This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Home Edition version 9.5 Preview

The engineering team for Sophos Anti-Virus for Mac is happy to announce the availability of a preview of our next significant release for Home Edition. You can download this installer directly from our site using this link:

http://www.sophos.com/Pages/DownloadRedirect.aspx?downloadKey={8579BC43-753D-48D0-8C74-60593FEB7097}

Follow that link, accept the EULA, run the installer. It will automatically upgrade an existing 9.4 installation to version 9.5 if required. Your existing settings will be preserved during the upgrade.

This update improves stability and performance. No new features, but it addresses issues reported here in the forum and from our business customers.

NOTE: this version requires Mac OS X 10.8 or newer. It will not install and will not run on Mac OS X 10.6 or 10.7.

Now for the FAQ:

  • Is this the same as Sophos Home? No this is the "classic" Home Edition. The team working on Sophos Home will be incorporating this new version into their product in the coming months.
  • What does Preview mean? We aren't yet releasing this to all users. We want to get your feedback first, from willing volunteers. Once we are satified this release is good enough for everyone we'll automatically upgrade to this version.
  • Should I reboot after installation? Not required immediately but doing so will purge the old kernel drivers from memory.
  • Any new features? Not really. This release contains a full rewrite of the on-access scanning subsystem to improve system stability and reduce overall memory usage. This release also runs the content scanner as an unpriviliged user, same as the web scanner in the past, as security best-practice. You may notice scheduled scans or scanning from the Finder is snappier though.
  • Is it safe to run? You've tested it, right? Yes this release has passed our internal quality assurance process. We have been running this version internally for a while now, it has proven quite stable.

Please post any issues you have, we definitely want to hear about your experience as soon as possible. Thank you!



This thread was automatically locked due to age.
  • Hey everyone,

    We published an update to the Preview build (9.5.2) today. If you have previously installed the Preview, your software should automatically update.

    Note: if you are running the macOS Sierra 10.12 Public Beta you may find that the update doesn't complete correctly e.g. after the 13mb download the software remains at version 9.50. If you encounter this problem, you can run this command in the Terminal:

    sudo "/Library/Caches/com.sophos.sau/CID/Sophos Anti-Virus Home Edition.app/Contents/MacOS/tools/InstallationDeployer" --install

    As usual, take care when using the sudo command. Also take care because this wiki may wrap the text, and also appears to be inserting a hyphen in the middle of "Contents" (its supposed to be one word).

    Feedback (positive, negative, etc) very much appreciated by the engineering team.

    ---

    Bob Cook (bob.cook@sophos.com) Director, Software Development

  • Thanks for the update, we are still investigating. If you happen to know what website seems to cause it, we'd be much appreciative.

    ---

    Bob Cook (bob.cook@sophos.com) Director, Software Development

  • Another crash for WebInt with the 9.5 Preview. Keeps crashing every few days. Always thread 2/same info at beginning from Process through Report Version.

    Process:         SophosWebIntelligence [155]
    Path:            /Library/Sophos Anti-Virus/SophosWebIntelligence.bundle/Contents/MacOS/SophosWebIntelligence
    Identifier:      SophosWebIntelligence
    Version:         9.5.0 (???)
    Code Type:       X86-64 (Native)
    Parent Process:  launchd [1]
    User ID:         504

    Date/Time:       2016-07-13 11:20:23.514 -0400
    OS Version:      Mac OS X 10.8.5 (12F2560)
    Report Version:  10

    Crashed Thread:  2  Dispatch queue: com.sophos.proxyQueue

    Exception Type:  EXC_CRASH (SIGABRT)
    Exception Codes: 0x0000000000000000, 0x0000000000000000

    Application Specific Information:
    pure virtual method called
    abort() called

    Thread 0:: Dispatch queue: com.apple.main-thread
    0   libsystem_kernel.dylib            0x000000010c4b6686 mach_msg_trap + 10
    1   libsystem_kernel.dylib            0x000000010c4b5c42 mach_msg + 70
    2   com.apple.CoreFoundation          0x000000010beca233 __CFRunLoopServiceMachPort + 195
    3   com.apple.CoreFoundation          0x000000010becf916 __CFRunLoopRun + 1078
    4   com.apple.CoreFoundation          0x000000010becf0e2 CFRunLoopRunSpecific + 290
    5   com.apple.Foundation              0x000000010b8657be -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 268
    6   com.sophos.macendpoint.SophosGenericsCore    0x000000010b70a2f2 -[SGBackgroundService _runWithArgs:] + 229
    7   com.sophos.macendpoint.SophosGenericsCore    0x000000010b70a79e SGBackgroundServiceMain + 600
    8   com.sophos.macendpoint.SophosWebIntelligence    0x000000010b37afc1 main + 219
    9   libdyld.dylib                     0x000000010c2d77e1 start + 1

    Thread 1:: Dispatch queue: com.apple.libdispatch-manager
    0   libsystem_kernel.dylib            0x000000010c4b8d16 kevent + 10
    1   libdispatch.dylib                 0x000000010c29fdea _dispatch_mgr_invoke + 883
    2   libdispatch.dylib                 0x000000010c29f9ee _dispatch_mgr_thread + 54

