-181010-1 for additional information.

Enhancement

The following enhancements have been implemented in Snow Inventory Agent for Windows version 6.0.2:

  • A new agent configuration setting has been added, http.timeout. This setting defines the timeout value, in seconds, for requests to the server endpoint. The default value is 15 seconds.
  • A newer version of the third-party CPUID component has been included, which has improved CPU detection for: 
    • Intel 9th generation Core family (Coffee Lake 9900K, 9700K, 9600K, 9600, 9500 and 9400)
    • Intel Coffee Lake-U processors.
    • Intel Z390.
    • AMD ThreadRipper 2000.

Release Information

ProductSnow Inventory Oracle Scanner  
New version6.0.0
Release DateOctober 3rd, 2018
DistributionSUS 
Current StatusReleased

 

Enhancements

The following enhancements have been implemented in Snow Inventory Oracle Scanner, version 6.0.0:

  • Additional detection checks have been added to support Oracle options:
    • SPATIAL_VECTOR_ACCELERATION – Spatial and Graph Option
    • ENCRYPT_NEW_TABLESPACES – Advanced Security Option

Corrections

  • The following corrections have been implemented in Snow Inventory Oracle Scanner, version 6.0.0:

    • Triggering the advanced compression option has been corrected to ensure that the capability runs as expected. (PRB0041673)
    • Logging of syslog can now be enabled and disabled using the Syslog setting in the logging section of the agent configuration file – applicable for Snow Inventory agents for Unix and Linux. (PRB0040657)

 

 

 

Link to Release Notes

Release Information

ProductSnow Inventory Agent for Windows 
New version6.0.0
Release DateOctober 2, 2018 
DistributionSUS 
Current StatusReleased

 

Features

Support for additional types of inventory information

Inventory Server 6.0.0 has been prepared to support the extraction of additional types of inventory data to be included in a scan. In this release, support has been added for Snow Oracle Middleware Scanner – a component that will be released later this year. Details of the data extracted will be shared in the release notes for Snow Oracle Middleware Scanner.

Enhancements

  • To ensure that the Windows agent can determine when to trigger a scan, the agent stores the time for next scan on the local machine. If the agent is started and the stored time has passed, a scan is carried out immediately.
  • A newer version of the third-party CPUID component has been included, which has improved CPU detection for:
    o AMD desktop Raven Ridge APU (AM4)
    o Intel Coffee Lake processors and Z370 platform
    o Intel Skylake-X HCC processors
    o Intel Xeon Skylake-SP and Xeon/W Skylake processors
    o Intel Xeon Phi Knight Landing
  • The agent can now be updated to a newer version directly from Inventory Server – even if it is not installed in the default location.
  • Improved memory allocation reduces the memory usage of the agent.
  • The following file attributes are now included in the scan result: product_name, product_version, original_filename and file_description.

Corrections

  • The setting to enable scanning on all local disks (<LocalDisk>) has been deprecated. We have added a new setting, Software-Include, which will function together with the existing Software-Exclude configuration settings. If Software-Include paths are present in the agent configuration file, the agent will scan the specified paths. If Software-Include paths are not set, the agent will scan all local disks. If Software-Exclude paths are included, these spaces will not be included in the scan.
  • Physical memory slot information is now gathered correctly.
  • The Snow Inventory Oracle Scanner (SIOS) now runs correctly even if the inventory agent is running from a different working directory. The SIOS executable, however, needs to be placed in the same folder as the agent.
  • Lingering application metering data for applications that have been removed no longer causes software rows to be created for the removed application.

Release Information

ProductSnow Inventory Agent for Windows 
New version6.0.0
Release DateOctober 2, 2018 
DistributionSUS 
Current StatusReleased

 

Features

Support for additional types of inventory information

Inventory Server 6.0.0 has been prepared to support the extraction of additional types of inventory data to be included in a scan. In this release, support has been added for Snow Oracle Middleware Scanner – a component that will be released later this year. Details of the data extracted will be shared in the release notes for Snow Oracle Middleware Scanner.

