Sophos UTM Update 9.206-035

Remarks:

  • System will be rebooted
  • Configuration will be upgraded
  • Connected RED devices will perform firmware upgrade
  • Connected Wifi APs will perform firmware upgrade

News:

  • Bugfix Release
  • Enhancement: Web filter allows to define exceptions based on User Agent
  • Enhancement: SMC Wifi synchronisation also syncs PSK

Bugfixes:

Fix [21170]: Exchange 2010 OWA notifications don’t work
Fix [24360]: improve handling of rpmdb corruptions
Fix [24556]: SAVI engine scan failed: Unknown SAVI error [0x80040237]
Fix [26721]: WiFi: Sometimes syslogd on AP is not running after AP booted up
Fix [27774]: Remote access reporting shows incorrect information about duration of vpn user
Fix [27861]: 3G USB modem intermittently not assigned after reboot
Fix [29030]: Prevent ulogd coredumps in case of database issues
Fix [29141]: Input username is not updated to directory notation in case of custom user name attribute
Fix [30695]: Hostnames with utf-8 characters are not shown in PDF executive report
Fix [30863]: PIM SM does not work between two networks
Fix [30883]: Graphs in Executive Report are only shown if “Daily executive report” option is enabled
Fix [31252]: UMTS failover doesn’t work after HA takeover
Fix [31309]: Make httpproxy more tolerant to invalid Content-Length value from Server
Fix [31320]: httpproxy coredumps during shutdown time
Fix [31392]: [SR] Saving blacklist/whitelist fails in User Portal
Fix [31530]: ulogd coredump caused by an error message from postgreSQL “integer out of range”
Fix [31582]: Mails stuck in work queue due to duplicate key value violates unique constraint “primary_m”
Fix [31644]: Segmentation fault in serve_local_file from /usr/lib/libglib-2.0.so.0
Fix [31671]: changing time steps of individual OTP tokens results in authentication failure
Fix [31784]: smtpd is restarting and creates coredumps in 9.201
Fix [31806]: dhcpd not started after up2date
Fix [31812]: Extended information from web security reporting results table shows nothing
Fix [31835]: It’s not possible to send automatic backups if INFO-011 is disabled
Fix [31895]: smtpd causes high disk I/O after update to 9.2
Fix [31907]: mails with attachments are causing scanner timeout or deadlock
Fix [32008]: Using lag interfaces in a bridge setup is not reboot save
Fix [32019]: Japanese double byte text in “Device Specific Text” of notification mail broken
Fix [32027]: Packetfilter rules numbering in webadmin and livelog doesn’t match
Fix [32043]: IPsec Auto-Packetfilter rules depolyed by SUM (4.2) again and again
Fix [32108]: Country blocking exceptions with empty country doesn’t work if destination is local to UTM
Fix [32126]: The SMC connection test didn’t work before applying the configuration
Fix [32127]: smtpd dieing without Coredump
Fix [32129]: RED: rewrite cert files after cert change
Fix [32150]: confd sync daemon runnnig on slave node
Fix [32165]: Don’t allow usage of disabled interface in user portal
Fix [32180]: smtp connection is lost during unnecessary config reload
Fix [32183]: RED10: potentially no reboot after firmware update
Fix [32214]: System freeze using uplink balancing and IPsec bind to interface
Fix [32236]: bounced spx encrypted mail is shown as delivered
Fix [32252]: Installer breaks formatting in 70-persistent-net.rules
Fix [32254]: Master shows slave device name as “unknown”
Fix [32376]: Problems with form reverse authentication in reverseproxy for OWA / ActiveSync
Fix [32378]: Reset Adapter and Hardware unit hang after update to v9.204 for intel ethernet controller 82579LM Gigabit Network Connection
Fix [32387]: Change snort links to vendor homepage [9.2]
Fix [32393]: Denial of service in mod_deflate’s request body decompression (CVE-2014-0118)
Fix [32401]: dhcp option 43 , scope server is not working on one system
Fix [32412]: Sync WiFi preshared keys to SMC
Fix [32519]: vpn-reporter.pl segfault in libc-2.11.3.so
Fix [32539]: The default “nf_conntrack_max” value is too low for new SG550/SG650 series.

