...
Having conducted an analysis of our usage of this compontentcomponent, we believe this DOES presents a possible risk within our dashboard software, which could be exploited and therefore we plan to resolve this by patching our September 23 dashboard release to remedy the threat. .
...
To help keep customers informed of our latest responses to the issue, we have created an events table to detail the key steps we have/are taking;
Date | Event | |
|---|---|---|
| We became aware of a critical vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-5217 and began to investigate. | |
| Assessment of possible impact completed, and confirmed this could impact on our dashboard software. | |
| Decision made to apply a patch to our September 23 dashboard release to provide greater resilience. | |
| Development in pprogress - release name TBCprogress | |
| Development has been completed. The change is currently proceeding has progressed through Unit and QA testing prior to release, expected by to be ready on if not a little sooner. | |
TBC | Patched release to be made available for customer release/download | A patched September (pi.2023_09.2) release is now available for customers to download. |
Recommendations
Once the patch release has been made available, we strongly recommend that you upgrade to that version to take advantage of the security enhancement provided. We always encourage partners to upgrade to the latest version of the dashboard, to benefit from the very latest security fixes and features from both our software and our third-party providers.
Release Availability
More information to followThe pi.2023_09.2 release is now available for customers to download from your usual outlets, depending on your deployment type.