Enhancements

  • To ensure that the Windows agent can determine when to trigger a scan, the agent stores the time for next scan on the local machine. If the agent is started and the stored time has passed, a scan is carried out immediately.
  • A newer version of the third-party CPUID component has been included, which has improved CPU detection for:
    o AMD desktop Raven Ridge APU (AM4)
    o Intel Coffee Lake processors and Z370 platform
    o Intel Skylake-X HCC processors
    o Intel Xeon Skylake-SP and Xeon/W Skylake processors
    o Intel Xeon Phi Knight Landing
  • The agent can now be updated to a newer version directly from Inventory Server – even if it is not installed in the default location.
  • Improved memory allocation reduces the memory usage of the agent.
  • The following file attributes are now included in the scan result: product_name, product_version, original_filename and file_description.

Corrections

  • The setting to enable scanning on all local disks (<LocalDisk>) has been deprecated. We have added a new setting, Software-Include, which will function together with the existing Software-Exclude configuration settings. If Software-Include paths are present in the agent configuration file, the agent will scan the specified paths. If Software-Include paths are not set, the agent will scan all local disks. If Software-Exclude paths are included, these spaces will not be included in the scan.
  • Physical memory slot information is now gathered correctly.
  • The Snow Inventory Oracle Scanner (SIOS) now runs correctly even if the inventory agent is running from a different working directory. The SIOS executable, however, needs to be placed in the same folder as the agent.
  • Lingering application metering data for applications that have been removed no longer causes software rows to be created for the removed application.

 

Release Notes SIM 5.10

Release Information

ProductSnow Inventory Oracle Scanner  
New version6.0.0
Release DateOctober 3rd, 2018
DistributionSUS 
Current StatusQA approved

 

Enhancements

The following enhancements have been implemented in Snow Inventory Oracle Scanner, version 6.0.0:

  • Additional detection checks have been added to support Oracle options:
    • SPATIAL_VECTOR_ACCELERATION – Spatial and Graph Option
    • ENCRYPT_NEW_TABLESPACES – Advanced Security Option

Corrections

  • The following corrections have been implemented in Snow Inventory Oracle Scanner, version 6.0.0:

    • Triggering the advanced compression option has been corrected to ensure that the capability runs as expected. (PRB0041673)
    • Logging of syslog can now be enabled and disabled using the Syslog setting in the logging section of the agent configuration file – applicable for Snow Inventory agents for Unix and Linux. (PRB0040657)

 

 

 

Link to Release Notes

This release introduce features, enhancements and corrections.

Release Information

ProductSnow Inventory Server 
New version6.0.0
Release DateSeptember 25, 2018
DistributionSUS (and MSI in a bit)
Current StatusReleased

 

Features in Snow Inventory Server 6.0.0

Compatibility with upcoming release of Snow License Manager
Inventory Server 6.0.0. includes support for an upgrade of the Data Update Job – or daily maintenance task – due for release in an upcoming version of Snow License Manager. The Data Update Job is the machinery that connects Snow Inventory to Snow License Manager, ensuring that the data collected from a customer environment is correctly replicated in SLM for use in license compliance calculations, managing computers, reports, and visualization.

The modifications to the Data Update Job focus on data handling and the creation of a clear separation of responsibilities between Snow Inventory and Snow License Manager – removing dependencies and enabling best practices. For Snow Inventory users, improvements will be visible in the time it takes to delete computers, users and devices.

Support for additional types of inventory information
Inventory Server 6.0.0 has been prepared to support the extraction of additional types of inventory data to be included in a scan. In this release, support has been added for Snow Oracle Middleware Scanner – a component that will be released later this year. Details of the data extracted will be shared in the updated release notes of the relevant inventory agents, when the scanner component has been released.

Enhancements in Snow Inventory Server 6.0.0

  • For security reasons, the Master Server and Service Gateway APIs no longer report their local dates and times.
  • Inventory Server, Snow Update Service, and Snow Management and Configuration Center can now be installed in a location other than C:\Program Files. The pathname of the desired location for these components can be specified during the upgrade process to this version of Inventory Server in the installation wizard. All three components must reside in the same location.
  • Inventory server no longer rejects inventory files containing unexpected and invalid characters. The invalid characters will be skipped, and the remainder of the inventory file will be processed as normal.
  • The file attributes FileDescription, FileVersion, ProductName, ProductVersion, and OriginalFilename, collected by the Inventory agent for Windows, are now processed and stored in the Snow Inventory database with their original attribute names.

