Security Issue SU25 upgrade.

SU25 upgrade from EHP 4.0 to EHP 6.0 ECC 6,after su25 steps some authorization values of some roles are maintained but it is still in yellow(Not Maintained status) what is the reason?

Hi Sreenivas,
We just completed our security upgrade from 4.6C to ECC6.0. For your information , I never faced this problem. After 2A and 2B step , I just found the addition of new authorization objects , the SAP default values are same as in old 4.6 C system.
In Su25 2C step :-
If you go to one by one role , there are some authorization objects that are got affected during upgrade. We can categorize these authorization objects as below:-
1.     Standard New u2013 These are new authorization objects that are introduced in new system for corresponding tcode.
2.     Manually new - It shows the authorization objects which were manually added in old system. Some of the values got updated for this also.
3.     Standard Updated - Updated means, in old system if you have kept the standard values as it is, SAP has updated these standard values( u can check this one in SU24 check indicators).
4.     Maintained New- Some of the organizational values introduced as field in authorization object.
I haven't faced any check indicator changes in new system.
Regards,
Sneha

Similar Messages

Security issues in upgrade

Can any body tell me what will be the security issues may commonly come after a upgrade
Thanks in advancd

I am sorry. wron place to post. I am moving this thread to security.

Security issues after upgrade

Can any body please tell me what could be the security related issues may come after an upgrade to ECC 6.0.
Thanks in advance.

Hi, it's not an exhaustive list but some common things are:
New authorisation objects
New transactions
Different authorisation checks in existing transactions
Changes to the check indicators
You may also find slight changes to behaviour of existing authorisation objects, you can also have problems when connecting to non-SAP systems if passwords are mixed case
If you test your main processes and perform the upgrade steps then you usually will catch the problems.

HT5642 I need to update iOS 6.1.3 on my iPad2 to 6.1.6, due to security issue. Why is no update available? I do NOT want to install iOS 7, due to memory limitations.

I need to update iOS 6.1.3 on my iPad2 to 6.1.6, due to security issue. Why is no update available? I do NOT want to install iOS 7, due to memory limitations.

Any upgrade will be to the most recent, compatible version, in this case 7.0.6.

Security issue in DNS ! Update bind.

Apparently there is a massive security issue in DNS protocol : http://securosis.com/2008/07/08/dan-kam … -released/
or http://www.kb.cert.org/vuls/id/800113
I am surprised I haven't seen any post on the forum about it. For now a solution could be to update bind to 9.5.0-P1 (I don't know if the one in testing is this particular one, there is no "P1").
Every DNS server has to be upgraded since the issue is in the protocol, not in the code !

A lot of systems got updated yesterday/today. I just checked a Windows Server 2003 x64 RC2 at work; yesterday it was vulnerable, but today it's reported safe after the recent security updates (this site offers some kind of check: http://www.doxpara.com/)
I believe all the "big" ones in Linux did release an update yesterday, so there's probably plentiful of patches around... which is beyond the limits of my brain cells at the moment.

Security issues in Mavericks 9.04

I just had a secure scan done on my Mavericks server. The main issues seem to be:
OpenSSL Running Version Prior to 0.9.8za Upgrade to OpenSSL version 0.9.8za or newer.
Apache mod_negotiation Multi-Line Filename Upload Vulnerabilities (Upgrade to Apache version 2.3.2 or newer.)
Given that upgrading these would mean compiling and installing Apache and OpenSSL(which I'm not really keen to do) I'm wondering what experienced admins think of these threats.

