Sophos Firewall: v18.5 MR3: Feedback and experiences

Does this update resolve the issue in 18.5.2 where the password from one PPPoE connection overwrites all the PPPoE password in all the other connections? There is nothing in the list of fixes, but also nothing in the list of known issues.

Does this update resolve the issue in 18.5.2 where the password from one PPPoE connection overwrites all the PPPoE password in all the other connections? There is nothing in the list of fixes, but also nothing in the list of known issues.

This issue was a one time issue in MR2. So if you had this issue, it should not come back by upgrading to MR3. 

It could potentially come up, if you upgrade from MR1 to MR3 (skipping MR2). This will be fixed in MR4. 

Thanks for confirming. We're doing an audit in light of CVE-2022-1040, so I want to make sure this is identified in advance for any stragglers that missed an update.

This CVE should be fixed on older versions via hotfix. See Advisory. 

depends on how much "older". I'm looking at an 18.0.1 right now that definitely doesn't have the hotfix. The advisory clearly states the versions for which a hotfix is available, and 18.0.1 isn't on the list

V18.0.1 was the broken Version. That looks bad to be honest. That is true, you should upgrade immediately. Your version is nearly 2 years old. 

the original 18.0.1 was broken, but it was pulled and replaced with 18.0.1-build396. But that aside, yes it's ancient and needs to be updated.