Does 8.4 patch 1 have all the fixes of 8.3 p6?

[EdwardClear]

When released, 8.4.0.0 stated it had all the fixes of 8.3 Patch 1 and 2, i.e. it was way behind.    Did 8.4. Patch 1 catch up to the 8.3 train fixes, especially with respect to security fixes?    

This really ought to be called out explicitly in the release notes.

[EdwardClear]

Naturally, 30 seconds after posting this, while closing release note windows, I see that it was explicitly stated, just not in the sections I read.    Never mind.

[EdwardClear]

Sigh, apparently I have a caffeine deficiency this morning.  That section says "RSA Authentication Manager 8.4 Patch 1 includes all of the new features and enhancements introduced in version 8.3 patches", which would not be a statement about defects.

[EdwardDavis]

See here, first two state what Authentication Manager 8.4 patch 1 (8.4.0.1.0) has for Security Advisories/Fixes.

RSA SecurID Access Security Advisories 

DSA-2019-037: RSA® Authentication Manager Security Update for Multiple Embedded Component Vulnerabilities 

DSA-2019-038: RSA® Authentication Manager Insecure Credential Management Vulnerability 

[EdwardClear]

Thanks, I already read those.  Those seem to be a list of new vulnerabilities found and fixed in 8.4p1. 

Looking for a summary statement, similar to the one for features and enhancements, that 8.4p1 also has ALL the relevant security and bug fixes of 8.3p6.  Or even a statement that it's not quite caught up yet to at least remove the doubt.

If 8.4p1 doesn't contain all the security fixes of 8.3p6, you've put your customers in a dilemma.  It appears the fixes in the two advisories are only fixed in 8.4p1 but are an issue with all older versions.  So there would be no version with all the security fixes.

[GeorgeSpagnoli · Accepted solution]

We're updating the Readme file to include the highlighted statement:

Defects Fixed in This Patch

RSA Authentication Manager 8.4 Patch 1 includes all of the fixes in version 8.3 Patch 6. Patch 1 contains fixes for the following issues:

We're posting that now... Thank you for your feedback!

[EdwardClear]

Thanks!   Exactly what I was looking for.