Hi all!
We are looking at patching up our two FME Flow 2025.2.1(Build 25815 - win64) instances according to the instructions given at https://support.safe.com/hc/en-us/articles/46792031942029-FME-November-2026-Security-Updates
The path we are taking is to apply the manual patching rather than upgrading at this time. Now we are a bit confused about the two parts of the fix that are needed - there is the Flow release hotfix, and there there is a file for Engine upgrade/installer.
I the instructions under Option 2: Apply Manual Patch for FME Flow and Upgrade FME Engine(s) it says that both steps are are required for full remediation of the vulnerabilities.
...but then in the step-by-step instructions below it lists the Engine upgrade/installer as “Optional”. Is that correct, and if so are we leaving some vulnerabilities open… ?
What also makes us hesitate a bit on the engine installer is that it has a later build number than we have in our Flow servers.
It would be great if we could have this clarified and the documentation/security notice should be revised on what the actual instructions are.
Thanks!
