Wireless Access

AOS 6.3.1.11 was withdrawn and TAC said that this was due to a 'serious issue', and should upgrade to 6.3.1.12.

I see now 6.3.1.12 is available, but there is no mention in the release notes of what this issue was.

I upgraded a customer to .11 last weekend and it all went pretty smoothly.  I've not heard anything from them so assume all is good, but I am obvioulsy concerned.

Anyone from Aruba can shed some light on what the issue was?

An Advisory will be posted soon detailing the issue,.............stay tuned.

Is this by any chance the same bug that 6.4.2.1 was withdrawn over?

can you guys comment what was the bug about?

Im on the same boat as Michael clark, i did upgrade to a custumer to that version last week, and everything went smooth... i have not heard of anything bad but im concerned about this.

Cheers

Carlos 

It's best left to Aruba to control what information is released, to who, and when on this one.  I know that's tough because it makes it hard to assess whether the customer will want the fix ASAP or not even care, and that will depend on details of their setup; more information might be available by talking to your internal contacts, and it certainly cannot hurt to send them a note to let them know which of your customers are running the affected versions.

I received the advisory email now.

can you share the information? Michael...

Im still waiting for the advisory to be post...

Cheers

Carlos

It was posted on Airheads earlier today.

http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/Security-vulnerability-advisories/m-p/207387#M15723

Okay forget what i said

Its on the webpage!

http://www.arubanetworks.com/support/alerts/aid-10072014.txt

Here is it for anyone that wants to read it

Cheers

Carlos

Nice catch, Brian!  You should definitely tell Joe you deserve a raise ;-)

Thanks, I'm just glad to have caught it before it was out there on more controllers, and before a bad actor did.