Merging changes synced from https://github.com/MicrosoftDocs/azure-stack-docs-pr (branch live)

Author: Learn Build Service GitHub App

azure-stack/hci/release-information-23h2.md

@@ -55,7 +55,6 @@ All dates are listed in ISO 8601 format: *YYYY-MM-DD*
 
 |Release build| OS build |Baseline or Update| What's new | Known issues |
 |--|--|--|--|--|
-|  | 25398.1085  <br><br> [Aug OS security update](./security-update/hci-security-update-jul-2024.md) <br><br> Availability date: 2024-08-13 | Update | [Features and improvements](./whats-new.md#features-and-improvements-in-24052) | [Known issues](./known-issues-2405-2.md) |
 | 10.2405.2.7 | 25398.1009  <br><br> [July OS security update](./security-update/hci-security-update-jul-2024.md) <br><br> Availability date: 2024-07-16 | Update | [Features and improvements](./whats-new.md#features-and-improvements-in-24052) | [Known issues](./known-issues-2405-2.md) |
 | 10.2405.1.4 | 25398.950  <br><br> [June OS security update](./security-update/hci-security-update-jun-2024.md) <br><br> Availability date: 2024-06-19 | Update | [Features and improvements](./whats-new.md#features-and-improvements-in-24051) | [Known issues](./known-issues-2405-1.md) |
 | 10.2402.4.4  | 25398.950 <br><br> [June OS security update](./security-update/hci-security-update-jun-2024.md) <br><br> Availability date: 2024-06-19 | Update | [Features and improvements](./whats-new.md#features-and-improvements-in-24024) | [Known issues](./known-issues-2402-4.md) |

azure-stack/hci/toc.yml

@@ -51,9 +51,7 @@ items:
         href: known-issues-2311.md
     - name: Security updates
       items:
-      - name: August 2024 - Current
-        href: security-update/hci-security-update-aug-2024.md
-      - name: July 2024
+      - name: July 2024 - Current
         href: security-update/hci-security-update-jul-2024.md
       - name: June 2024 
         href: security-update/hci-security-update-jun-2024.md

azure-stack/mdc/operator/azure-stack-commvault-offer-tzl.md

@@ -34,7 +34,7 @@ Commvault supports backup and restore of the following resource types on Azure S
   - Application -- SQL, MySQL
   - For more information, see [Backup Agents](https://documentation.commvault.com/2023e/essential/application_based_backups_for_virtual_server_agent.html).
 
-You can deploy Commvault on an external machine and protect resources on Azure Stack Hub remotely. In addition, it is possible to deploy Commvault as a virtual appliance on Azure Stack Hub. Complete guidance from Commvault is available on their documentation site that covers [Azure Stack Hub](https://documentation.commvault.com/2023e/essential/azure_stack_hub.html). For reference, Commvault also publishes a [complete list of capabilities for Microsoft Azure](https://docs.metallic.io/metallic/protecting_azure_virtual_machines_with_commvault_cloud.html).
+You can deploy Commvault on an external machine and protect resources on Azure Stack Hub remotely. In addition, it is possible to deploy Commvault as a virtual appliance on Azure Stack Hub. Complete guidance from Commvault is available on their documentation site that covers [Azure Stack Hub](https://documentation.commvault.com/2023e/essential/azure_stack_hub.html). For reference, Commvault also publishes a [complete list of capabilities for Microsoft Azure](https://docs.metallic.io/metallic/index.html).
 
 ## Deploy from Azure Stack Hub Marketplace
 

azure-stack/operator/TOC.yml

@@ -14,6 +14,12 @@
       href: release-notes.md
     - name: Hotfixes
       items:
+      - name: Hotfix 1.2406.1.14
+        href: hotfix-1-2406-1-14.md      
+      - name: Hotfix 1.2311.3.61
+        href: hotfix-1-2311-3-61.md
+      - name: Hotfix 1.2306.4.101
+        href: hotfix-1-2306-4-101.md      
       - name: Hotfix 1.2311.3.50
         href: hotfix-1-2311-3-50.md
       - name: Hotfix 1.2306.4.98

