This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM 9.110 and 9.111 (Heartbleed Fix) Released

I'm pleased to announce that we today released two Up2Date versions:

UTM 9.110
This update merely adds support for new SSG line of hardware appliances
For details please visit UTM Up2Date 9.110 Released | Sophos Blog

UTM 9.111 - containing OpenSSL Heartbleed Vulnerability FIX
Most important fix in this release is for the formerly discovered vulnerability in OpenSSL. For details please visit UTM Up2Date 9.111 Released – FIX for OpenSSL vulnerability (Heartbleed) | Sophos Blog

And for a summary of all Sophos products affected by the OpenSSL vulnerability as well as some more details, make sure to check out our knowledge base: Advisory: Critical vulnerability found in OpenSSL affecting Sophos products

Last but not least: We are working hard to release a fix for UTM 9.2 - stay tuned...

Kind regards,
Eric

This thread was automatically locked due to age.

0 BAlfson over 11 years ago

Solae, it's not certain that nothing was downloaded. In Post #14, you weren't running the command as root, so the command couldn't act on any Up2Dates that might have been downloaded. I had one client with a unit stuck in UP2DATE earlier in the week, and the instructions in Post #13 worked, so they had no downtime.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 NicolasPerrot1 over 11 years ago in reply to BAlfson

Hi,

im working on fixing webadmin-cert based on this KB:

Heartbleed: Recommended steps for UTM

At this point i ran into issue:

Next step is to re-generate the certificate for WebAdmin with the new CA, proceed as follows:

Navigate to 'Management | WebAdmin Settings | HTTPS Certificate'.
In the area Re-generate WebAdmin certificate click 'Apply'.
The WebAdmin certificate will be regenerated. Your UTM will reload automatically and you will have to re-login.

Here im missing the "Re-generate"-Button !!??? Can somebody confirm ?

UTM 9.201-23
Cancel
Vote Up 0 Vote Down

Cancel
0 Microsaft over 11 years ago

@BenZin

Have you changed the language of WebAdmin? If yes, try change back to english...
Cancel
Vote Up 0 Vote Down

Cancel
0 solae over 11 years ago

Hi Nic

You don't have to regenerate the certificate and hit apply, you have to hit apply to regenerate the certificate!

Regards,
Michael
- regenerate.png
- View
- Hide
Cancel
Vote Up 0 Vote Down

Cancel
0 NicolasPerrot1 over 11 years ago

Got it, my mistake. I didnt read carefully.

Thank you [;)]
Cancel
Vote Up 0 Vote Down

Cancel