Apple Changes & Release Notes

Change Request 400252 Jamf Pro - Updating Elastic Deployment Script - Agent Version.

Description: Details of maintenance: Update the script used to deploy and update Elastic in our Jamf servers. We will update the installed version to the latest Elastic Stack version set by IT Security (9.1.5)

Benefit of change: This change updates the deployment script for Elastic to stay up to date with the latest Elastic Stack set by IT Security. This will update enrolled devices to the latest version and new enrolled devices will start out on the latest set version.

Impact to customers: None. Happens in the background.

Change Request 400463 [Upgrading Jamf Pro from 11.19 to 11.21.1].

Description: Details of maintenance: Upgrading Jamf Pro Server from 11.19 to 11.21.1. Note: This upgrade is performed by the UEM Team.

Benefit of change: This upgrade provides the following feature enhancements, bug fixes, and critical CVE vulnerability patches. (https://learn.jamf.com/en-US/bundle/jamf-pro-release-notes-11.21.1/page/New_Features_and_Enhancements.html

Impact to customers: Jamf Pro console access and device enrollment capabilities for IT support teams may not be available during the upgrade.

Change Request 393098 Jamf Pro - Unscoping macOS 26 Block/Exemption Configuration Profiles.

Description: Details of maintenance: The macOS 26 deferral was deployed on 9/12. Because the 30 days have passed on 10/12 and the deferral is no longer active, the configuration profiles for "Global - Major macOS Upgrade Deferral" and "Global - Major macOS Upgrade Allowed" will be unscoped from devices on 10/17.

Benefit of Change: This change will unscope the configuration profiles pertaining to the deferral and exemption of macOS 26. This will reduce the count of unnecessary configuration profiles on devices.

Impact to customers: No impact to customers.

Change Request 392453 Removal of Unused Extension Attributes from Jamf Production Server.

Description: The following extension attributes are identified as unused and will be removed from the Jamf Production Server. These attributes primarily pertain to deprecated software packages, redundant third-party integrations, or superseded monitoring logic. Removal will help reduce clutter, improve system performance, and optimize reporting. No disruption to managed endpoints or critical business services is expected, as confirmed via test environment deletions.

Extension Attributes to be Removed:

Aggie Font Install Status - Moriston Black

Aggie Font Install Status - Tungsten Black

Crowdstrike - Agent ID

Crowdstrike - Connection Established Timestamp

Crowdstrike - Extension Version

Crowdstrike - Heartbeat Check

Crowdstrike - Last Connection Established

Crowdstrike - Licensed

Crowdstrike - System or Kernel Extension Status

jamf-patch-4k-video-downloader

jamf-patch-airtime

jamf-patch-google-drive-file-stream

jamf-patch-google-earth-pro

jamf-patch-jamf-protect

jamf-patch-microsoft-skype

jamf-patch-opera

jamf-patch-royal-tsx

jamf-patch-yubikey-manager

Microsoft OneDrive - Last Sync Date

Microsoft OneDrive - Process Health

Change Request 392611 [Upgrading Jamf Pro from 11.19 to 11.21].

Description: Details of maintenance: [Describe the basic change being made and why. Provide enough description to understand the change and need for the change but not the implementation steps.] [Example: Upgrading Jamf Pro Server from 11.19 to 11.21. Note: This upgrade is performed by the vendor.]

Benefit of change: [State the simple benefit of the change.] [Example: This upgrade provides the following feature enhancements, bug fixes, and critical CVE vulnerability patches. (List each and provide URL to Release Notes.]

Impact to customers: [Example: Jamf Pro console access and device enrollment capabilities for IT support teams may not be available during the upgrade.]

Change Request 370418 Removal of stagnate devices from Unified Jamf.

Description: Details of maintenance:

• UEM will delete the device entries for devices that have not checked into Jamf since January 2024. The list of devices has been crossed-reference across Axonius to confirm they do not check in with any other TAMU sensor as well

Benefit of change:

• This will remove stagnate devices from the server, these devices are consuming a Jamf license as well as impacting metrics and reporting unless specifically accounted for in searches and deployment scope.

Impact to customers:

• none, these devices have been checked to not check into sensors and  no longer in use (either surplused or lost devices)

Change Request 361211 Jamf Pro - Updating Elastic Deployment Script - Agent Version.

Description: Details of maintenance: Update the script used to deploy and update Elastic in our Jamf servers. We will update the installed version to the latest Elastic Stack version set by IT Security (8.19.3)

Benefit of change: This change updates the deployment script for Elastic to stay up to date with the latest Elastic Stack set by IT Security. This will update enrolled devices to the latest version and new enrolled devices will start out on the latest set version.

Impact to customers: None. Happens in the background.

Change Request 352259 Jamf Pro - macOS 26 Block.

Description: Details of maintenance: Globally block macOS 26 ahead of the 09/15/2025 release date through a configuration profile called "Global - Major macOS Upgrade Deferral". This configuration profile will block all major OS updates, but through a smart group exclusion, devices that have opted in for the upgrade or are not macOS 26 eligible will be able to upgrade their computers to the latest major OS.

Devices that decide to opt-in to the macOS 26 update, will get the "Global - Major macOS Upgrade Allowed" configuration profile. To opt-in, devices can be added to the static group "Allow Major macOS update - Static". Computers can also be manually added by updating the Extension Attribute menu: "Major OS Update" which can be found in Jamf Pro > Computers > Search for device > Computer Inventory > Operating System > Edit in the top right of Operating System List > Choose: Enable > Save changes in the top right. Selecting Delay instead of Enable will add them to the exclusion group of the allowed profile.

If requested for a more major addition of devices, a ticket will have to be submitted.

Benefit of change: This change will block macOS 26 so IT Staff can test software that is commonly used in their units before giving end users the ability to install the new update.

Impact to customers: macOS 26 will not be able to be downloaded but no visible impact to the customer.

Change Request 315869 Jamf Pro - Upgrading Jamf Pro from 11.18.1 to 11.19.1.

Description: Details of maintenance: The Jamf Pro server in both test and production servers will be upgraded from 11.18.1 to 11.19.1

Benefit of change: Jamf Pro 11.19.1 includes Tomcat 10.1.43 and fixes known security issues and bugs. List of changes: https://learn.jamf.com/en-US/bundle/jamf-pro-release-notes-11.19.1/page/New_Features_and_Enhancements.html This change will allow us to test SecureW2, fix bugs, and patch known security issues. CVE's:

[PI136944] [PI138128] Fixed: A known vulnerability in a third-party library (CVE-2025-48976).

[PI138965] [PI138090] Fixed: A known vulnerability in a third-party library (CVE-2025-5878).

Impact to customers: Jamf Pro console access and device enrollment capabilities for IT support teams may not be available during the upgrade.

Change Request 309578 Jamf Pro - Updating Elastic Deployment Script - Agent Version.

Description: Details of maintenance: Update the script used to deploy and update Elastic in our Jamf servers. We will update the installed version to the latest Elastic Stack version set by IT Security (8.18.4)

Benefit of change: This change updates the deployment script for Elastic to stay up to date with the latest Elastic Stack set by IT Security. This will update enrolled devices to the latest version and new enrolled devices will start out on the latest set version.

Impact to customers: None. Happens in the background.