UTM Up2Date 9.217 released

We've just released a new Up2Date package for all UTM 9.216 users, which provides the following security updates.

Read on for details about this release.

News

• Security Update

Remarks

• System will be rebooted

Bugfixes

• 36128  XSS vulnerability in mod_url_hardening [9.2]
• 36277  XSS vulnerability in mod_avscan [9.2]
• 36291  OpenSSH security update (CVE-2016-0777, CVE-2016-0778) [9.2]
• 36308  Bind Vulnerability CVE-2015-8000 [9.2]
• 36349  ISC DHCP security update (CVE-2015-8605) [9.2]
• 36380  glibc security update (CVE-2015-7547) [9.2]

302ec359b78ef24a854b208808b7c62e

Up2Date Installation

Sophos Up2Date technology makes it easy to upgrade your Sophos UTM to the latest version.
There are two ways to apply an already-downloaded Up2Date package to the system:

1. Log on to WebAdmin, navigate to Management > Up2Date > Overview and use "Update to latest version now" to install the Firmware Up2Date. Click on the "Watch Up2Date Progress in new window" and an extra browser window will show the progress of the Up2Date installation. (The System administrator will receive a notification email once the Up2Date process has finished.)
2. Download the Up2Date package from our HTTP or FTP Server and install it under Management > Up2Date > Advanced.

If you want to provide feedback or want to discuss any of the UTM V9 features you should post it on our User Bulletin Board. Please indicate the version you are using to help us (and everyone helping you).

Feedback

• If you have any feedback on our help, manual, or any documentation (Online Help) please send it to nsg-documentations@sophos.com.
• You are free to use our new demo server environment without hassle, nags, or registration. Enjoy!
• If you have any questions or comments regarding this release, please see our online forums for more information.

Alan Toews
Technical Product Manager