We will provide more information about the 9.97.1488392992 hotfix release to all Jamf customers today via email. If you have not received an email from Jamf by 12:00 a.m. CST March 7, please reach out to your Jamf Buddy. For those receiving the email, we request that you keep the details of this hotfix release confidential to minimize risk for other customers.

The security of your environment is our top priority, which is why we have been intentional with the timing and level of detail in our communications. That said, we very much appreciate your direct and candid feedback and we’ll continue to improve.

@jake understood, and absolutely NDA. Thank you so much!

Thank you @jake and Jamf.

Look forward to hearing more on this as are org is now unable to implement this "important security fix" as the Windows installer is no longer available.

Pat

While were at it, how bout a security bug bounty?

https://www.jamf.com/jamf-nation/feature-requests/5846/security-bug-bounty

@jake got the email thanks.

Everyone else - the email has enough information to kick start whatever process you have to go through to get change management approvals.

@PatrickD -There is some additional information in the email about the windows installer and we are working hard to get an updated one posted. In the meantime, we posted a KB to walk through a manual update of the JSS located here:

https://www.jamf.com/jamf-nation/articles/462/manually-upgrading-the-jss-on-windows

@tlarkin - Thank you for the update. Good to hear!

Looks like the email went out to most customers. If you didn't get yours, reach out to your Jamf buddy. And please don't post any contents here or elsewhere until Jamf does.

Thank you @jake, we have received the email and were able to make an appropriate decision.

Pat

Hi @jake
If we upgrade our windows environment using the manual method to get this hotfix completed, When we go to upgrade to a later version of JAMF, will the normal process ( windows installer) work fine?

We just did the manual upgrade process and it didn't upgrade our version.

Copied the new root.war file and then start the apache service and then we waiting for 10 minutes and nothing had changed.
went through the rest of the process but still no change.

will revert snapshot and wait i guess.

anyone have any idea how i can tell if the root.war file unpacked properly?

Regards
Pete

@peter.caldwell did you also move the ROOT folder out of the way as well? It won't unpack the root.war file I believe unless you also move the previous unpacked directory out of the way.

@chriscollins I had copied and renamed the webapps folder before copying the new stuff across. you think i should have moved just the root.raw and root folder to desktop or something?

That's what I tend to do.

A new Windows installer is now available for hotfix 9.97.1488392992. The Windows installer can be found in Jamf Nation under My Assets.

If you followed the manual process to upgrade to hotfix 9.97.1488392992, then no additional action is necessary. If you had previously tried to upgrade using the original Windows installer for hotfix 9.97.1488392992, please contact your Jamf support team for assistance.