Revenera Company News

Flexera announces acquisition of Snow Software

We are happy to share that Flexera, parent company of Revenera, has completed its acquisition of Snow Software. Rest assured this acquisition does not change how you do business with Revenera. Revenera, its products, and its dedication to its' custom...

cvirata Revenera Community Admin Feb 16, 2024

Company News

Security Advisory: Revenera's Response to Apache ActiveMQ Vulnerability CVE-2023-46604

(Latest Update 2023-Nov-07 16:06 CDT) A remote code execution vulnerability (CVE-2023-46604) was identified in Apache ActiveMQ. This article provides the latest information regarding Revenera's products' potential exposure to the vulnerability (if an...

cvirata Revenera Community Admin Nov 03, 2023

Security Advisory

activemq

Security Advisory: Revenera's Product Assessment and Response to cURL Vulnerabilities CVE-2023-38545 and CVE-2023-38546

cvirata Revenera Community Admin Oct 12, 2023

Security Advisory

curl

Revenera’s Software Installation Solutions Win ComponentSource® Awards

We are happy to announce that ComponentSource has presented our Software Installation business with several achievements from their 2023 Awards for both leading publishers and individual products: Revenera – Top 25 Publisher InstallShield – Top 50 ...

cvirata Revenera Community Admin Apr 18, 2023

award InstallAnywhere InstallShield

Happy Holidays from Revenera!

cvirata Revenera Community Admin Dec 21, 2022

Security Advisory: Assessment of Revenera's products' exposure to OpenSSL Vulnerabilities CVE-2022-3602 and CVE-2022-3786

Summary Two vulnerabilities in OpenSSL impacting versions 3.0.0 through 3.0.6, potentially causing a Denial of Service (DoS) and in one case potentially allowing the execution of arbitrary code, have been publicly disclosed. The vulnerabilities are r...

cvirata Revenera Community Admin Oct 31, 2022

OpenSSL Security Advisory

Security Advisory: Assessment of Revenera’s products' exposure to Apache Commons Text RCE Vulnerability CVE-2022-42889

Summary A critical vulnerability potentially allowing remote code execution in Apache Commons Text impacting versions 1.5 through 1.9 has been publicly disclosed. The vulnerability has been assigned the identifier CVE-2022-42889, and is also commonly...

cvirata Revenera Community Admin Oct 24, 2022

Security Advisory

Apache Commons Text RCE CVE-2022-42889

Make Your Voice Heard - Customer Experience Survey Open Now Through July 22!

Revenera's Customer Experience Survey is open now through July 22. If you received a survey, please take a few thoughtful moments to add your comments. We take your feedback seriously and appreciate your participation. Thank you! If you have any ques...

sbeil Revenera Moderator Jul 12, 2022

Security Advisory: Assessment of Revenera's products' exposure to Spring Framework RCE Vulnerability CVE-2022-22965

UPDATE (as of 7-Apr 10:00 CDT): A critical vulnerability potentially allowing remote code execution in Spring Framework impacting all versions prior to 5.3.18 and prior to 5.2.20. has been publicly disclosed. The vulnerability has been assigned the ...

cvirata Revenera Community Admin Mar 31, 2022

security spring

[Past Event]: Save the Date: SoftSummit 2022

Save your place today for the industry’s leading annual software monetization conference, Revenera’s SoftSummit. We are hosting the event virtually this year with two sessions to choose from: April 5, 2022 – Europe April 7, 2022 – North America Jo...

cvirata Revenera Community Admin Jan 14, 2022

Events

Security Advisory: Log4j Java Vulnerability (CVE-2021-4104, CVE-2021-45046, CVE-2021-44228)

UPDATE: Revenera’s response to Apache Log4j vulnerabilities CVE-2021-45105, CVE-2021-45046, CVE-2021-44228, and CVE-2021-4104 (as of 14-Jan 10:20 CST) A critical vulnerability in Apache Log4j 2 impacting versions from 2.0-beta9 to 2.14.1 has been pub...

cvirata Revenera Community Admin Dec 31, 2021

security

Holiday Greetings from Revenera!

cvirata Revenera Community Admin Dec 20, 2021

Revenera News: Move to Subscription Licensing

Revenera has announced its plans to complete the transition of all new sales of its solutions to a subscription model by December 31, 2021. Most of our products were already available as subscription only for a long time. This change will only apply ...

cvirata Revenera Community Admin Oct 12, 2021

We're Listening - Customer Experience Survey Now Open!