    Thread 2 Crashed:: Dispatch queue: com.sophos.proxyQueue
    0   libsystem_kernel.dylib            0x000000010c4b8212 __pthread_kill + 10
    1   libsystem_c.dylib                 0x000000010c33cb24 pthread_kill + 90
    2   libsystem_c.dylib                 0x000000010c381031 __abort + 159
    3   libsystem_c.dylib                 0x000000010c380f92 abort + 192
    4   libc++abi.dylib                   0x000000010c1ed9eb abort_message + 257
    5   libc++abi.dylib                   0x000000010c1eb464 __cxa_pure_virtual + 18
    6   com.sophos.macendpoint.SophosWebIntelligence    0x000000010b43913a SMEHTTPProtocolHandler::Hand::bytesAvailable() const + 66
    7   com.sophos.macendpoint.SophosWebIntelligence    0x000000010b4289e8 SME::WebEngine::Impl::Stub::Hand::bytesAvailable() const + 42
    8   com.sophos.macendpoint.SophosWebIntelligence    0x000000010b38ac6e (anonymous namespace)::drain(SME::Flow&, SME::Socket&, SME::Socket&, SME::CharBuffer&, bool) + 74
    9   com.sophos.macendpoint.SophosWebIntelligence    0x000000010b38a976 SME::Connection::notifyRead(SME::Socket::Impl const*) + 606
    10  com.apple.CoreFoundation          0x000000010beebfa5 __CFSocketPerformV0 + 1045
    11  com.apple.CoreFoundation          0x000000010beacb31 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
    12  com.apple.CoreFoundation          0x000000010beac51d __CFRunLoopDoSources0 + 445
    13  com.apple.CoreFoundation          0x000000010becf7f5 __CFRunLoopRun + 789
    14  com.apple.CoreFoundation          0x000000010becf0e2 CFRunLoopRunSpecific + 290
    15  com.sophos.macendpoint.SophosWebIntelligence    0x000000010b38e0ac SME::SocketMultiplex::poll(unsigned long) + 120
    16  com.sophos.macendpoint.SophosWebIntelligence    0x000000010b3888ef SME::Proxy::poll(unsigned long) + 401
    17  com.sophos.macendpoint.SophosWebIntelligence    0x000000010b3797f6 __33-[SMEWebClient startIntercepting]_block_invoke + 469
    18  libdispatch.dylib                 0x000000010c2a0f01 _dispatch_call_block_and_release + 15
    19  libdispatch.dylib                 0x000000010c29d0b6 _dispatch_client_callout + 8
    20  libdispatch.dylib                 0x000000010c29e47f _dispatch_queue_drain + 235
    21  libdispatch.dylib                 0x000000010c29e2f1 _dispatch_queue_invoke + 52
    22  libdispatch.dylib                 0x000000010c29e1c3 _dispatch_worker_thread2 + 249
    23  libsystem_c.dylib                 0x000000010c33dcdb _pthread_wqthread + 404
    24  libsystem_c.dylib                 0x000000010c328191 start_wqthread + 13



  • I have Sophos 9.5 preview installed in Mac OS (aka macOS) 10.12 Sierra beta in a virtual machine. It worked properly in the first beta but I've noticed that since the second beta (16A239) has been released an "Update Now" gives a "failed" message after downloading and installing the update files and an X appears in the Menu Icon. The solution is simply to do another Update Now; nothing new is downloaded but Sophos is again activated.

  • Just noticed, I have several just like this one for the 9.5. Can give full report with crashed thread, if interested.

    Process:         SophosWebIntelligence [166]
    Path:            /Library/Sophos Anti-Virus/SophosWebIntelligence.bundle/Contents/MacOS/SophosWebIntelligence
    Identifier:      SophosWebIntelligence
    Version:         9.5.0 (???)
    Code Type:       X86-64 (Native)
    Parent Process:  launchd [1]
    User ID:         504

    Date/Time:       2016-07-07 12:36:46.761 -0400
    OS Version:      Mac OS X 10.8.5 (12F2560)
    Report Version:  10

    Crashed Thread:  2  Dispatch queue: com.sophos.proxyQueue

    Exception Type:  EXC_CRASH (SIGABRT)
    Exception Codes: 0x0000000000000000, 0x0000000000000000

    Application Specific Information:
    pure virtual method called
    abort() called

  • Thanks Bob, That it might eventually fail, or get dicey, wasn't unexpected.


    One more consideration: when the 9.5 goes live, should I turn off automatic updating at the 9.4.2? Would an update for the 9.5 fail and possibly end up borking the 9.4.2 installation?

  • This procedure will work, at least for a while. We cannot commit that it work indefinitely, as future software updates will certainly introduce new capabilities to the VDB/IDE files. When that occurs (and the VDB/IDE files start using those new features) we cannot guarantee what will happen (we don't test unsupported software combinations). In the best of situations, everything works. In the worst situation, nothing works at all.

    ---

    Bob Cook (bob.cook@sophos.com) Director, Software Development

  • Hi Bob,

    Since it appears to be a matter of the 9.4.2 no longer receiving definitions updates, would this work to keep my 10.6.5/ 9.4.2 going after 9.4.2 EOL: Move over (preserving ownership) the entire av-data folder (which contains all the ide/vdb binaries) from my 10.8.5 or 10.9.5/ 9.4.2, located in /Library/Caches/com.sophos.sau/CID/Sophos Installer Components to my 10.6/ 9.4.2, same location?

    Just checked after updating Sophos in those volumes, and the 9.5 and the 9.4.2 appear to contain exactly the same ide/vdb files.

  • When we release 9.5 in the first week of August, it will go to all endpoints. Anyone still running 10.6 or 10.7 will no longer receive updates (the AutoUpdate process will fail, as the new installer package will not run). This is consistent with the past behavior when we stopped supporting 10.5, and its what we promised when we announced the end of support for 10.6 and 10.7 more than a year ago.

    ---

    Bob Cook (bob.cook@sophos.com) Director, Software Development

  • Question for Bob: when the 9.5 goes live will the older 9.4.2, which still works on 10.6, be EOL? Or will 10.6 users be able to continue with the 9.4.2 and continue to receive definitions updates?