UTM Up2Date 9.502 Released

Hi Everyone,

Today we've released UTM 9.502. The release will be rolled out in phases. In phase 1 you can download the update package from our FTP server, in phase 2 we will spread it via our Up2Date servers.

IMPORTANT: The re-join workaround is required after upgrading from 9.501 to 9.502. See: https://community.sophos.com/kb/en-us/126819

[Edit 2017-07-17]: Moved workaround into a KBA.

[Edit 2017-07-18]: Release is available as GA

Up2Date Information

News

• Maintenance Release
• Configuration will be upgraded
• Connected REDs will perform firmware upgrade
• Connected Wifi APs will perform firmware upgrade

Remarks

• System will be rebooted

Bugfixes

• NUTM-8127 [AWS] Link to CloudFormation console during cloudupdate is not working
• NUTM-3213 [Access & Identity] Inconsistent behaviour/state when deleting a user cert
• NUTM-3283 [Access & Identity] IPSec: VPN ID shall not include blanks
• NUTM-3294 [Access & Identity] Menu option (keyboard layout) background not rendered properly in IE (version 11.0.9600.17728)
• NUTM-6972 [Access & Identity] SSLVPN disconnection: backend AD sync
• NUTM-7897 [Access & Identity] Argos doesn't start in HA setup without IP address
• NUTM-7940 [Access & Identity] Client Authentication daemon crashes in HA scenario
• NUTM-7982 [Access & Identity] SSL VPN connection not possible since v9.5 if organisation name contains umlauts
• NUTM-7996 [Access & Identity] Devices authenticated via SAA are no longer associated with multiple user network objects in UTM 9.5
• NUTM-8122 [Access & Identity] L2TP connections with separate DHCP server does not work
• NUTM-8146 [Access & Identity] PPTP fails to connect when Assign IP addresses by is set to DHCP Server
• NUTM-8147 [Access & Identity] OpenVPN vulnerabilities
• NUTM-8161 [Access & Identity] OpenVPN vulnerabilities (client part)
• NUTM-8280 [Access & Identity] High confd load through UMA
• NUTM-8130 [Basesystem] Linux vulnerability 'The Stack Clash'
• NUTM-8156 [Basesystem] Apache httpd vulnerability (CVE-2017-3169)
• NUTM-7235 [Confd] READONLY user can download support package
• NUTM-7425 [Email] Emailenc causing high load - permanently 100% CPU usage
• NUTM-7790 [Email] Restrict long regular expression in WebAdmin
• NUTM-7876 [Email] POP3 Proxy stops working after some time
• NUTM-7889 [Email] Sandbox scan doesn't work - worker_do_get_file req content parsing error or missing parameters
• NUTM-6116 [Network] Service_monitor sets wrong IP address for availability group
• NUTM-7647 [Network] WAN random disconnects
• NUTM-7735 [Network] ATP doesn't work with "Send anonymous application accuracy telemetry data" disabled.
• NUTM-7950 [Network] Dhcp client not running - restarted
• NUTM-8015 [Network] Main interface IP address swapped by additional address for DHCP setup
• NUTM-7543 [Reporting] Calculate correct malware count for ExecReport
• NUTM-7609 [Reporting] Websec-reporter is constantly restarting
• NUTM-7725 [Reporting] High latency while navigating through WebAdmin after trying to display Web Reports
• NUTM-7878 [WAF] Segfault for HTTP 1.0 requests when cookie rewriting is enabled
• NUTM-6845 [Web] https://sslvpn.goodix.com does not loads through UTM PROXY
• NUTM-7467 [Web] Sandstorm communication issues in some configurations
• NUTM-7697 [Web] httpproxy.ConfdReload - core dump generated during configuration reload
• NUTM-7895 [Web] Enable SMB2 in Samba
• NUTM-7939 [Web] Chrome v58 and higher fail verification with HTTPS scanning enabled
• NUTM-7967 [Web] httpproxy coredump
• NUTM-7960 [Web] Authentication issue after upgrade to 9.5 (kerberos)
• NUTM-8110 [Web] Since upgrading to 9.501 authentication stops working every morning
• NUTM-6950 [WiFi] APs displayed as inactive in WebAdmin while clients connect to SSIDs which are still being broadcasted
• NUTM-7495 [WiFi] Wireless client IP in Webadmin not updated after changing the SSID
• NUTM-6646 [AWS, REST API] REST API panic when unlocking unlocked mutex
• NUTM-7962 [WiFi] Split traffic not working for wireless clients on RED15w after upgrade to v9.5