Automated scanners (like Nessus or Qualys) may flag specific build strings if they do not match the expected "patched" baseline for a known vulnerability. Deployment Logs:
Moving from the base 12154 build to the 12167 patch level rectifies several system-level behaviors monitored via Broadcom Support Knowledgebase Articles : symantec+endpoint+protection+1431215410000+p+patched