IBM Security Guardium Patch Release Notes

Product: IBM Security Guardium

Release: Guardium 11.0
Patch Description: 11.0 Sniffer patch 4031
Name of file: SqlGuard-11.0p4031_Snif_Aug_11_2021.tgz.enc.sig
MD5SUM 2bf57e320f010eae5f17e3bf2ce9f8c8
Date: 30 August 2021

Finding the patch

This document provides a reference to the contents of this patch. If applicable, the detailed description of
each fix and instructions for applying this patch are contained within the download package. The package
is available for downloading from the IBM Fix Central website at http://www.ibm.com/support/fixcentral/
Make the following selections on Fix Central:
Product selector: IBM Security Guardium
Installed Version: 11.0
Platform: UNIX/Linux/Windows
Click "Continue", then select "Browse for fixes" and click "Continue" again
Select "Appliance Patch (GPU and ad hoc)"

Prerequisites
• Guardium versions 11.0, 11.1, 11.2, or 11.3

Installation notes
• This universal sniffer patch can be installed on all releases of Guardium version 11.0.
• This patch restarts the sniffer process.
• Download the patch and extract the compressed package outside the Guardium system.
• Pick a quiet time on the appliance.
• Install the patch in a top-down manner on all appliances, starting with the central manager, then
aggregators, and then the collectors.
• This sniffer patch must be installed across all the appliances such as the central manager,
aggregators, and collectors.

For information on Guardium patch types and naming convention, see:

https://www.ibm.com/support/pages/node/6195371
Bug Fixes
Snif Issue Key Summary APAR
Update
11.0p4028 https://delivery04.dhe.ibm.com/sar/CMA/IMA/09s01/1/Guardi
um_v11_0_p4028_sniffer_update_release_notes.pdf
11.0p4029 GRD-52004 Create Procedure statement not captured from Mainframe DB2 GA17657
GRD-51886 "CREATE" and "CREATE OR REPLACE" commands are not GA17659
getting logged by collector.
GRD-46469 Actual values for Bind Variable are not captured GA17677
11.0p4030 GRD-53179 Snif 11.0p4029 intermittently crashes and causes zSTAP to GA17728
disconnect/reconnect
GRD-52453 Snif parser error cannot add parent to sentence - empty child GA17679
handler
GRD-52135 Azure Data Stream DAM Reports information not expected GA17680
GRD-51886 "CREATE" and "CREATE OR REPLACE" commands are not GA17659
getting logged by collector.
GRD-50582 Customer do not search for all the procedures in MS SQL GA17678
("analysis on datasource using stored procedures")
GRD-48837 Suspicious LOGIN_FAILED from 00:00 until 00:50 || 5-7 GA17571
attempts.
11.0p4031 GRD-54025 Snif does not receive SPAN Port Oracle Traffic
GRD-53249 Incorrect, "partial" or blank "Exception Description" in report GA17718
for MSSQL
GRD-53080 Oracle Unified Audit enabled S-TAP: Sessions captured report GA17716
"Session End Time" prior "Session Start Time"
GRD-52457 The number of SQL errors recorded after the upgrade to GA17707
version 10.6 has increased significantly
GRD-48030 Informix EXIT traffic is being ignored with STAP Ignore GA17497
Response enabled.

New supported platforms and databases

OS or Database Version
Couchbase 6.6
CockroachDB 20.2.3

IBM Guardium Version 11.0 Licensed Materials - Property of IBM. © Copyright IBM Corp. 2002, 2021. US Government Users
Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM, the IBM logo, and ibm.com® are trademarks or registered trademarks of International Business Machines Corp., registered in
many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of
IBM trademarks is available on the web at “Copyright and trademark information” (www.ibm.com/legal/copytrade.shtml)