8.0.3 released today

Hello Velcro49,

Starting June 2012 we will automatically migrate all customers who have not yet upgraded to version 8

you have to read this carefully and to fully understand it you'd need some knowledge of the licensed "managed" product. The download is not directly to the clients but to a central server at the customer's site from where the clients get their updates. The server "subscribes" to certain products and versions (you can even select a certain minor version).  Whenever a new major version becomes available the until then current and the new one are available in parallel for a few months. During most of this period the subscription is not upgraded automatically (but the customer can decide to upgrade at any time) but eventually the subscription is automatically changed (you can even set your subscription so that this doesn't take place in which case you'll first get a warning and then an error when the old version is withdrawn). That's what the note is about (we will automatically migrate all customers who have not yet upgraded - and it will likely be 8.0.4 then).

Can't say what causes the delay with 8.0.3C though (the licensed 8.0.3 became available within the expected time).

Christian       

Hello Mike,

does this lengthy process of the updates reaching the more remote regions apply to definition updates

it shouldn't (for the reason you gave). You can make sure by comparing the number of (IDE) files in /Library/Sophos Anti-Virus/IDE/ to the number here (you get the applicable threat data version - e.g. 4.77 - from About Sophos Anti-Virus).

Edit: Live Protection uses a different mechanism. It's very dynamic (hence the Live in its name :smileywink:) so there are no "list of latest updates" or "date of latest update". You can verify that you can access the network and that it responds though by entering host -t TXT test.00.s.sophosxl.net in a Terminal window. It should respond with test.00.s.sophosxl.net descriptive text "WORKING".

Christian

I'm neither Sophos nor Akamai so I have just the external view (and moreover haven't followed the HE edition closely the last weeks) - so some of this is guesswork. Basically the product and the virus definitions are updated from the same warehouse as they are related (let's call it a package). The "database" - if you want to call it so - consists of a number of "libraries" (.vdl) - updated each month - and a set of usually some hundred identity files (IDEs) which in turn hold definitions and instructions for one or more threats and a constantly updated. Part of them are merged into the libraries at the next monthly update. The package contents are described in catalogs, checksummed and also signed so that the client can determine the consistency and authenticity of the download. Of course a server hosting a warehouse doesn't blindly update its contents but performs (at least) the same checks as a client. And naturally there has to be a mechanism which allows clients to get consistent data when it does an AutoUpdate (a process which will take more than a few milliseconds) during the time the server updates the warehouse. Finally it must be assured that the warehouse packages are at least at the level of the available installers (otherwise fresh installations would not be able to update).

Right now we have 7.3  and 8.0 packages in parallel - while 8.0 installations update on the 8.0 path the 7.3 do so on theirs (7.3.11 right now). It seems there is an issue getting 8.0.3C out through the distribution network. Whatever it is, it is likely "package" specific (only the "non-existing" 8.0.3C is affected - all other packages update normally). Don't ask me what the exact issue could be and who's at fault here.

Sorry for the lengthy introduction - now to your question: To check for potential delays in receiving protection updates (note that the level of protection is - with some really very rare exceptions related to the engine - the same whether you have threat data 4.76 with 420 IDEs or 4.77 with 223 IDEs) just visit the Download latest virus identity (IDE) files page and compare the numbers to those of your IDEs and threat data (as I described here). Any discrepancies should be small and correct "themselves" with the next (allow a few minutes delay) update.

Christian

Finally got updated today, thanks QC for the possible explanation, still, it took 5 days.

See Version 8.0.3 now released:- Monday 14 May :smileywink:

Ah yes... Something DID NOT went according to plan, just like I suspected.

Thank you Christian for helpful posts. I understand the process a lot better. My auto-update has picked up 8.0.3C too!

---

mikebore wrote:

I downloaded a fresh copy of version 8 and installed it. This was 8.0.2c.

---

I contacted Bob about this directly and he got it taken care of.

As of today, Sophos is now distributing 8.0.3C via the download site at http://sophos.com/freemacav