Financial Information Services

<div>On Friday, Oct 30, 2026, from 6am-6pm, the CU VPN service appliances will undergo a minor release upgrade recommended by the vendor. There will be no service interruption, although the upgrade will be applied on each appliance on different days as a precaution.</div>

<div>On Saturday, Oct 31, from 5am-12pm, Network Engineering will upgrade the remaining Managed Firewall (MFW) appliances to the latest recommended version of code. During the maintenance window the devices will be upgraded and rebooted once, resulting in about 10 minutes during which each is unavailable.

<div>On Sunday, Nov 1, 2026, from 6-8am, the Oracle Analytics Server (OAS) dashboards at https://oasprod.db.cornell.edu/analytics will be unavailable during patching.</div>

<div><strong>Vulnerable Software</strong> | Google Brotli C Decoder<br><strong>Platform(s)</strong> | Anything that ships or links Brotli 1.0.3 through 1.2.0 may be affected<br><strong>Vulnerability Type</strong> | CVSSv4: 9.2<br><strong>Local or Remote Exploitation</strong> | Remote<br><strong>Customer Action – Certified Desktop (Windows/macOS)</strong> | .NET will be patched centrally.

<div>On Thursday, October 29, 2026, between 5:00am and 7:00am, CIT Network Engineering will upgrade the rhodes1-2200e and uris1-2200e Managed Firewall (MFW) appliances to the latest recommended version of code. During the maintenance window the devices will be upgraded and rebooted once, resulting in a service outage of about 10 minutes for services behind those appliances.</div>

<div>On Tuesday, October 27th at 5:00am, CIT Network Engineering will patch the code on the Aruba wireless controllers to address recent security vulnerabilities. Wireless connectivity for the Ithaca, Geneva, and NY Tech campuses will be unavailable for approximately 15-20 minutes.</div>

<div>Update: Early analysis suggested that a Domain Name System (DNS) change would alleviate the delayed creation of new email aliases. That DNS change was implemented on Monday, October 26, 2026, around 9:40 a.m. ET. However, DNS updates can take up to 24 hours to propagate across the internet. Existing email aliases and NetID email addresses continue to function normally.<br><br>The issue: some TeamDynamix automations, related to approval and creation of optional email aliases, are not completing at this time.

<div>On Sunday, Oct 25, 2026, from 6am-12pm EST, Kuali Financial System (KFS) and eShop will be unavailable during a patch release.</div>