Today we're releasing patched versions of SupportPal containing multiple security fixes.
The issues were identified during our own internal security audit. At this time, we have found no evidence that these issues have been publicly disclosed or exploited.
We are withholding technical details of the vulnerabilities to reduce the risk against installations that have not yet been updated. We strongly recommend that all customers update their SupportPal installation as soon as possible.
In accordance with our End of Life (EOL) Policy, new versions are being released for the 5.7 and 6.0 series:
SupportPal 5.x: Upgrade to 5.7.6.
SupportPal 6.0: Upgrade to 6.0.4.
If you are running an older version, we recommend upgrading to at least version 5.7.6.
View our Upgrade Guide on the recommended ways to upgrade.
Version 6.0.4 also includes additional maintenance fixes.
When upgrading from versions 4.x or 5.x, the System Update tool in the operator panel incorrectly shows 6.0.4 as the target version. The tool will actually attempt to install 5.7.6 - the latest patch for the 5.x branch. This is expected, and once 5.7.6 is installed, the tool will then offer the optional upgrade to the latest version, 6.0.4.
The CLI System Update is unaffected by this display issue.
Add Comment