December 19, 2024

Requirements:

• There is a product dependency on having the .NET 8 Hosting package installed.
• OAuth authorization is dependent on having BI version 24.2.0.
• The new Central Policy message to retrieve all scheduled scans is dependent on BI version 24.3.0 and higher.
• A reboot of the system may be required.

New features and enhancements:

• Add new privilege level for users with SUDO access of ALL.
• Removed ability to migrate from Retina to Phoenix.
• Added support of the Zypper software package manager for SUSE Linux for software enumeration.
• Added support for enumerating MSSQL databases on Linux targets.
• Added support for new Central Policy message to request all scheduled scans from BI, instead of just the updated ones.
• Added support for configuration of SSH authentication ciphers and methods.
• Added getting target description for a Windows target from the registry.

Issues resolved:

• Resolved an error condition where a hung scan could occur in getting the target domain information. Added timeouts around the registry access and added a timeout to the remote command.
• Modified the code path which resulted in the Job Queue Status node being skipped for the Central Policy EngineInfo XML.
• Resolved an issue where the scanner wasn't using keyboard-interactive mode for authentication.
• Resolved an issue where getting the service startup type locally caused a hung scan by adding a timeout around the API call.
• Added timeouts around additional registry access in DCOM enumeration.
• Resolved an issue in address resolution parsing when the target machine name contained a #.

Known issues:

• PowerShell doesn't properly send the command line options for btdiscovery.cmd to the program. This command must be run in a standard windows command shell.

Notes:

• SSH Session encryption using the SHA1 cipher is deprecated. SHA256 or higher should be used.
• This release is available by download from the BeyondTrust Client Portal.
• The MD5 signature is: 64001ce5a2d89a86788a517882f67edd
• The SHA-1 signature is: 2db64143d366c92065842ad1fb191e8dc878449a
• The SHA256 signature is: 7004b223a8394994b8272227f66cee92205b25cfa7f9429e66b66ee688e73b83

December 16, 2024

⚠️

Important

• The version of BeyondTrust Updater shown within the Updater displays as 3.4.1.1743. This package actually contains the 3.4.1.1742 install of BeyondTrust Updater, and shows as such in the About tab after installation. This deviation was necessary due to the original 1742 package being corrupted and failing to install. This package was revoked and replaced with 1743.
• As of January 1, 2025, BeyondTrust Product Update Server will NO LONGER be protected by Imperva cloud. Instead, BeyondTrust is switching over to CloudFlare.
  For more information, see CloudFlare IP Addresses for a list of IP address ranges that are used by CloudFlare and for access to the CloudFlare API.

Requirements

• .NET 4.7.2 or later
• IIS to be enabled on host

Issues resolved

December 20 2024

Requirements

• We recommend a restart after this update.

New features and enhancements

• There are no new features or enhancements.

Notes

• Direct upgrades to 24.3.0.1896 are supported from all previous versions.
• This release bundles version 24.3.0.1576 of the BeyondTrust Discovery Scanner, corresponding release notes available: https://www.beyondtrust.com/docs/release-notes/beyondinsight-password-safe/index.htm
• .NET hosting bundle v8.0.11 is included.
• Session Monitoring Agent (pbsmd) 24.3.16 is included.
• Enhanced Session Monitoring Agent (pbpsmon) 24.3.16 is included.
• PS Automate build 12239790337 is included.
• BeyondTrust customers can download this release from their Password Safe Cloud portal by navigating to Configuration > Resource Zones and clicking Download Installer.
• The MD5 signature is: 52A655293E71504E4089290FBDD49BD3
• The SHA-1 signature is: 1C44DB30C69D3B320B60E74336E58BD23591BE15
• The SHA-256 signature is: A7D5BAC6A2A89253C8C49CD4400933701EEC73497B24F4FB4B853F389194B615

December 6, 2024

Issues Resolved:

• Addressed security concerns

Notes:

• Upgrade to .NET 8.0.0 or later (available through BT Updater via Supporting Software SUPI subscription).

BeyondTrust Appliance U-Series Software 4.3.3 release notes

December 6, 2024

Requirements

• .NET 8.0.0 or later (available through BT Updater via Supporting Software SUPI subscription)
• SUPI 3.2 (available through BT Updater)

New features and enhancements

• DLL upgrades:

  • Upgraded Microsoft.Data.SqlClient

    • Replaced System.Data.SqlClient 4.8.6 with Microsoft.Data.SqlClient 3.1.7
    • Upgraded Quartz from 3.3.2 to 3.13.1
    • Removed Removed redundant Microsoft.Windows.Compatibility
    • Removed Removed redundant Microsoft.PowerShell.*

  • Updated deps.json files to eliminate false positives generated by vulnerability scanners

  • Resolved Dependabot issues

  • Fixed vulnerable packages found by XRay

  • Updated NATs server version

  • Addressed System.Drawing.Common.dll v4.5.2 vulnerability

Issues resolved

• Resolved an issue HA setup failed if backup process failed to complete within the allowed time.

Notes:

• Security Management Appliance Installer is dependent on BeyondInsight 24.1.
• Security Management Appliance package in BT Updater is dependent on BeyondInsight 24.1.
• This update is available through BT Updater or as a manual installer from the download tool.