Corrections in Snow Inventory Server 6.0.0

  • Additional data handling has been added to prevent the Inventory Admin Console from unexpectedly quitting when users with either low bandwidth or large data sets were switching between device information pages (PRB0041331).

 

Known limitations in Snow Inventory Server 6.0.0

  • Disk-space information about the APFS file system (introduced in macOS High Sierra) and gathered by the Snow Inventory agent for macOS versions 6.0.0 and higher, is not yet fully supported by Snow Inventory Server. Full support will be provided in an upcoming release of Snow Inventory Server.

 

This release introduce features, enhancements and corrections.

Release Information

ProductSnow Inventory Agent for macOS
New version6.0.0
Release DateSeptember 27, 2018
DistributionSUS and MSI Setup
Current StatusQA approved

 

Enhancements

The following enhancements have been implemented in Snow Inventory Agent for macOS 6.0.0:

  • Official support for macOS Mojave.
  • To align with Apple’s announcement that support for applications built on 32-bit architecture will cease, the macOS agent are now built with a 64-bit architecture.
  • Scanning of environment variables can now be enabled/disabled, using the system setting software.scan.environmentvariables in agent configuration. This parameter is enabled by default.
  • Functionality to detect and gather information about NVMe-disks on newer MacBooks has been added to the agent. Full utilization of this functionality is dependent on an upcoming release of Inventory Server.
  • The agent can now gather detailed information from the APFS file system introduced in macOS High Sierra.
  • The curl library has been updated to maintain compatibility and ensure that the latest vulnerability patches included in these libraries are applied, such as the most recent release of the communication protocol TLS 1.2.
  • The request header sent to the server now includes site name. In the future, this data will enable the Inventory Server to block unwanted agents more efficiently.
  • The capability to gather information from local disks has been upgraded to support new Apple file systems and hardware. Full utilization of this functionality is dependent on an upcoming release of Inventory Server (PRB0041131).

Corrections

  • The agent now reports the correct number of physical cores when Hyper-Threading is enabled on the machine being scanned. (PRB0040911).
  • If BIOS date is unavailable, this field will remain empty – overriding the previous solution, which assigned it with the scan date (PRB0041129).
  • The agent no longer causes a segmentation error when the running update-package command is run from the command line (PRB0041672).

This release introduce features, enhancements and corrections.

Release Information

ProductSnow Inventory Agent for Unix 
New version6.0.0
Release DateSeptember 19, 2018
DistributionSUS 
Current StatusReleased

 

Features

Support for additional types of inventory information

Inventory Server 6.0.0 has been prepared to support the extraction of additional types of inventory data to be included in a scan. In this release, support has been added for Snow Oracle Middleware Scanner – a component that will be released later this year. Details of the data extracted will be shared in the release notes for Snow Oracle Middleware Scanner.

Enhancements

  • To ease troubleshooting, the agent now logs the full pathnames of the locations it scans.

Corrections

  • Logging of syslog can now be enabled and disabled using the Syslog setting in the logging section of the agent configuration file.
  • Support for Isof command has been added to resolve paths on PA RISC /HP UX machines when the pfiles are missing from their expected location.
  • When a connection to the Inventory Server fails, the agent now logs an error instead of a warning in the log file.

 

This version introduce various improvements and corrections in the Snow Inventory Server.

 

Release Information

ProductSnow Inventory Server
New version5.4.0
Release DateApril 5, 2018
DistributionSUS and MSI Setup
Current StatusReleased

 

Features in Snow Inventory Server 5.4.0

Simplified migration from Inventory 3 with new upgrade wizard

A new step-by-step wizard has been included in this version of Inventory Server guiding the user through the migration process from Inventory 3 to Inventory 5. You can access this wizard from the start page of the Server Configuration Manager by clicking “Upgrade from Inventory 3”. The wizard contains both informative steps as well as automated data migration from the Inventory 3 database.