azure-stack/operator/azure-stack-marketplace-azure-items.md

@@ -38,8 +38,8 @@ Whenever there are updates to virtual machine (VM) extensions you use, you shoul
 | ![Acronis Backup Extension for Windows](media/azure-stack-marketplace-azure-items/acronis.png) | [Acronis Backup Extension for Windows](https://azuremarketplace.microsoft.com/marketplace/apps/acronis.storage-gateway) | The Acronis Backup Extension for Microsoft Azure is part of the Acronis Backup family of data protection products. | Acronis International GmbH. | Windows |
 | ![CloudLink SecureVM Extension for Linux](media/azure-stack-marketplace-azure-items/cloudlink.png) | [CloudLink SecureVM Extension for Linux](https://azuremarketplace.microsoft.com/marketplace/apps/cloudlink.cloudlink-solution)  | Control, monitor, and encrypt VMs with ease and confidence. | Dell EMC | Linux |
 | ![CloudLink SecureVM Extension for Windows](media/azure-stack-marketplace-azure-items/cloudlink.png) | [CloudLink SecureVM Extension for Windows](https://azuremarketplace.microsoft.com/marketplace/apps/cloudlink.cloudlink-solution)  | Control, monitor, and encrypt VMs with ease and confidence. | Dell EMC | Windows |
-| :::image type="icon" source="media/azure-stack-marketplace-azure-items/kaspersky.png" border="false"::: | [Kaspersky Hybrid Cloud Security Agent for Windows](https://azuremarketplace.microsoft.com/marketplace/apps/kaspersky_lab.kaspersky_hybrid_cloud_security) | With Kaspersky Hybrid Cloud Security, you can provision cybersecurity capabilities inside your cloud workloads via Azure Extensions. | Kaspersky Lab | Windows |
-| :::image type="icon" source="media/azure-stack-marketplace-azure-items/kaspersky.png" border="false"::: | [Kaspersky Hybrid Cloud Security Agent for Linux](https://azuremarketplace.microsoft.com/marketplace/apps/kaspersky_lab.kaspersky_hybrid_cloud_security?tab=Overview) | With Kaspersky Hybrid Cloud Security, you can provision cybersecurity capabilities right inside your cloud workloads via Azure Extensions. | Kaspersky Lab | Linux |
+| :::image type="icon" source="media/azure-stack-marketplace-azure-items/kaspersky.png" border="false"::: | [Kaspersky Hybrid Cloud Security Agent for Windows](https://azuremarketplace.microsoft.com/) | With Kaspersky Hybrid Cloud Security, you can provision cybersecurity capabilities inside your cloud workloads via Azure Extensions. | Kaspersky Lab | Windows |
+| :::image type="icon" source="media/azure-stack-marketplace-azure-items/kaspersky.png" border="false"::: | [Kaspersky Hybrid Cloud Security Agent for Linux](https://azuremarketplace.microsoft.com/?tab=Overview) | With Kaspersky Hybrid Cloud Security, you can provision cybersecurity capabilities right inside your cloud workloads via Azure Extensions. | Kaspersky Lab | Linux |
 
 ## Microsoft VM images and solution templates
 
@@ -58,7 +58,7 @@ Microsoft Azure Stack Hub supports the following Azure Marketplace VMs and solut
 | --- | --- | --- | --- |
 | ![Clear Linux OS](media/azure-stack-marketplace-azure-items/clearlinux.png) | [Clear Linux OS](https://azuremarketplace.microsoft.com/marketplace/apps/intel_corporation.clear_linux_os) | A reference Linux distribution optimized for Intel Architecture. | Clear Linux Project |
 | ![Ubuntu Server](media/azure-stack-marketplace-azure-items/ubuntu.png) | [Ubuntu Server](https://azuremarketplace.microsoft.com/en-us/marketplace/apps?search=Ubuntu%20Server&page=1) | Ubuntu Server is the world's most popular Linux for cloud environments. | Canonical |
-| ![Debian 10 "Buster"](media/azure-stack-marketplace-azure-items/debian8.png) | [Debian 8 "Jessie"](https://azuremarketplace.microsoft.com/marketplace/apps/debian.debian-10) | Debian GNU/Linux is one of the most popular Linux distributions. | Debian |
+| ![Debian 10 "Buster"](media/azure-stack-marketplace-azure-items/debian8.png) | [Debian 8 "Jessie"](https://azuremarketplace.microsoft.com/marketplace/apps/cloud-infrastructure-services.debian-10?tab=overview) | Debian GNU/Linux is one of the most popular Linux distributions. | Debian |
 | ![Oracle Linux](media/azure-stack-marketplace-azure-items/oracle.png) | [Oracle Linux](https://azuremarketplace.microsoft.com/marketplace/apps/oracle.oracle-linux) | The Oracle Linux operating system is engineered for open cloud infrastructure. It delivers leading performance, scalability, and reliability for enterprise SaaS and PaaS workloads, as well as traditional enterprise apps. | Oracle |
 