RPM packages contained:
libconan-2.0.1-0.174663526.gd57887d.i686.rpm
libsaviglue-9.20-11.g8616c8a.i686.rpm
ImageMagick-6.8.9.4-1.5.gda7f96d.i686.rpm
client-iphone-9.20-3.g06e86a1.noarch.rpm
cm-nextgen-agent-9.20-39.gae70983.i686.rpm
modauthnzaua-9.20-147.gdc35ed6.i686.rpm
modsecurity2-2.7.4-18.g63c379a.i686.rpm
modwafexceptions-9.20-138.g8f290a2.i686.rpm
perf-tools-3.8.13.27-0.173454012.g3d22934.i686.rpm
red-firmware2-3056-0.g3321e26.noarch.rpm
ulogd-2.1.0-97.g6d0b0d0.i686.rpm
usb-modeswitch-1.2.5-16.gfac1549.i686.rpm
ep-reporting-9.20-61.g0c480b7.i686.rpm
ep-reporting-c-9.20-40.g8980b03.i686.rpm
ep-reporting-resources-9.20-61.g0c480b7.i686.rpm
ep-aua-9.20-62.g28f223c.i686.rpm
ep-branding-ASG-afg-9.20-17.g30e663e.noarch.rpm
ep-branding-ASG-ang-9.20-17.g30e663e.noarch.rpm
ep-branding-ASG-asg-9.20-17.g30e663e.noarch.rpm
ep-branding-ASG-atg-9.20-17.g30e663e.noarch.rpm
ep-branding-ASG-aug-9.20-17.g30e663e.noarch.rpm
ep-confd-9.20-544.gdc7c8e8.i686.rpm
ep-confd-tools-9.20-487.g2f3d767.i686.rpm
ep-ha-confd-9.20-8.ga1a73b6.i686.rpm
ep-ha-daemon-9.20-21.g87ad643.i686.rpm
ep-hardware-9.20-50.g2b687a1.i686.rpm
ep-hotspot-web-9.20-20.gc3f19db.i686.rpm
ep-init-9.20-17.g82b6e7b.noarch.rpm
ep-libs-9.20-67.g75dc535.i686.rpm
ep-localization-afg-9.20-17.gee7006b.i686.rpm
ep-localization-ang-9.20-17.gee7006b.i686.rpm
ep-localization-asg-9.20-17.gee7006b.i686.rpm
ep-localization-atg-9.20-17.gee7006b.i686.rpm
ep-localization-aug-9.20-17.gee7006b.i686.rpm
ep-mdw-9.20-350.g9b098d9.i686.rpm
ep-notifier-9.20-5.gdee5936.i686.rpm
ep-raidtools-9.20-55.g301eee3.i686.rpm
ep-red-9.20-28.gb32c7fe.i686.rpm
ep-screenmgr-9.20-16.gd855eff.rb1.i686.rpm
ep-sms-client-9.20-0.170522457.ga5e8c48.i686.rpm
ep-tools-9.20-14.g2c6c151.i686.rpm
ep-up2date-9.20-4.g8c4ff3e.i686.rpm
ep-up2date-downloader-9.20-4.g8c4ff3e.i686.rpm
ep-up2date-pattern-install-9.20-4.g8c4ff3e.i686.rpm
ep-up2date-system-install-9.20-4.g8c4ff3e.i686.rpm
ep-webadmin-9.20-554.g7f98816.i686.rpm
ep-webadmin-contentmanager-9.20-61.gcf1fbcc.i686.rpm
ep-wireless-firmware-5029-0.gd31ef55.i586.rpm
ep-chroot-dhcps-9.20-4.g266d5fe.noarch.rpm
ep-chroot-smtp-9.20-187.g0d7e2a9.i686.rpm
ep-chroot-xorp-9.20-2.gd893fe9.noarch.rpm
chroot-httpd-2.4.4-27.g036ff2e.i686.rpm
chroot-ppp-2.4.6-8.g076996f.i686.rpm
chroot-pppoe-2.4.6-8.g076996f.i686.rpm
chroot-reverseproxy-2.4.4-356.gb4faa92.i686.rpm
chroot-xorp-9.20-6.g9dc6921.i686.rpm
ep-httpproxy-9.20-176.gfeae029.i686.rpm
kernel-smp-3.8.13.27-0.173454012.g3d22934.i686.rpm
kernel-smp64-3.8.13.27-0.173454012.g3d22934.x86_64.rpm
ep-release-9.206-35.noarch.rpm

 

You can download the update here: ftp://ftp.astaro.de/UTM/v9/up2date/u2d-sys-9.205012-206035.tgz.gpg

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.