Ability to set up a standalone Inventory Server

A new Service Gateway mode has been added: Standalone receiver. A Service Gateway running in this mode will not require access to a master server. Standalone receivers will be able to receive and store inventory files from agents locally. A Standalone receiver will not be able to send updates or other commands to the agents.
Automatic updates of the Service Gateways will not update standalone receivers as they lack a connection to the  Master Server.

 

Enhancements in Snow Inventory Server 5.4.0

The following enhancements have been made in Inventory Server 5.4.0:

  • New system settings for Inventory Agents for Windows have been added to the Agent Configuration section for turning specific browser extension installations on or off.

Corrections in Snow Inventory Server 5.4.0

The following corrections have been made in Inventory Server 5.4.0:

  • Agent Update jobs delayed due to multiple Master Server identities has been corrected and made more robust.
  • An issue where we stored the names of Oracle option checks instead of Oracle option names as been corrected to store both (PRB0041283).
  • It’s now possible to use passwords that start with special characters when deploying Agents (PRB0041354).

 

This version introduces new features, enhancements and corrections in the Snow Inventory Agent for Windows.

 

Release Information

ProductSnow Inventory Agent for Windows 
New version5.3.0
Release DateApril 5, 2018
DistributionSUS and MSI Package
Current StatusReleased

 

Enhancements

  • Changes have been made to the chrome extension to ensure consistent behavior with other supported Snow browser extensions.
  • All extensions (Google Chrome, Internet Explorer 11, and Firefox) can now be separately enabled/disabled by using the respective settings saas.chrome.enabled, saas.ie11.enabled and saas.firefox.enabled in the Agent configuration.

Corrections 

  • The Inventory Agent service no longer hangs when starting the agent service on a Citrix Server.

Functionality update for Snow Inventory Agent for Windows

 

Published: March 21, 2018

Software version: 5.2.4

 

Executive Summary


Installations of Snow Inventory Agent for Windows, of the versions from 5.1.0 to 5.2.3 and deployed using an MSI package built by Snow before March 16, 2018, are affected by a critical issue that could lead to loss of data on computers if the agent uninstallation is performed using the command line option “snowagent.exe uninstall”. The issue has been just recently discovered in a test environment and has its root cause in an error in the MSI package used to install the agent. The MSI package does not correctly set the InstallLocation property in the Windows Registry – a property used by the agent command line uninstall function. Uninstallation through the MSI technology (both scripted and non-scripted) works as expected.

 

In order to avoid this issue, use the same install and uninstall methods as recommended by the Snow Inventory documentation. No incidents of this issue occurring in a production environment have been reported, however, due to the potential consequences, we are treating this issue as a Severity 0. Please see the Affected Scenarios paragraph below for more information on when and where this error could potentially occur. Please refer to the How to mitigate paragraph for information on what steps are needed to safely update the agents.

 

This issue does not affect agent performance or functionality in normal operation.

 

Affected Software versions

 

The following software versions or editions are affected. Versions or editions that are not listed are not affected. 

 

AgentSeverityVersions
Snow Inventory Agent for WindowsCritical
Unwanted file removal
Versions 5.1.0 through 5.2.3

Affected Scenarios

 

The only affected scenario is when the agent uninstall registry key has an empty InstallLocation property value, and the uninstallation is invoked by the agent command line option

“snowagent.exe uninstall” locally or remotely on the client machine.

The above scenario can only occur if all of the following statements are true: 

  • The agent is installed using an MSI package created before March 16, 2018.
  • The agent has never been updated or reinstalled using the command line option.
  • The agent has not been updated or deployed through the Snow Inventory Server functionality.

Every other deployment scenario is unaffected by this issue.

How to mitigate

 

First and foremost, do not use the agent command line “snowagent.exe uninstall” if the agent version is prior to 5.2.4.

 

Update

If you are affected by the issue as described above, and wish to update the agent, use one of the following procedures:

  • Request a new MSI package from Snow for your specific agent configuration. Re-deploy the MSI package using your preferred deployment method.

    or
  • Create an agent update through the Inventory Server administration console and distribute to all your endpoints.

 

Workaround (without updating the agent)

Any of the below workarounds will assure a safe future uninstallation of the agent.