 ## Third-Party BYOL, free, trial images, and solution templates
@@ -81,7 +81,7 @@ Microsoft Azure Stack Hub supports the following Azure Marketplace VMs and solut
 | ![Exivity - Hybrid Cloud Billing Solution](media/azure-stack-marketplace-azure-items/exivity.png) | [Exivity - Hybrid Cloud Billing Solution](https://azuremarketplace.microsoft.com/marketplace/apps/exivity.exivity-vm)  | A billing tool that can satisfy the requirements of virtually any IT service delivery model, whether deployed within on-premises, public cloud, or hybrid environments. | Exivity |
 | :::image type="icon" source="media/azure-stack-marketplace-azure-items/f5.png" border="false"::: | [f5 Big-IP Virtual Edition](https://azuremarketplace.microsoft.com/marketplace/apps/f5-networks.f5-big-ip-best)  | Advanced Load Balancing, GSLB, Network Firewall, DNS, WAF, and App Access. | F5 Networks |
 | ![FortiGate Next-Generation Firewall](media/azure-stack-marketplace-azure-items/fortinetsquare.png) | FortiGate Next-Generation Firewall | Firewall technology that delivers complete content and network protection with a comprehensive suite of powerful security features. App control, antivirus, IPS, web filtering, and VPN along with advanced features such as vulnerability management work in concert to identify and mitigate the latest complex security threats. | Fortinet |
-| :::image type="icon" source="media/azure-stack-marketplace-azure-items/kaspersky.png" border="false"::: | [Kaspersky Hybrid Cloud Security](https://azuremarketplace.microsoft.com/marketplace/apps/kaspersky_lab.kaspersky_hybrid_cloud_security?tab=Overview) | The Kaspersky Hybrid Cloud Security enables a seamlessly orchestrated and adaptive cybersecurity ecosystem. | Kaspersky Lab |
+| :::image type="icon" source="media/azure-stack-marketplace-azure-items/kaspersky.png" border="false"::: | [Kaspersky Hybrid Cloud Security](https://azuremarketplace.microsoft.com/?tab=Overview) | The Kaspersky Hybrid Cloud Security enables a seamlessly orchestrated and adaptive cybersecurity ecosystem. | Kaspersky Lab |
 | ![KEMP LoadMaster Load Balancer ADC Content Switch](media/azure-stack-marketplace-azure-items/kemp.png) | [KEMP LoadMaster Load Balancer ADC Content Switch](https://azuremarketplace.microsoft.com/marketplace/apps/kemptech.vlm-azure) | Layer 4-7 Application Delivery Controller (ADC) Load Balancer, Content Switch, and Traffic Manager. | KEMP Technologies Inc. |
 | :::image type="icon" source="media/azure-stack-marketplace-azure-items/kubernetes.png" border="false"::: | [Kubernetes](azure-stack-aks-engine.md) | This solution deploys a Kubernetes cluster running as a standalone cluster with templates generated using AKS-Engine.<br>**This solution template also requires Ubuntu Server 16.04 LTS and Custom Script for Linux 2.0.**| Microsoft |
 | ![Service Fabric Cluster](media/azure-stack-marketplace-azure-items/servicefrabric.png) | [Service Fabric Cluster](https://azuremarketplace.microsoft.com/en-us/marketplace/apps/Microsoft.ServiceFabricOMS?tab=Overview) | This solution deploys Service Fabric running as a standalone cluster on a Virtual Machine Scale Set. <br>**This solution template requires you to also download the Windows Server 2016 Datacenter**| Microsoft |

azure-stack/operator/azure-stack-tutorial-mysql.md

@@ -41,7 +41,7 @@ Before starting, ensure that the [MySQL Server resource provider](azure-stack-my
 > All of the following are required to create the MySQL cluster.
 