pkmusic wrote:
Dumb question - so a self-signed SSL cert doesn't use Open SSL?
Certificates are used with ssh and SSL/TLS and such, yes. Most of OS X uses Secure Transport for its certificate- and SSL/TLS-related processing, but Apache does not. Apache is linked against OpenSSL.
Self-signed certificates lead to a different security issue.
An HTTPS site with a self-signed certificate will be considered untrusted by accessing web clients and the web browser will usually issue diagnostics before allowing access to the site or a diagnostic before marking the certificate as trusted, or that you've set up your own certificate chain and installed your own root certificate. That you're asking this question implies the former; that you're not really running HTTPS with a trusted certificate chain. Which generally means you can just shut off SSL/TLS.
As for the original question, here's how the scanner is likely detecting the down-revision versions — if you look at the server details being returned to the client, you'll see some information on Apache and OpenSSL versions embedded in the response:
$ telnet foo.example.com 80
Trying 10.1.3.1...
Connected to foo.example.com
Escape character is '^]'.
HEAD / HTTP/1.0
HTTP/1.1 301 Moved Permanently
Date: Sun, 20 Jul 2014 14:40:11 GMT
Server: Apache/2.2.26 (Unix) PHP/5.4.24 mod_ssl/2.2.26 OpenSSL/0.9.8y DAV/2
Location: http://foo.example.com/
Cache-Control: max-age=1209600
Expires: Sun, 03 Aug 2014 14:40:11 GMT
Connection: close
Content-Type: text/html; charset=iso-8859-1
Connection closed by foreign host.
$
That won't get fixed without replacing Apache et al or one of the other options, as described in my earlier reply.
For completeness, some folks will manually configure the server to not return these details. That'll derail the the vulnerability scanner, certainly. It might not have the intended result, too, as the remote attackers can simply decide to throw every attack they have at your server — the attackers are not short on CPU cycles and network bandwidth, after all; unintended consequences.
As for using a self-signed cert and given you probably aren't providing file-level access to other folks, I'd not (personally) be particularly concerned about that vulnerability scan — one of the limitations with using vulnerability scanners is that you then have to go off and figure out if you're actually vulnerable to whatever the scanner is reporting. It's an issue certainly, but then you'll have to decide if your backups are complete and current and with copies kept off-site, and if your other security practices and password policies and such are also all up to date and secure, and at what else you might risk if the server is breached — if configuring a DMZ for your server might be appropriate, for instance, to isolate the server from the rest of your network should the server be breached.

Are there any security issues with Quicktime player on macbook

Are there any security issues with Quick Time Player on macbook pro? 2010 model running Yosemite recently upgraded. Thanks!

No.

Safari Sham Security and Software Upgrade Notice

Last night I clicked on a doodle poll to enter my name and I got a notice in Safari saying:
Safari - Alert
Major Security Issue
To fix it please call Support for Apple
+1 800-680-4131 (Toll Free) immediately!
I did not call the number but called Apple Support. After waiting 45 minutes for an agent, he walked me through a number of steps to block those kinds of messages and to increase the security on my laptop. He agreed it was a sham notice and that it was phishing.
We appeared to have resolved the problem, but after shutting down and restarting my computer, later that evening another message popped up in Safari, this time telling me that some software program was in urgent need of updating. I closed Safari and went to Firefox for the rest of the evening.
Has anyone else experienced this new problem in Safari?
I recently upgraded to Yosemite and have had other problems with Mac Mail, which I think I have resolved, but this Safari thing has me spooked.

Force Quit .
Press command + option + esc keys together at the same time. Wait.
When Force Quit window appears, select Safari if not already.
Press Force Quit button at the bottom of the window. Wait.
Safari will quit.
Relaunch Safari holding the shift key down.
Turn off Wifi. Click Wifi icon in the menu bar and select “Turn Wifi off”.
Visit another website.
You won’t have internet connection.
Turn on Wifi. Click Wifi icon in the menu bar and select “Turn Wifi on”.
Select your Network.

OPM Security Issue

I am working with a client that has uninstalled OPM 10.2 and upgraded to 10.3. We have upgraded using administrative privileges but the users do not have admin rights to their machines. We are working with Windows 7. The users are intermittently getting the following message below when they attempt to open a word or excel document. This issue is resolved by restarting OPM but its annoying. Any ideas would be helpful.
Error Message
"Oracle Policy Modeling has detected security issues that prevents Microsoft Word and Microsoft Excel add-ins from functioning correctly. Please start Oracle Policy Modeling with administratvie privileges to allow this problem to be automatically resolved."