November 19, 2024

Requirements

• BeyondTrust ECM v1.6.0+

Issues resolved

• Resolved a minor issue that could cause duplicate copies of the same credential to be returned in specific scenarios.

Notes

• This maintenance release replaces any usage of v24.1.x.
• Supports upgrades from any prior release.

BT Updater 3.3.1 release notes

November 7, 2024

Requirements

• .NET 4.7.2 or later
• IIS to be enabled on host

Issues resolved

November 5, 2024

Requirements

• We recommend a restart after this update.

New features and enhancements

• There are no new features or enhancements.

Issues resolved

• Resolved an issue where, after applying the Windows Update KB5040435 for Windows 11, RDP sessions experienced display artifacts, making the session unusable. Sessions are now usable with no artifacts.
• Resolved an issue affecting web Applications using PS Automate when using the latest Chrome and Edge web browsers where applications didn't work as expected. They are now working as expected.

Notes

• Direct upgrades to 24.2.0.1870 are supported from all previous versions.
• This release bundles version 24.2.0.1501 of the BeyondTrust Discovery Agent. Corresponding release notes are available here: https://www.beyondtrust.com/docs/release-notes/beyondinsight-password-safe/index.htm
• .NET hosting bundle v8.0.8 is included.
• Session Monitoring Agent (pbsmd) has been updated to 24.2.45.
• Enhanced Session Monitoring Agent (pbpsmon) has been updated to 24.2.45.
• PS Automate has been updated to build 10925527552.
• BeyondTrust customers can download this release from their Password Safe Cloud portal by navigating to Configuration > Resource Zones and clicking Download Installer.
• The MD5 signature is: FFC61FF2E28B0B963CE227A9A54D9A50
• The SHA-1 signature is: 8E9ABB73DDF4FBE6E3CB7D55ABDFFFB31F65A41E
• The SHA-256 signature is: F9C388B0917229F551E4D4AEF3F1765CA8EAD48A688C54F92E1638C087986DFD

November 5, 2024

Requirements

• We recommend a restart after this update.

New features and enhancements

• There are no new features or enhancements.

Issues resolved

• Resolved an issue where, after applying the Windows Update KB5040435 for Windows 11, RDP sessions experienced display artifacts, making the session unusable. Sessions are now usable with no artifacts.
• Resolved an issue affecting web Applications using PS Automate when using the latest Chrome and Edge web browsers where applications didn't work as expected. They are now working as expected.

Notes

• Direct upgrades to 24.1.1.1846 are supported from all previous versions.
• This release bundles version 24.1.0.1426 of the BeyondTrust Discovery Scanner. Corresponding release notes are available here: https://www.beyondtrust.com/docs/release-notes/beyondinsight-password-safe/index.htm
• .NET hosting bundle v8.0.4 is included.
• Session Monitoring Agent (pbsmd) has been updated to 24.2.45.
• Enhanced Session Monitoring Agent (pbpsmon) has been updated to 24.2.45.
• PS Automate has been updated to build 10925527552.
• BeyondTrust customers can download this release from their Password Safe Cloud portal by navigating to Configuration > Resource Zones and clicking Download Installer.
• The MD5 signature is: 4A6CFDAEC81689392C0D57FB7F0B99EC
• The SHA-1 signature is: 482F6B35A7E3983CE071B40DCF4BD81A01AFD3C7
• The SHA-256 signature is: B6226D6BE18BED730029B7B60A319ED5F7329B5485299EE13D68277725843ADA

November 5, 2024

Requirements

• We recommend a restart after this update.

New features and enhancements:

• There are no new features or enhancements.

Issues resolved:

• Resolved an issue where, after applying the Windows update KB5040435 for Windows 11, RDP sessions experienced display artifacts, making the session unusable. Sessions are now usable with no artifacts.
• Resolved an issue affecting web applications using PS Automate when using the latest Chrome and Edge web browsers where applications didn't work as expected. They are now working as expected.

Notes:

• Direct upgrades to 24.1.0.1835 are supported from all previous versions.
• .NET Core hosting bundle 6.0.29 is included.
• .NET hosting bundle updated 7.0.18 is included.
• Session Monitoring Agent (pbsmd) has been updated to 24.2.45.
• Enhanced Session Monitoring Agent (pbpsmon) has been updated to 24.2.45.
• PS Automate has been updated to build 10925527552.
• BeyondTrust customers can download this release from their Password Safe Cloud portal by navigating to Configuration > Resource Zones and clicking Download Installer.
• This release bundles version 23.2.1.1376 of the BeyondTrust Discovery Scanner. Corresponding release notes are available here: https://www.beyondtrust.com/docs/release-notes/beyondinsight-password-safe/index.htm.
• The MD5 signature is: 9E56BA2BF38D7C1F167BFAC7621C2720
• The SHA-1 signature is: 0C02A523AA555D8005D4BB646E20E5E8E6B78A4F
• The SHA-256 signature is: F189FC49D091A19842917991BF2FB6C72B7A80D8E93BAEF7417D645A842BC83F