RSA Temporarily Suspending Downloads of RSA Authentication Manager 8.3 Patch 1 and the Associated Web-Tier Server Update
What is the risk and impact to customer that already deployed the patch
I have moved this thread to the RSA SecurID Access so that you can get an answer to your question.
You can post future questions and discussions directly to that community by clicking on the Ask a Question or Start a Discussion button on the RSA SecurID Access page.
And will doing a rollback to 18.104.22.168 be useful? The release note for 22.214.171.124 mentions that a rollback won't undo changes to OS, Java, etc.
Just ran this by Continuing Engineering, if P1 applied you should leave it, do not roll back.
If patch installed and system is working, the recommendation is you should leave the patch and not roll back. The 8.3 Patch 1 appears to only affect some (not all) Hardware models, but to be safe RSA pulled the patch for everyone, VM, Hyper-V, Amazon Web Services, both Intel and Dell hardware appliances all models, not just the specific models with the problem.
For those who have downloaded but not applied P1, the original advisory stands, do not apply P1 and wait for further details. But if you have already successfully applied, don't roll back based on everything we know right now
So this only really applies to Hardware Appliance?
Initial reports were some hardware models, and VMs worked, but we're still collecting all the data. What is clear so far is if patch applied, you should leave it applied, not roll-back
I’m rocking AM 8.3 P1 on VMware and Hyper-V. No problems so far
Yes we are running on VM's and didn't notice any issues yet
Just got email from RSA. Only hardware appliances affected
Retrieving data ...