Version 2023.3.17.0 (April 17, 2024)

Resolved Backlog

Version 2023.3.17.0 (April 17, 2024)

avatar

If you are using RDM as the client, RDM 2023.3 is required for this DVLS version.

FIXES

  • SECURITY FIX DEVO-2024-0005 PAM - Fixed a JIT feature issue allowing requests for unauthorized groups
  • SECURITY FIX DEVO-2024-0006 Core - Fixed a security issue where JIT-requested group names could be forged in checkout requests

Érica Poirier

All Comments (8)

avatar

Hi Erica!

Quick question: Will all security patches be release for affected stable versions?
For example, will there be a patch fixing DEVO-2024-0007 for v2023.3?

Thank you!
Best regards,
Daniel

avatar

Hi Daniel,

A new stable 2023.3 version should be soon available with the DEVO-2024-0007 patch.

As soon as it's available, we will post it on the forum in the STABLE RELEASES section.

Thank you for being so patient.

Best regards,

Érica Poirier

avatar

Thank you!

I had some trouble finding an MSI download link (and file hash) for the Stable Release. On the Previous Versions page, there are only .exe and .zip download links. The .msi file is useful to deploy the updates via Intune.

Is there a link somewhere on the website I missed? (I just replaced .exe with .msi in the URL and it worked)

avatar

Hello Daniel,

The new DVLS version 2023.3.18 was released today to fix this security issue. It affects DVLS only.

There is no DVLS .MSI file. Only the EXE file is available for the DVLS Console installer, and the ZIP package for the DVLS web application offline package.
https://cdn.devolutions.net/download/Setup.DVLS.Console.2023.3.18.0.exe
https://cdn.devolutions.net/download/RDMS/DVLS.2023.3.18.0.zip

The RDM version that matches this DVLS is version 2023.3.39. Here are the EXE and MSI file links.
https://cdn.devolutions.net/download/Setup.RemoteDesktopManager.2023.3.39.0.exe
https://cdn.devolutions.net/download/Setup.RemoteDesktopManager.2023.3.39.0.msi

Let me know if you have any more questions.

Best regards,

Érica Poirier

avatar

Yes sorry, I tried to download RDM as a MSI, not DVLS. I was just wondering if there's a direct download link somewhere, because I could only find the MSI by editing the URL manually.

avatar

Hello,

They are located under the 2024 section, as the last 2023.3 version was released in January 2024!

15c23196-9356-409b-a69c-ade5657fee0f

EDIT : There are no direct download links for the MSI file on the download page. We must manually update the link to switch to .msi for this package!

Best regards,

Érica Poirier

15c23196-9356-409b-a69c-ade5657fee0f.png

avatar

Thank you! We can work with that - a direct link would be useful though.

avatar

Hello Daniel,

A ticket has been submitted to our developer team to add the direct link to download MSI package in the Previous version download page.

I will let you know once this will be implemented.

Thank you for your request.

Best regards,

Érica Poirier