* * * READ ME * * *
               * * * Veritas Operations Manager 9.0 * * *
                         * * * Patch 200 * * *
                         Patch Date: 2025-07-31

This document provides the following information:

   * PATCH NAME
   * OPERATING SYSTEMS SUPPORTED BY THE PATCH
   * PACKAGES AFFECTED BY THE PATCH
   * BASE PRODUCT VERSIONS FOR THE PATCH
   * SUMMARY OF INCIDENTS FIXED BY THE PATCH
   * DETAILS OF INCIDENTS FIXED BY THE PATCH
   * INSTALLATION PRE-REQUISITES
   * INSTALLING THE PATCH
   * REMOVING THE PATCH

PATCH NAME
----------
Veritas Operations Manager 9.0 Patch 200

OPERATING SYSTEMS SUPPORTED BY THE PATCH
----------------------------------------
AIX 7.1
AIX 7.2
RHEL8 x86-64
RHEL9 x86-64
SLES15 x86-64
Solaris 11 SPARC
Solaris 11 X86

Windows Server 2019
Windows Server 2022
Windows Server 2025

BASE PRODUCT VERSIONS FOR THE PATCH
-----------------------------------
   * Veritas Operations Manager 9.0.0.0

SUMMARY OF INCIDENTS FIXED BY THE PATCH
---------------------------------------
Patch ID: vom-HF0900200
* 4190629 (4190628) [Product Enhancement]- Two new faults for SecureFS to enhance monitoring.
* 4190632 (4190631) [Product Enhancement]- Anomaly Detection using InfoScale Operations Manager for Filesystems.
* 4190635 (4190634) Security Vulnerabilities fixes
Patch ID: vom-HF0900100
* 4189755 (4189754) Security Vulnerabilities fixes
* 4189779 (4189778) Internal PEN Test issue fixes

DETAILS OF INCIDENTS FIXED BY THE PATCH
---------------------------------------
This patch fixes the following incidents:

Patch ID: vom-HF0900200

* 4190629 (Tracking ID: 4190628)

SYMPTOM:
N/A

DESCRIPTION:
1. HOST_VXFSTASKD_DOWN - vxfstaskd Process Check: A fault will be generated if the vxfstaskd daemon is not running on the host.
    2. SECUREFS_CHECKPOINT_FAILURE - SecureFS Checkpoint Creation Failure - A fault will be triggered if fails to create a SecureFS checkpoint for a given filesystem.

For more details, check technote https://www.veritas.com/support/en_US/doc/170246701-170246704-1

RESOLUTION:
N/A

* 4190632 (Tracking ID: 4190631)

SYMPTOM:
N/A

DESCRIPTION:
On the IOM UI, users will see a new tab under 'Volumes' called 'Anomaly Watch'. This feature allows users to enable anomaly detection on mount points for operations such as Read, Write, Rename, and High Entropy. Once enabled, the anomaly detection system will take 30 days to train on the data. After the training period, graphs for these operations will be displayed. If any anomalous behavior is detected, a fault will be raised, indicating which operation is exhibiting unusual activity.

For more details, check technote https://www.veritas.com/support/en_US/doc/170246701-170246704-1

RESOLUTION:
N/A

* 4190635 (Tracking ID: 4190634)

SYMPTOM:
Third party component vulnerability reported.

DESCRIPTION:
Following third party component has been upgraded:

--------------------------------------------------------------------------------------------------------------------------------------------------
Component Name    Upgraded Version(9.0.0.200)               COMMENTS
--------------------------------------------------------------------------------------------------------------------------------------------------

tomcat          9.0.107                             APPLICABLE FOR Arctera InfoScale Operations Manager MANAGEMENT SERVER ONLY.
file Upload    1.6.0                               APPLICABLE FOR Arctera InfoScale Operations Manager MANAGEMENT SERVER ONLY.
--------------------------------------------------------------------------------------------------------------------------------------------------

RESOLUTION:
Fixed the affected endpoint.

Patch ID: vom-HF0900100

* 4189755 (Tracking ID: 4189754)

SYMPTOM:
Third party component vulnerability reported.

DESCRIPTION:
Following third party component has been upgraded:

--------------------------------------------------------------------------------------------------------------------------------------------------
Component Name    Upgraded Version(9.0.0.100)               COMMENTS
--------------------------------------------------------------------------------------------------------------------------------------------------

tomcat          9.0.104                                     APPLICABLE FOR Arctera InfoScale Operations Manager MANAGEMENT SERVER ONLY.

java            11.0.27.6.1                                APPLICABLE FOR Arctera InfoScale Operations Manager MANAGEMENT SERVER ONLY.

--------------------------------------------------------------------------------------------------------------------------------------------------

RESOLUTION:
Fixed the affected endpoint.

* 4189779 (Tracking ID: 4189778)

SYMPTOM:
Internal PEN test issues reported.

DESCRIPTION:
Following PEN test issues has been fixed:

1. Sev High - Command Injection Allows Remote Code Execution via SecureFS Feature (Applicable to Management Server and Managed Hosts/Agents)

2. Sev High - Class Injection via Unsafe Dynamic Class Loading (Applicable to Management Server only)

RESOLUTION:
Fixed the affected endpoint.

INSTALLING THE PATCH
--------------------
IMPORTANT NOTE : Please take a backup of the database using the instructions given in the Admin guide before installing this patch.
 
This Patch is applicable for InfoScale Operations Manage 9.0 Management Server and Managed Hosts both.
 
1. Download the file vom-9.0.0.200.sfa
2. Launch a browser and login to the InfoScale Operations Manage management server.
3. Navigate to Settings ->                   Deployment Icon.
4. Upload the patch to the InfoScale Operations Manage CMS using the Upload Solutions button.
The patch vom-9.0.0.200 should be visible in the Hot Fixes tree node.
5. Install this patch on Management Server using the following instructions:
- Go to Settings ->                    Deployment ->                    Hot Fixes ->                    Veritas Infoscale Operations Manager Managed Host.
- Click on Hot Fixes Tab. Click on Applicable Hosts Tab.
- Right click on Management Server Name and click on Install
6. After the patch is installed successfully on Management Server, you can follow the same steps to install patch on applicable Managed Hosts.

REMOVING THE PATCH
------------------
NONE

SPECIAL INSTRUCTIONS
--------------------
NONE

OTHERS
------
NONE