The Revenera Customer Success team sent out a short Customer Experience Survey last month. If you are the recipient of one of these surveys please take a couple minutes to add your comments by Oct 19th. Once all the responses are in, we will report t...

cvirata Revenera Community Admin Oct 05, 2021

csm Survey

Make Your Voice Heard - Customer Experience Survey Now Open!

Revenera's Customer Experience Survey is open Feb 2 - Mar 17. If you received a survey, please take a few thoughtful moments to add your comments. This is different from what you have received in the past. We are including a new question and, once al...

sbeil Revenera Moderator Mar 02, 2021

Featured topics

(Latest Update 2023-Nov-17 17:47 CDT) The cURL 8.4.0 patch has been released and we're continuing to assess Revenera product impact and if any remediation work is required. CVE-2023-38545 (Severity HIGH): This defect allows potential heap based buffer overflow in the SOCKS5 proxy handshake. This issues affects libcurl versions 7.69.0 to and including 8.3.0. CVE-2023-38546 (Severity: LOW): If certain conditions are in effect, this defect may allow a cookie injection attack on a running program using libcurl. This defect affects libcurl versions 7.9.1 to and including 8.3.0. If you need to patch cURL on your own servers or environment, the patch files are available at https://curl.se/download.html. Revenera Product Assessment Product cURL present in Product Present in Product Version or Component Mitigation / Fixed Version Notes Installation InstallAnywhere No None NA InstallShield Yes 2023 R1 2023 R2 Updated impacted sub-module in latest release. Download remediated versions from Product and License Center Software Composition Analysis Code Insight No None NA SBOM Insights No None NA Software Monetization Cloud Licensing (CLS) No None NA Compliance Intelligence (RCI) No None NA FlexNet Embedded - License Server Manager (FLSM) No None NA FlexNet Embedded - Local License Server (LLS) No None NA FlexNet Embedded SDK Yes C-XT: All versions Non C-XT: Versions prior 2023.09 C-XT: FlexNet Embedded 2023.09.1 Non C-XT: FlexNet Embedded 2023.09 Download remediated versions from Product and License Center FlexNet Operations - ALM No None NA FlexNet Operations - LLM No None NA FlexNet Operations On-Premise No None NA FlexNet Publisher No None NA Usage Intelligence (RUI) No None NA The information on this page reflects: The assessed status of all versions of Revenera’s products that are still supported (that is, they have not yet reached their End of Life). Product lifecycle dates can be found at https://docs.revenera.com/eol/default.htm. Related Information GitHub Announcement of cURL Vulnerabilities https://curl.se/docs/CVE-2023-38545.html https://curl.se/docs/CVE-2023-38546.html Change Log 2023-12-7 13:11 CDT: Published final product assessment. 2023-10-10 13:03 CDT: Initial advisory posted. 2023-10-11 18:07 CDT: Update regarding cURL 8.4.0 patch and ongoing product assessment. 2023-10-12 11:13 CDT: Published initial product assessment. 2023-10-18 13:38 CDT: Updated assessment for FlexNet Embedded LLS and Usage Intelligence products to not affected. 2023-10-26 09:55 CDT: Updated assessment for FlexNet Operations Cloud ALM to not affected. 2023-11-17 17:47 CDT: Updated product assessment for FlexNet Embedded. Initial Advisory (posted on Oct 10, 2023 11:03 AM) We are aware of the recent cURL security vulnerabilities (CVE-2023-38545 and CVE-2023-38546) and are assessing which of our products may be impacted. Once specific details regarding the impacted versions of cURL are released on October 11th, we will reconcile that with our analysis and provide further updates on any necessary remediation work. Please subscribe to this page to be notified of subsequent updates. Thank you for your patience.