The latest DataMiner upgrades include multiple critical security fixes that address newly identified vulnerabilities. These fixes come on top of those released with our previous critical security upgrade, so even if you upgraded recently, you will need to upgrade again to stay protected.
To keep your DataMiner System secure, we strongly recommend upgrading to one of the following releases:
- DataMiner 10.6.12
- DataMiner 10.6.0 CU9
- DataMiner 10.5.0 CU21
In addition, and in line with the DataMiner software support lifecycle policy, we have released an out-of-band DataMiner 10.4.0 CU23 upgrade for customers who remain on the 10.4 Main Release track. Although the 10.4 track
While the 10.4 track no longer receives regular updates, it is still within its support period. This special release contains the same security fixes, allowing customers on DataMiner 10.4 to address these vulnerabilities without upgrading to a newer Main Release track.
Even if you already upgraded following our previous security upgrade announcement, you will need to upgrade again to benefit from these latest security fixes. The versions recommended at that time (DataMiner 10.6.9 CU1, 10.6.0 CU7, 10.5.0 CU19, and 10.4.0 CU22) do not include them.
The newly addressed vulnerabilities were identified by our own security team as part of our ongoing efforts to proactively detect and resolve security issues in DataMiner. You can find the corresponding fixes under Security enhancements (IDs 46848, 46850, and 47075) in the release notes for DataMiner 10.6.12, 10.6.0 CU9, 10.5.0 CU21, and 10.4.0 CU23.
All relevant upgrades are available on the DataMiner Downloads page. We also recommend following the DataMiner hardening guide to further reduce the attack surface of your system.
If you have questions or would like more information about the impact of this update, please contact us at team.security@skyline.be.