Security patches for SS&C Blue Prism now available

[Kev_B]

We are pleased to announce the release of security patches to address recently identified vulnerabilities. More information on these vulnerabilities and mitigations is available here.

Patches are now available for the following SS&C Blue Prism versions:

• 6.4
• 6.5
• 6.6
• 6.8
• 6.9

Patches for 6.7, 6.10, and 7.0 are expected to be made available within the next week. For further updates on patch availability, please see our continuously updated knowledge-based article here. We recommend that all customers and partners refer to the release notes for each release when determining which version to adopt.

All vulnerabilities are also resolved in our latest release, version 7.1, which can be downloaded here.

------------------------------
Kevin Barnes
Community Manager
Blue Prism
------------------------------

[Sheela]

@Kevin Barnes

Thank you the notification.
Could you please let me know where can I find the security patch for V6.10.2.

Regards,
Sheela​

------------------------------
Sheela Parthasarathy
Assistant Vice President
Deutsche Bank Group
Pacific/Apia
------------------------------

[SteveBoggs]

Hi Sheela,

The security patch for v6.10.x is v6.10.5. Please see the Knowledge Base link about this announcement for further information on this.

v6.10.5 is available on our Portal page here: https://portal.blueprism.com/products/enterprise

------------------------------
Steve Boggs
Senior Product Support Engineer
Blue Prism
Austin, TX
------------------------------

[Sheela]

@SteveBoggs

Thank you for your response.
We are not planning for upgrade  as we recently upgraded to V6.10.2.
Could you please let us know if there is any patch provided for this release.

Regards,
Sheela

------------------------------
Sheela Parthasarathy
Assistant Vice President
Deutsche Bank Group
Pacific/Apia
------------------------------

[SteveBoggs]

Hi Sheela,

The release for v6.10.x that contains the security patch is v6.10.5. Anytime a code change is implemented (such as this security patch), the version number for that major/minor version (e.g. v6.10.x) is incremented -- in this case, to "v6.10.5". As such, there is not a possibility of a v6.10.2 version that also contains this security patch. If you haven't already, please review the "What do I need to do about this?" and "What is Blue Prism doing to address the vulnerability?" sections of the KB article as that's the primary remediation path.

If you'd like further assurance that your BP environments are fully secure, please follow up with your Blue Prism Account Team and they'll be able to engage our Professional Services team for an environment/infrastructure review.

------------------------------
Steve Boggs
Senior Product Support Engineer
Blue Prism
Austin, TX
------------------------------