 - [MySQL with Replication](https://azuremarketplace.microsoft.com/en-us/marketplace/apps?search=mysql%20bitnami&page=1): This is the Bitnami solution template that will be used for the MySQL cluster deployment.
-- [Debian 8 "Jessie"](https://azuremarketplace.microsoft.com/marketplace/apps/debian.debian-10): Debian 8 "Jessie" with backports kernel for Microsoft Azure provided by credativ. Debian GNU/Linux is one of the most popular Linux distributions.
+- [Debian 8 "Jessie"](https://azuremarketplace.microsoft.com/marketplace/apps/cloud-infrastructure-services.debian-10?tab=overview): Debian 8 "Jessie" with backports kernel for Microsoft Azure provided by credativ. Debian GNU/Linux is one of the most popular Linux distributions.
 - [Custom script for linux 2.0](https://azuremarketplace.microsoft.com/marketplace/apps/microsoftcorporation1610754355835.azure-linux-stig-templates): Custom Script Extension is a tool to execute your VM customization tasks post VM provision. When this Extension is added to a VM, it can download scripts from Azure storage and run them on the VM. Custom Script Extension tasks can also be automated using the Azure PowerShell cmdlets and Azure Cross-Platform Command-Line Interface (xPlat CLI).
 - VM Access For Linux Extension 1.4.7: The VM Access extension enables you to reset the password, SSH key, or the SSH configurations so you can regain access to your VM. You can also add a new user with password or SSH key, or delete a user using this extension. This extension targets Linux VMs.
 

azure-stack/operator/hotfix-1-2306-4-101.md

@@ -0,0 +1,49 @@
+---
+title: Azure Stack Hub hotfix 1.2306.4.101
+description: Summary of Azure Stack Hub hotfix 1.2306.4.101
+author: sethmanheim
+ms.topic: article
+ms.date: 08/13/2024
+ms.author: sethm
+
+---
+
+# Azure Stack Hub hotfix 1.2306.4.101
+
+## Summary
+
+- Fixed bugs causing infrastructure faults.
+- Fixed an issue in which users were able to create duplicate and external infrastructure DNS zones.
+
+## Fixes rolled up from previous hotfix releases
+
+- Fixed the **CloudManifest** feature to avoid adding non-self-signed certificates to the root store.
+- Fixed an issue in the portal that might send a token to an untrusted domain when modifying custom dashboards.
+- Fixed XSS vulnerability on metadata endpoint.
+- Portal framework accessibility fixes and other updates.
+- Azure Stack Hub [spoofing vulnerability CVE](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20679).
+- This hotfix includes Windows security updates applied to external-facing infrastructure VMs (internal infrastructure VMs that are capable of hosting endpoints external to Azure Stack Hub). The addition of these security updates can potentially increase the hotfix installation time.
+- Fixed an issue in NRP in which duplicate IP addresses could be assigned to NICs in some scenarios.
+
+## Hotfix information
+
+To apply this hotfix, you must have version **1.2306.2.47** or later.
+
+> [!IMPORTANT]
+> As outlined in the release notes for the [2306 update](release-notes.md?view=azs-2306&preserve-view=true), make sure that you refer to the update activity checklist on running **Test-AzureStack** (with specified parameters), and resolve any operational issues that are found, including all warnings and failures. Also, review active alerts and resolve any that require action.
+
+## File information
+
+Download the following files. Then, follow the instructions in [Apply updates in Azure Stack](azure-stack-apply-updates.md) to apply this update.
+
+[Download the zip file now](https://azurestackhub.azureedge.net/PR/download/MAS_ProdHotfix_1.2306.4.101/HotFix/AzS_Update_1.2306.4.101.zip).
+
+[Download the hotfix xml file now](https://azurestackhub.azureedge.net/PR/download/MAS_ProdHotfix_1.2306.4.101/HotFix/metadata.xml).
+
+## More information
+
+[Azure Stack Hub update resources](azure-stack-updates.md)
+
+[Apply updates in Azure Stack](azure-stack-apply-updates.md)
+
+[Monitor updates in Azure Stack by using the privileged endpoint](azure-stack-monitor-update.md)