  • Run the agent command line “snowagent.exe install” to populate the InstallLocation registry key value.

    or
  • Two scripts are available through Snow Support to prevent the issue from triggering (these can be found here):
    • A PowerShell script that can be deployed as an additional file to the Snow Inventory Agent. This script will be executed during the next scan.
    • A PowerShell script that can be executed manually on the client computer.

 

Remove

If you are affected by the issue as described above, and wish to uninstall the agent, use one of the following procedures:

  • Uninstall the agent using the MSI package.

    or
  • Uninstall the agent through Add/Remove Program in the Windows Control Panel.

 


Update FAQ

 

Question:

I am not planning on uninstalling the agent using command line, do I need to do anything?

Answer:

There is no risk in leaving the agent on your system, but to prevent future mistakes we recommend you update the agent to version 5.2.4 or later.

 

Question:

I re-deployed my agent using an MSI package created before March 16, 2018. Do I need to update the agent anyway?

Answer:

Yes, you should update the agent according to the methods mentioned above.

 

Question:

If I want to update my agent, are there any special considerations due to this issue?

Answer:

No, this issue has no impact on the update procedure of the agent.

 

Question:

I just installed the agent using a Snow provided MSI package built after March 16th,2018. Am I affected by this issue?

Answer:

Packages built by Snow after March 16th are not affected by this issue.

 

Question:

Should I immediately remove the Snow Agent?

Answer:

No, the agent works as expected with normal operation. The issue can only be triggered as part of the uninstall process in specific scenarios as stated above.

 

Question:

I am affected by this issue; how can I safely remove the Snow Agent?

Answer:

Follow the process outlined in the document above by using the MSI package or through Add/Remove programs in the Windows Control Panel.

 

Question:

I believe I am at risk in this scenario, should I do something immediately?

Answer:

There is no urgent need to act, but to avoid potential risks we recommend you update the agent to version 5.2.4 or later.

 

Question:

I have installed the agent using the Inventory Server Deploy method, do I have to act now?

Answer:

No, you are not affected by this issue.

 

Question:

I installed the agent using an MSI package but have since then updated the agent using an Inventory Server Update, am I affected?

Answer:

Once the agent has been updated on the target system using the Inventory Server Update, you are no longer vulnerable to this issue.

 

Question:

I am unsure on what to do, is there anyone that can help me?

Answer:

Sure, contact Support and explain your concerns.

 

 

For further information please use this link to our support knowledge base system.

 

 

This version introduces enhancements and corrections in the Inventory Data Processor.

The inventory agent no longer needs to run as superuser. 

Released on 18th January 2018.

Release information

Product:                 Snow Inventory Agent for Linux
New version:         5.2.0
Release date:        January 18, 2018 
Distribution:          SUS and MSI package
Current status:     Released

Enhancements 

The following enhancements have been made in Snow Inventory Agent for Linux, version 5.2.0:

  • To fulfil the requirements for Principle of least Privileges, the inventory agent no longer needs to run as superuser. Instead, the user account running the agent needs sudo access to the specific commands mentioned in the Linux agent user guide.
  • For performance and stability reasons, the agent now gathers hardware details using dmidecode.
  • To improve the user experience, detection of Amazon EC2 hypervisor no longer outputs to the terminal window.

 Corrections 

The following corrections have been made in  Snow Inventory Agent for Linux, version 5.2.0:

  • Special characters in the InstallDate-column have been corrected to a valid date format.

Inventory Product Updates

This version introduce an enhancement in the Snow Inventory Agent for Windows which supports a new format of cloud metering rules.

Release information

Product:                Snow Inventory Agent for Windows
New version:         5.2.3
Release date:        December 11, 2017 
Distribution:          MSI package and SUS
Current status:     Released

 

Enhancements in Snow Inventory Agent for Windows 5.2.3:

Support for new format of cloud-metering rules.
The format of cloud-metering rules delivered by Snow’s Software Recognition Service (SRS) will be modified during the first quarter of 2018. To avail of new cloud-metering rules added to SRS after the format change requires Windows agent version 5.2.3 or higher and Inventory Server version 5.3.0 – release planned for January 2018.

Versions of the Windows agent below 5.2.3 will continue to function as before, but it will not be possible to benefit from new cloud-metering rules added to SRS.