Skip to main content
Question

Jamf Pro 10.32.1 Release

  • September 14, 2021
  • 29 replies
  • 192 views

Show first post

29 replies

Forum|alt.badge.img+22
  • Employee
  • September 16, 2021

Is this related to the forcedentry vulnerability?


@inflicted, No, the hot fix above is to resolve the Jamf product issue PI-010111.  

The forcedentry vulnerability is related to Apple OS functionality.  More information on their recent updates can be found at Apple: https://support.apple.com/en-ca/HT212807 & https://support.apple.com/en-us/HT212804

It is recommended that people update to versions recommended by vendors to resolve the issues.  


Forum|alt.badge.img
  • New Contributor
  • September 29, 2021

It looks like this release, according to the release notes, patches 3 serious IndigoCard security vulnerabilities. Why is that not addressed up-front either in this post or why was no notice sent out about the vulnerabilities like the notice that was sent for the 10.30.1 release?


Forum|alt.badge.img+13
  • Valued Contributor
  • September 29, 2021

It looks like this release, according to the release notes, patches 3 serious IndigoCard security vulnerabilities. Why is that not addressed up-front either in this post or why was no notice sent out about the vulnerabilities like the notice that was sent for the 10.30.1 release?


As much as I don't like it (I agree with you @Claude7004 that it should be addressed up front), I can at least explain their logic.

When they discover a severe vulnerability, they put out a patch and hide the details hoping they can get the community (i.e. not JamfCloud) upgraded to a point where, when the details are released, the possibility of compromise is reduced or not existent.

Again, it sucks b/c you don't know the details of what this affects, especially if you have to run the update through a change management process.


Forum|alt.badge.img+10
  • Author
  • Employee
  • September 29, 2021

It looks like this release, according to the release notes, patches 3 serious IndigoCard security vulnerabilities. Why is that not addressed up-front either in this post or why was no notice sent out about the vulnerabilities like the notice that was sent for the 10.30.1 release?


@Claude7004 There was one vulnerability that was addressed in this 10.32.1 release and three addressed in the 10.32 release to which we posted updates here in Jamf Nation and also sent communication via email. If you did not receive an email communication, please contact customers success at success@jamf.com