SOLVED Does SCCM 2409 still require patching for CVE-2024-43468 ?

[bottling]

According to this article, there are only patches for the following SCCM builds:

• 2303
• 2309
• 2403

We were hoping by upgrading to 2409 those patches were already included in the upgrade. Upgrading to 2409 went successfully.

When we opened the SCCM console after upgrading to 2409, the Configuration Manager notifications windows appeared.


We clicked on the "More Info" link of the first notification. This redirected us to the article mentioned earlier.

So, does this mean that, despite upgrading to the latest build of SCCM, we still need to install one of the patches mentioned in the article? Or is this a falsely negative notification?

Many thanks in advance for helping us!

 

[Prajwal Desai]

If you have upgraded to version 2409, you don't have to worry about installing those patches manually. They will be covered in the hotfix. Make sure after upgrading to ConfigMgr 2409, you install the pending hotfixes. The notification that you're referring to is old and was generated long ago. You can close that notification.