Hi XG Community!

We've finished SFOS v16.05.7 MR7. This release is available from within your device for all SFOS v16.05 installations as of now and will increase the group in a few days.

The release is available to all SFOS version via MySophos portal.

Issues Resolved

  • NC-19720 [API] SQL Injection: Application filter add type
  • NC-19721 [API] SQL Injection: Proxy port config
  • NC-19775 [API] SQL Injection: User add/edit
  • NC-20840 [Authentication] SATC: users logged in and logged out continuously
  • NC-19420 [Base System] "Don't register yet " link is not shown in Chinese language
  • NC-19520 [Base System] Hotfix applied multiple times in SF device
  • NC-19558 [Base System] Add kernel patch for 'Stack Clash'
  • NC-19920 [Base System] Several vulnerabilitiy patches for Dropbear (CVE-2016-7409, CVE-2016-7408, CVE-2016-7407, CVE-2016-7406)
  • NC-20753 [Base System] Changing of "admin" password in SFM does not replicate to the XG device and device is inaccessible due to password missmatch
  • NC-21237 [Base System] Linux Kernel vulnerability "Dirty Cow" (CVE-2016-5195)
  • NC-19330 [Firewall] XG live logs show packets out of time order
  • NC-19659 [Firewall] Invalid IP Host import fails but leaves invalid db entries causing system framework failure
  • NC-19674 [Firewall] Unidentified user usage from identity based rule
  • NC-20343 [Firewall] Wrong GeoIP classification for some IP addresses
  • NC-19745 [Hotspot] Hotspot custom voucher is changed to default upon hotspot update
  • NC-19956 [Localization] XG translation error on the firewall policies page for Brazilian (PT-BR) language
  • NC-19300 [Mail Proxy] Unable to parse or decode the contents of the email when the banner contains bare LF
  • NC-19354 [Mail Proxy] Quarantined Emails are not visible in Webadmin
  • NC-19829 [Mail Proxy] Email are bounced with SMTP/s scanning and RBL enabled
  • NC-19873 [Mail Proxy] XG inconsistent NDR notification behaviour
  • NC-19901 [Mail Proxy] Attachment name causing awarrentmta to stop
  • NC-20490 [Mail Proxy] SMTP Quarantine data doesn't load in User Portal for all users
  • NC-20784 [Mail Proxy] SMTP Quarantine data is not loading
  • NC-19621 [Network Services] nslookup / dnslookup commands not using specified server
  • NC-19136 [Networking] Incorrect information in System Graphs for bandwidth usage
  • NC-19598 [Networking] Gateway failover not working
  • NC-19750 [Networking] IPv6 Policy Route not removed from system when gateway is deleted
  • NC-19716 [UI] SQL Injection: Current Activities
  • NC-19753 [UI] SQL Injection: filter function
  • NC-19540 [WAF] WAF - Fix CVE-2017-7679: mod_mime buffer overread
  • NC-19717 [WAF] SQL injection: IPS backend server add
  • NC-19718 [Web] SQL Injection: Proxy file type add
  • NC-20787 [Web] Proxying is allowed through port 8090
  • NC-19719 [Wireless] Blind code execution: Access point edit

Downloads

You can find the firmware for your appliance from in MySophos portal.

Parents
  • I have attempted to upgraded twice to HW-SFOS_16.05.7_MR-7.SF300-305 every time emails stop flowing, my support case has been open over 3 weeks now without solution for this issue. This is very frustrating, and updating this device is extremely nerve wrecking process because you never know what is going to break.  I also rolled back to previous firmware.

Comment
  • I have attempted to upgraded twice to HW-SFOS_16.05.7_MR-7.SF300-305 every time emails stop flowing, my support case has been open over 3 weeks now without solution for this issue. This is very frustrating, and updating this device is extremely nerve wrecking process because you never know what is going to break.  I also rolled back to previous firmware.

Children
No Data