Security

Hello,

You are absolutely correct I didn't looks at the EoL pages.

The strange thing is that Aruba set EoS for 6.9 and 6.10 at the same time and 6.10 is less than 2 years old. And more

moving to 6.11 is a heavy work since the servers must reinstalled. Seems that Aruba want to push us to 6.11

Thanks

Christian

Hello,

You are absolutely correct I didn't looks at the EoL pages.

The strange thing is that Aruba set EoS for 6.9 and 6.10 at the same time and 6.10 is less than 2 years old. And more

moving to 6.11 is a heavy work since the servers must reinstalled. Seems that Aruba want to push us to 6.11

Thanks

Christian

What about the fix for the latest advisory "ARUBA-PSA-2023-001 :: Multiple Vulnerabilities in OpenSSL (Rev-1)"

Is there going to be a patch on top of 6.10.8 ??

Christian

I would recommend to keep an eye on the security bulletin. That is supposed to be updated as soon as fixed versions come out, and it can be either a hotfix or patch update (or even both). If for some reason you need to know exact timelines or delivery methods, you could check with Aruba Support.

What about the fix for the latest advisory "ARUBA-PSA-2023-001 :: Multiple Vulnerabilities in OpenSSL (Rev-1)"

Is there going to be a patch on top of 6.10.8 ??

Christian

Hello,

Found new hotfix on ASP "ClearPass 6.10.8 Hotfix 1 for Security issues" file CPPM-x86_64-20230106-security-hotfix-aruba-610-patch.signed.tar

Is that the one fixing "ARUBA-PSA-2023-001 :: Multiple Vulnerabilities in OpenSSL (Rev-1)" ?, the advisory not updated on this topic

Kind regards

Christian

I would recommend to keep an eye on the security bulletin. That is supposed to be updated as soon as fixed versions come out, and it can be either a hotfix or patch update (or even both). If for some reason you need to know exact timelines or delivery methods, you could check with Aruba Support.

What about the fix for the latest advisory "ARUBA-PSA-2023-001 :: Multiple Vulnerabilities in OpenSSL (Rev-1)"

Is there going to be a patch on top of 6.10.8 ??

Christian

Please hold on for a moment. I heard that there are some delays in the publishing process and documentation should be updated hopefully this or next week at which point things should be clear.

If you have specific questions and you can't wait, please work with Aruba TAC.

Hello,

Found new hotfix on ASP "ClearPass 6.10.8 Hotfix 1 for Security issues" file CPPM-x86_64-20230106-security-hotfix-aruba-610-patch.signed.tar

Is that the one fixing "ARUBA-PSA-2023-001 :: Multiple Vulnerabilities in OpenSSL (Rev-1)" ?, the advisory not updated on this topic

Kind regards

Christian

I would recommend to keep an eye on the security bulletin. That is supposed to be updated as soon as fixed versions come out, and it can be either a hotfix or patch update (or even both). If for some reason you need to know exact timelines or delivery methods, you could check with Aruba Support.

What about the fix for the latest advisory "ARUBA-PSA-2023-001 :: Multiple Vulnerabilities in OpenSSL (Rev-1)"

Is there going to be a patch on top of 6.10.8 ??

Christian