SVM On-prem November Update

[ShikhaS]

SVM On-prem November Updates are live now!

SVM On-prem R2 v7.6.1.30 is now available for download. This new version of the on-prem edition is compatible with the latest version of the Patch Publisher V7.23.1585.  Along with this, all the recent updates made to the SVM Cloud and Patch Publisher will now be available to our SVM on-prem customers through this update. Some important enhancements include:

Migration from CentOS Virtual Appliance to Oracle Linux -

 We are pleased to announce that Software Vulnerability Manager now supports migration from CentOS 7 Virtual Appliances to Oracle Linux. With CentOS 7 reaching its end of life, this migration enables customers to transition to a secure and fully supported environment. Oracle Linux offers a familiar experience to CentOS, along with extended support, timely security patches, and robust protection against vulnerabilities.

Software Vulnerability Manager User Interface Enhancements –

Migration to “Notarytool” Command-Line Utility for SVM Mac Agent

The Software Vulnerability Manager (SVM) Mac Agent now uses the notarytool command-line utility for its notarization processes. This update replaces earlier notarization methods to comply with Apple's latest security requirements

Enabling CFG and Stack Protection for SVM Agent

The security of the Software Vulnerability Manager (SVM) Agent has been enhanced with the activation of Control Flow Guard (CFG) and Stack Protection. This update helps in preventing memory corruption and ransomware attacks, reduces the attack surface, and makes it more difficult to exploit vulnerabilities such as buffer overflows.

Enhanced the UI for the SAID Popup in Patch Publisher

This update presents a new, refreshed, and modern user interface for the SAID popup layout in the Patch Publisher.

• Text Overflow in CVE References
• Solution Section Formatting
• Changelog Handling
• Scroll Bar Behavior
• Unwanted Tags and Labels

Patch Subscription Enhancement -

A new "Manage Assignments" button has been added for subscribing to and editing SPS and VPM patches, enabling you to assign specific groups, all devices, or all users during endpoint deployments in Intune publishing. Additionally, new context menu options allow you to pause and resume subscriptions. Selecting "Pause Subscription" temporarily stops any subscribed patches, while "Resume Subscription" reactivates patches that were previously paused.

Patch Publisher Enhancement

Enhanced Intune Assignments in Create Patch Wizard

The Create Patch Wizard now includes new panels to enhance the user experience for Intune patch publishing. The Connection Details panel enables easier management of Intune connections, while the Manage Assignments panel provides improved control over endpoint deployments within Intune publishing. The Manage Assignments panel becomes available when the “Manage Assignments” option is set to “Yes” in the Connection Details panel, allowing users to add specific assignments such as “Add Groups” (assigns specific groups), “Add All Devices” (assigns all devices), and “Add All Users” (assigns all users). These assignments can be configured for the Required, Available, and Uninstall sections during endpoint deployments.

Improved Assignment Management in Patch Subscriptions

The Patch Subscription feature now includes a new "Manage Assignments" button for subscribing to and editing SPS and VPM patches. This enhancement allows you to add specific assignments for endpoint deployments in Intune publishing, including: "Add Groups" (assigns specific groups), "Add All Devices" (assigns all devices), and "Add All Users" (assigns all users). These assignments can be applied to the Required section.

New Context Menu Options for SPS and VPM Patches

Additional context menu options have been introduced for SPS and VPM patches, enabling more flexible subscription management. The "Pause Subscription" option allows users to temporarily halt patches they have subscribed to, while the "Resume Subscription" option reactivates any paused patches.

For the release notes, please click here.