PS: If you have network policies that control when Windows updates occur, you could also in theory script an execution of OPM from the command-line with administrative privileges immediately after those updates, to make sure that the rule modeler never sees this message. I haven't tried this, but it should work.

Is there a patch for the NTP security issue that does not require Xcode?

Is there a patch for the NTP security issue that does not require Xcode? I have an older Intel mini that can't be upgraded beyond 10.6.8 and I currently don't have room for Xcode 3.2.5. Has somebody trustworthy posted these binaries?

NTP fix for Snow Leopard: https://drive.google.com/folderview?id=0BxQCbeIgpA2uVjFiN1h4bGZNQ2c&usp=sharing
You can also go to System Preferences/Date & Time and deselect Set time Automatically.
Snow Leopard users: Turn off automatic date and time in System Preferences immediately

Unexpected change to Time Capsule address--security issue?

I received a message that my Time Capsule address had recently changed and that possibly someone might be trying to use my Time Capsule other than me. I checked the configuration of the Time Capsule and it was still assigned to my Airport router. Since I had not changed the TC address, could someone have hacked into my WiFi even though it is secured with a password?
When I clicked the box opting to backup to the TC, I found that all my previous backups were gone. Now, when I access TC, the message indicates that I am accessing a "server" which I don't remember seeing previously.
I am a computer novice and am afraid that I may have a security issue.

Did you recently do an upgrade to the OS in the computer or even firmware...? The later might have popped up a message you hardly noticed.
These changes can affect things.
If you are using WPA2 Personal security for wireless with a decent password you are very unlikely to have issues. Put that one at least to rest. And the access via the rest of the network, well that just depends on setup but it is generally extremely difficult.
To lose your backups is rather odd. Please go to the airport utility and check how much space is used on the TC hard disk.. if it is about what your backup were then they are not lost.. but merely changed name.. or the computer changed name. Mount the TC disk and check exactly what is there and see if you can reconnect to the backups.
B5 and B6 here might be a help. http://pondini.org/TM/Troubleshooting.html
You can also do a reset of TM .. A4 and see if you can reconnect to the TC and that should help you get the connection back to your backups.

Can not view slidshows or creat a book on Snapfish. SF IT folks say it's a security issue on my end. Any ideas?

Can not view slidshows or creat a book on Snapfish. SF IT folks say it's a security issue on my end. Any ideas?

You will need to contact Snapfish to find out their system requirements and which plugin you need
- http://support.snapfish.com/app/answers/detail/a_id/669/brand/3

I updated some security issues and suddenlly my gmail does not open. it shows 75% of the procees and does not go on

I updated automatically some security issues in my computer (I don't remember which) and now my gmail will start opening until it reaches 75% and it will not go on opening.
I can open it Internet explorer but not in Mozila fireworks

Clear the cache and the cookies from sites that cause problems.
"Clear the Cache":
*Tools > Options > Advanced > Network > Cached Web Content: "Clear Now"
"Remove Cookies" from sites causing problems:
*Tools > Options > Privacy > Cookies: "Show Cookies"
Start Firefox in <u>[[Safe Mode|Safe Mode]]</u> to check if one of the extensions or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance/Themes).
*Don't make any changes on the Safe mode start window.
*https://support.mozilla.org/kb/Safe+Mode
*https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes

Performance issues since upgrade

I am on a late 2011 MacBook Pro and am having severs performance issues since upgrading to Mavericks. I fear my issues may be related to company installed anti-virus (which I cannot remove), but I was hoping someone could look over my EtreCheck for other potential solutions.
One really odd issue I am having, which I cannot seem to find good information for on Google, is at least 4-5 times a day my Mac just stops. No beach ball, no anything, for about 1-5 minutes. Then it's fine. Maybe just me grasping at straws, but it seems related to a when webpage loads a bunch of images? I always use Safari btw, but testing other browsers, like Chrome & Firefox, it happens as well.
I have also removed TotalFinder and have noticed no improvement and still have the above issue.
Thanks in advance!
Here is my EtreCheck:
Problem description:
slow performance on Mavericks
EtreCheck version: 2.0.11 (98)
Report generated November 11, 2014 at 8:51:26 AM EST
Hardware Information: ℹ️
MacBook Pro (17-inch, Late 2011) (Verified)
MacBook Pro - model: MacBookPro8,3
1 2.5 GHz Intel Core i7 CPU: 4-core
8 GB RAM Upgradeable
BANK 0/DIMM0
4 GB DDR3 1333 MHz ok
BANK 1/DIMM0
4 GB DDR3 1333 MHz ok
Bluetooth: Old - Handoff/Airdrop2 not supported
Wireless: en1: 802.11 a/b/g/n
Video Information: ℹ️
Intel HD Graphics 3000 - VRAM: 512 MB
AMD Radeon HD 6770M - VRAM: 1024 MB
Color LCD 1920 x 1200
LED Cinema Display 1920 x 1200
System Software: ℹ️
OS X 10.9.5 (13F34) - Uptime: 0:46:22
Disk Information: ℹ️
APPLE HDD HTS727575A9E362 disk0 : (750.16 GB)
S.M.A.R.T. Status: Verified
EFI (disk0s1) <not mounted> : 210 MB
Macintosh HD (disk0s2) / [Startup]: 749.30 GB (256.69 GB free)
Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB
MATSHITADVD-R   UJ-8A8
USB Information: ℹ️
Apple Inc. FaceTime HD Camera (Built-in)
Fitbit Inc. Fitbit Base Station
Apple Inc. BRCM2070 Hub
Apple Inc. Bluetooth USB Host Controller
Apple Inc. Apple Internal Keyboard / Trackpad
Apple, Inc. Keyboard Hub
Apple, Inc Apple Keyboard
Tablet PTZ-630
Logitech Logitech USB Headset
Apple Inc. Display iSight
Apple Inc. Apple LED Cinema Display
Apple Inc. Display Audio
Apple Computer, Inc. IR Receiver
Firewire Information: ℹ️
Iomega HDD unknown_device 800mbit - 800mbit max
S.M.A.R.T. Status: Verified
disk1s1 (disk1s1) <not mounted> : 32 KB
Iomega HDD (disk1s3) /Volumes/Iomega HDD : 500.04 GB (22.88 GB free)
Files (disk1s5) /Volumes/Files : 499.90 GB (416.87 GB free)
Thunderbolt Information: ℹ️
Apple Inc. thunderbolt_bus
Gatekeeper: ℹ️
Anywhere
Kernel Extensions: ℹ️
/Library/Application Support/Symantec/Protector
[not loaded] com.symantec.kext.protector.panther (1.0f5) Support
[not loaded] com.symantec.kext.protector.tigerplus (1.0f5) Support
/Library/StartupItems/SymAutoProtect
[loaded] com.Symantec.kext.SAVAPComm (11.0.6) Support
/System/Library/Extensions
[loaded] com.Cycling74.driver.Soundflower (1.5.1) Support
[loaded] com.InnovationTechnology.driver.ComputerAudio (1.01 - SDK 10.7) Support
[not loaded] com.cisco.nke.ipsec (2.0.1) Support
[not loaded] com.wacom.kext.wacomtablet (6.3.7 - SDK 10.8) Support
Startup Items: ℹ️
CiscoVPN: Path: /System/Library/StartupItems/CiscoVPN
NortonMissedTasks: Path: /Library/StartupItems/NortonMissedTasks
SMC: Path: /Library/StartupItems/SMC
SymAutoProtect: Path: /Library/StartupItems/SymAutoProtect
SymProtector: Path: /Library/StartupItems/SymProtector
Startup items are obsolete and will not work in future versions of OS X
Launch Agents: ℹ️
[not loaded] com.adobe.AAM.Updater-1.0.plist Support
[loaded] com.adobe.CS5ServiceManager.plist Support
[loaded] com.google.keystone.agent.plist Support
[running] com.jamfsoftware.jamf.agent.plist Support
[loaded] com.oracle.java.Java-Updater.plist Support
[running] com.symantec.quickmenu.application.plist Support