azure-stack/operator/hotfix-1-2311-3-61.md

@@ -0,0 +1,47 @@
+---
+title: Azure Stack Hub hotfix 1.2311.3.61
+description: Summary of Azure Stack Hub hotfix 1.2311.3.61
+author: sethmanheim
+ms.topic: article
+ms.date: 08/13/2024
+ms.author: sethm
+
+---
+
+# Azure Stack Hub hotfix 1.2311.3.61
+
+## Summary
+
+- Fixed bugs causing infrastructure faults.
+- Fixed an issue in which users were able to create duplicate and external infrastructure DNS zones.
+
+## Fixes rolled up from previous hotfix releases
+
+- Fixed the **CloudManifest** feature to avoid adding non-self-signed certificates to the root store.
+- Fixed an issue in the portal that might send a token to an untrusted domain when modifying custom dashboards.
+- Fixed XSS vulnerability on metadata endpoint.
+- Fixed an issue that can lead to duplicate infrastructure VMs.
+- Azure Stack Hub [spoofing vulnerability CVE](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20679).
+
+## Hotfix information
+
+To apply this hotfix, you must have version **1.2311.1.22** or later.
+
+> [!IMPORTANT]
+> As outlined in the release notes for the [2311 update](release-notes.md?view=azs-2311&preserve-view=true), make sure that you refer to the update activity checklist on running **Test-AzureStack** (with specified parameters), and resolve any operational issues that are found, including all warnings and failures. Also, review active alerts and resolve any that require action.
+
+## File information
+
+Download the following files. Then, follow the instructions in [Apply updates in Azure Stack](azure-stack-apply-updates.md) to apply this update.
+
+[Download the zip file now](https://azurestackhub.azureedge.net/PR/download/MAS_ProdHotfix_1.2311.3.61/HotFix/AzS_Update_1.2311.3.61.zip).
+
+[Download the hotfix xml file now](https://azurestackhub.azureedge.net/PR/download/MAS_ProdHotfix_1.2311.3.61/HotFix/metadata.xml).
+
+## More information
+
+[Azure Stack Hub update resources](azure-stack-updates.md)
+
+[Apply updates in Azure Stack](azure-stack-apply-updates.md)
+
+[Monitor updates in Azure Stack by using the privileged endpoint](azure-stack-monitor-update.md)

azure-stack/operator/hotfix-1-2406-1-14.md

@@ -0,0 +1,40 @@
+---
+title: Azure Stack Hub hotfix 1.2406.1.14
+description: Summary of Azure Stack Hub hotfix 1.2406.1.14
+author: sethmanheim
+ms.topic: article
+ms.date: 08/13/2024
+ms.author: sethm
+
+---
+
+# Azure Stack Hub hotfix 1.2406.1.14
+
+## Summary
+
+- Fixed an issue in which users were able to create duplicate and external infrastructure DNS zones.
+
+<!-- ## Fixes rolled up from previous hotfix releases -->
+
+## Hotfix information
+
+To apply this hotfix, you must have version **1.2406.0.08** or later.
+
+> [!IMPORTANT]
+> As outlined in the release notes for the [2406 update](release-notes.md?view=azs-2406&preserve-view=true), make sure that you refer to the update activity checklist on running **Test-AzureStack** (with specified parameters), and resolve any operational issues that are found, including all warnings and failures. Also, review active alerts and resolve any that require action.
+
+## File information
+
+Download the following files. Then, follow the instructions in [Apply updates in Azure Stack](azure-stack-apply-updates.md) to apply this update.
+
+[Download the zip file now](https://azurestackhub.azureedge.net/PR/download/MAS_ProdHotfix_1.2406.1.14/HotFix/AzS_Update_1.2406.1.14.zip).
+
+[Download the hotfix xml file now](https://azurestackhub.azureedge.net/PR/download/MAS_ProdHotfix_1.2406.1.14/HotFix/metadata.xml).
+
+## More information
+
+[Azure Stack Hub update resources](azure-stack-updates.md)
+
+[Apply updates in Azure Stack](azure-stack-apply-updates.md)
+
+[Monitor updates in Azure Stack by using the privileged endpoint](azure-stack-monitor-update.md)