topic Re: 10.2.1.0.159 and 10.3.1.0.24 additional security issues? in ZoneDirector

10.2.1.0.159 and 10.3.1.0.24 additional security issues?

mitchell_axtell — Thu, 27 Feb 2020 06:25:34 GMT

The release notes for these two versions state "Resolved two security issues related to UI vulnerabilities. For security incidents and responses, see www.ruckuswireless.com/security", but the security site doesn't seem to list anything newer than ID 20191224, which should have been resolved with 10.2.1.0.147/10.3.1.0.21.

Do these fix additional security issues or are the release notes referencing the issues that were actually resolved in the previous versions?

Support couldn't assist without a specific serial, which doesn't make sense for release-related inquiries.

Re: 10.2.1.0.159 and 10.3.1.0.24 additional security issues?

michael_brado — Thu, 27 Feb 2020 17:28:55 GMT

Hi Mitchell,
We've "pro-actively" posted ZD patch builds, ahead of the new Security Bulletin (ID-20200302) that will provide more detail on Mar 2. We will have a SmartZone AP patch to apply to latest SZ releases,and a Solo AP firmware across the models that need it, to complete our vulnerability protection. I was part of the team who did the ZD release notes, and you saw our vague description for now... We will update the info in them after Mar 2. Thanks and best regards.

Re: 10.2.1.0.159 and 10.3.1.0.24 additional security issues?

mitchell_axtell — Mon, 02 Mar 2020 03:19:02 GMT

Understood, thanks!