[running] com.wacom.wacomtablet.plist Support
[running] net.juniper.pulsetray.plist Support
Launch Daemons: ℹ️
[loaded] com.adobe.fpsaud.plist Support
[running] com.fitbit.fitbitd.plist Support
[running] com.fitbit.galileod.plist Support
[loaded] com.google.keystone.daemon.plist Support
[running] com.jamfsoftware.jamf.daemon.plist Support
[not loaded] com.jamfsoftware.startupItem.plist Support
[loaded] com.jamfsoftware.task.1.plist Support
[loaded] com.microsoft.office.licensing.helper.plist Support
[loaded] com.oracle.java.Helper-Tool.plist Support
[loaded] com.oracle.java.JavaUpdateHelper.plist Support
[loaded] com.rogueamoeba.instanton-agent.plist Support
[running] net.juniper.AccessService.plist Support
[loaded] net.juniper.UninstallPulse.plist Support
User Launch Agents: ℹ️
[loaded] com.valvesoftware.steamclean.plist Support
[running] ws.agile.1PasswordAgent.plist Support
User Login Items: ℹ️
gfxCardStatus Application (/Users/[redacted]/Downloads/gfxCardStatus.app)
Dropbox Application (/Applications/Dropbox.app)
Microsoft Database Daemon Application (/Applications/Microsoft Office 2011/Office/Microsoft Database Daemon.app)
cdn Volume (/Volumes/cdn)
TotalFinder Application (/Applications/TotalFinder.app)
SAVDiskMountNotify Application (/Library/Application Support/Symantec/AntiVirus/SAVDiskMountNotify.app)
ScanNotification Application (/Library/Application Support/Symantec/AntiVirus/ScanNotification.app)
SymSecondaryLaunch Application (/Library/Application Support/Norton Solutions Support/Scheduler/SymSecondaryLaunch.app)
Internet Plug-ins: ℹ️
OfficeLiveBrowserPlugin: Version: 12.3.6 Support
Flash Player: Version: 15.0.0.189 - SDK 10.6 Mismatch! Adobe recommends 15.0.0.223
AdobePDFViewer: Version: 10.0.2 Support
Unity Web Player: Version: UnityPlayer version 4.5.4f1 - SDK 10.6 Support
googletalkbrowserplugin: Version: 5.38.6.0 - SDK 10.8 Support
AdobeExManDetect: Version: AdobeExManDetect 1.1.0.0 - SDK 10.7 Support
iPhotoPhotocast: Version: 7.0
DirectorShockwave: Version: 11.5.9r620 Support
QuickTime Plugin: Version: 7.7.3
FlashPlayer-10.6: Version: 15.0.0.189 - SDK 10.6 Support
Silverlight: Version: 4.0.60310.0 Support
MeetingJoinPlugin: Version: (null) - SDK 10.6 Support
net.juniper.DSSafariExtensions: Version: (null) Support
Default Browser: Version: 537 - SDK 10.9
Flip4Mac WMV Plugin: Version: 2.3.1.2 Support
o1dbrowserplugin: Version: 5.38.6.0 - SDK 10.8 Support
WacomTabletPlugin: Version: WacomTabletPlugin 2.1.0.2 Support
SharePointBrowserPlugin: Version: 14.4.5 - SDK 10.6 Support
JavaAppletPlugin: Version: Java 7 Update 71 Check version
WacomNetscape: Version: 2.1.0-1 - SDK 10.8 Support
User Internet Plug-ins: ℹ️
SOEWebInstaller: Version: 1.0 - SDK 10.5 Support
Aspera Web 3.1.2.72265: Version: (null) - SDK 10.6 Support
Safari Extensions: ℹ️
1Password
Adblock Plus
Reddit Enhancement Suite
3rd Party Preference Panes: ℹ️
Flash Player Support
Flip4Mac WMV Support
Java Support
MacFUSE Support
SymAutoProtect
Symantec\nQuickMenu Support
WacomTablet Support
Time Machine: ℹ️
Skip System Files: NO
Mobile backups: ON
Auto backup: YES
Destinations:
Iomega HDD [Local]
Total size: 500.04 GB
Total number of backups: 37
Oldest backup: 2014-10-14 14:11:11 +0000
Last backup: 2014-11-11 13:27:48 +0000
Size of backup disk: Excellent
Backup size 500.04 GB > (Disk size 0 B X 3)
Top Processes by CPU: ℹ️
      36% com.apple.WebKit.Plugin.64
      34% SymAutoProtect
      13% WindowServer
      9% Unity
      4% Activity Monitor
Top Processes by Memory: ℹ️
455 MB Safari
361 MB com.apple.WebKit.Plugin.64
292 MB Unity
77 MB com.apple.WebKit.Networking
77 MB com.apple.WebKit.WebContent
Virtual Memory Information: ℹ️
2.08 GB Free RAM
2.39 GB Active RAM
1.34 GB Inactive RAM
1.40 GB Wired RAM
1.11 GB Page-ins
5.54 GB Page-outs

