The Trellix Application and Change Control 6.6.2 Linux release includes new features, resolved issues, updated kernels and platform support.
Every update release is cumulative and includes all features and fixes from the previous release. We recommend that you always upgrade to the most current update.
Rating
The rating defines the urgency for installing this update.
This release is recommended for all environments. Apply this update at the earliest convenience.
Release details
For release dates and build numbers, see KB87944.
Upgrade support
This release supports upgrading from the following Application Control client versions:
6.1.0–6.1.7
6.2.0
6.3.0
6.4.0–6.4.24
6.5.0–6.5.2
6.6.0 and 6.6.1
New or changed
S3 diagnostic tool support—TACC 6.6.2 introduces support for integrating the S3 diagnostic tool in unmanaged environments. This new feature provides event logging functionality, allowing all file and execution events generated by TACC Linux to be logged on the endpoint.
libcurl and libicu upgrade—This release upgrades the libcurl version to 8.5.0 and the libicu version to 71_1.
New kernel support—This release supports Oracle 9, in addition to the latest versions of the Linux kernel and other platforms:
RHEL 9
5.14.0-362.18.1.el9_3.x86_64
Oracle 9
5.15.0-0.30.19.el9uek.x86_64
5.15.0-202.135.2.el9uek.x86_64
5.14.0-70.13.1.0.3.el9_0.x86_64
5.14.0-362.13.0.1.el9_3.x86_64
5.14.0-362.18.1.el9_3.x86_64
Ubuntu 18
4.15.0-218-generic
4.15.0-219-generic
4.15.0-220-generic
4.15.0-221-generic
5.4.0-159-generic
5.4.0-162-generic
5.4.0-163-generic
Ubuntu 20
5.15.0-91-generic
5.15.0-92-generic
5.15.0-94-generic
Ubuntu 22
5.15.0-91-generic
5.15.0-92-generic
5.15.0-94-generic
5.15.0-1040-intel-iotg
6.2.0-36-generic
6.2.0-37-generic
6.2.0-39-generic
For the complete list of kernels supported, see Linux kernel support for Application and Change Control 6.x.
Known issues
For a list of current known issues, see Application and Change Control 6.x Known Issues.
Resolved issues
This release resolves known issues.
Category | Reference | Resolution |
|---|---|---|
Performance | MACC-12786 | Core dumps in 'scsrvc' no longer occur when handling events with unknown file types, preventing system slowness. |
Fixes to features | MACC-12826 | The system no longer crashes during post-handling of script execution events due to accessing empty data structures in the kernel module. |