If there are Macs on your report, they may be vulnerable to CVE-2022-32893 and/or CVE-2022-32894 which are being exploited in the wild and possibly running a version of macOS that is no longer supported and updated by Apple.   In August, the UW-Madison Office of Cybersecurity recommended that the vulnerable systems be patched immediately.  We would like to ask that you consider upgrading to at least Monterey (12.5.1 or later) to solve both of these issues.  

If you have Windows machines on your report, they are running an unsupported version of Windows and we ask that they be upgraded to at least 21H2. 

We will not be requiring you to upgrade, however we want you to know that we are not able to fully support versions of operating systems no longer supported by the vendor, and  support for these devices will be on a “best effort” basis. 

Reasons to consider upgrading your computer are numerous, including:

• Improved Security
• Access to latest features
• Better compatibility
• Better device performance
• Vendor support
• Increased productivity and efficiency

We understand that upgrading devices is a time consuming process, and that some devices ultimately will be unable to handle an upgrade.  We are asking for you to address each of the devices with one of these three options:

Upgrade device: We will follow up with you in six months to see how things are going.  Once the device is updated to a supported OS, it will automatically be removed from future reports

Decommission or replace device: Device will be decommissioned due to being unnecessary or replaced if hardware cannot support an upgrade

Unable to be upgraded or decommissioned:  If you are choosing not to upgrade a device, please let us know why and we can work together to exclude it from these reports for the next 6 months. 

Once you’ve decided how you will handle all devices, please note it on the report and return the report to doit-seam-support@doit.wisc.edu at your earliest convenience.  When we receive your response, we will make a note to not contact you again for six months, when we will follow up with you again to see if anything has changed.