Activity Monitor - Mavericks also Yosemite
Activity Monitor in Mavericks has significant changes
Performance Guide
Why is my computer slow
Why your Mac runs slower than it should
Slow Mac After Mavericks
Things you can do to resolve slowdowns see post by Kappy

Other web browsers and security issues?

Since even an Apple KB article recognizes the need for an additional browser and because of Safari's limitations and problems, I'm going to try switching to another browser (most likely OmniWeb and am looking at Firefox, Shira and Opera also though perhaps not as a primary browser) but I'm wondering about their ability to keep on top of any security issues for Mac? (and how do you keep up with security updates?)
Though perhaps unfounded, at least with Safari, I feel that Apple has a vested interest in keeping on top of security issues (for Safari and Java) and I can readily find out about security updates via software updater.

Most of the other Mac browsers have their adherents. They are all good browsers (I have 7 browsers installed to test various web sites and for change-of-pace usage). They all have their strengths and they all have their weaknesses. Only iCab and OmniWeb are still shareware, the rest are now or always have been free (Opera just recently stopped charging for its browser).
I have settled on Firefox as my alternate browser and I use it maybe just a tad more than Safari, but I do switch back and forth between them. The Mozilla foundation is good at getting security updates out when needed. Firefox has a button on the toolbar to check for updates. One nice thing about Firefox is that you can install free extensions which enhance the features available. I have one to supplement tab features, one to control iTunes from Firefox's status bar, one to help me format messages in discussion forums, and one to block ads.
I prefer OmniWeb for doing intensive research because of the way it handles tabs in its sidebar, showing me which ones I've looked at and which ones I haven't, and giving me great flexibility in rearranging tabs, which are viewable as thumbnails or text names (I have had up to a hundred or so tabs open in OmniWeb.
Shiira is good and its fast. I have not checked for updates for a while, but the last time I updated there was still a problem with Shiira kicking you out of logged-in sites when you moved from page to page with in web site. This may have been fixed by now - they were aware of the problem back then.
Camino is a native OS X cousin of Firefox and is also fast, but is not updated as often.
I would stay away from Mozilla or Netscape unless you need all the additional modules they have and which take up hard disk space. Firefox and Camino represent the browser module of Mozilla/Netscape. Mozilla and Netscape have modules for email, irc chat, newsgroups, and for creating and editing web pages. Netscape is a branded and slightly customized version of Mozilla and is not updated as often.
Opera is a nice browser and some use it as their main browser, but I have not seen anything that really stands out for me, but that does not mean it is not worth a look.
I would stay away from abandonware Internet Explorer.
As for checking for updates, several of them, as with many Mac programs, now have a menu item that allows you to check for updates. Most of them also announce their updates on both VersionTracker and MacUpdate.
Happy Exploring.

Security Issue SU25 upgrade.

Similar Messages

Maybe you are looking for