Guest User!

You are not Sophos Staff.

Thread Info
  • Locked Locked
  • Replies 41 replies
  • Subscribers 14 subscribers
  • Views 67217 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos UTM 9.406-3 released

twister5800


Up2Date 9.406003 package description:

Remark:
System will be rebooted

News:
Security Release

Bugfixes:
Fix [NUTM-1616]: [AWS] Change AMI type to HVM
Fix [NUTM-4839]: [AWS] AWS Instances in GovCloud need to use S3 buckets in GovCloud
Fix [NUTM-5013]: [Network] TCP Vulnerability (CVE-2016-5696)

RPM packages contained:
perf-tools-3.12.48-0.237935773.g86aa827.i686.rpm
ep-ha-aws-9.40-191.g83c01f2.rb1.noarch.rpm
ep-webadmin-9.40-640.g7ad4baa.rb8.i686.rpm
ep-cloud-ec2-9.40-26.g00cde1e.rb2.i686.rpm
kernel-smp-3.12.48-0.237935773.g86aa827.i686.rpm
kernel-smp64-3.12.48-0.237935773.g86aa827.x86_64.rpm
ep-release-9.406-3.noarch.rpm



This thread was automatically locked due to age.
Parents

  • Applied this patch to a customer SG330 who have a satellite site using RED 50. Few days later the satellite site lost its connection and suddenly UTM deauthorised the RED 50. The tick box for "Automatic deauthroisation of RED units" is and always has been unticked. 

    Im now very reluctant to continue rolling this patch out to other customers. I have one customer with over 20 REDs.

    Have to agree with others that Sophos are very bad at patch control/quality and now forced me as a business to look at other vendors who can actually deliver a stable solution 

Reply

  • Applied this patch to a customer SG330 who have a satellite site using RED 50. Few days later the satellite site lost its connection and suddenly UTM deauthorised the RED 50. The tick box for "Automatic deauthroisation of RED units" is and always has been unticked. 

    Im now very reluctant to continue rolling this patch out to other customers. I have one customer with over 20 REDs.

    Have to agree with others that Sophos are very bad at patch control/quality and now forced me as a business to look at other vendors who can actually deliver a stable solution 

Children
No Data