Hi XG Community!

We’ve finished SFOS v16.05.7 MR7. This release is available from within your device for all SFOS v16.05 installations as of now and will increase the group in a few days.

The release is available to all SFOS version via MySophos portal.

Issues Resolved

• NC-19720 [API] SQL Injection: Application filter add type
• NC-19721 [API] SQL Injection: Proxy port config
• NC-19775 [API] SQL Injection: User add/edit
• NC-20840 [Authentication] SATC: users logged in and logged out continuously
• NC-19420 [Base System] “Don’t register yet ” link is not shown in Chinese language
• NC-19520 [Base System] Hotfix applied multiple times in SF device
• NC-19558 [Base System] Add kernel patch for ‘Stack Clash’
• NC-19920 [Base System] Several vulnerabilitiy patches for Dropbear (CVE-2016-7409, CVE-2016-7408, CVE-2016-7407, CVE-2016-7406)
• NC-20753 [Base System] Changing of “admin” password in SFM does not replicate to the XG device and device is inaccessible due to password missmatch
• NC-21237 [Base System] Linux Kernel vulnerability “Dirty Cow” (CVE-2016-5195)
• NC-19330 [Firewall] XG live logs show packets out of time order
• NC-19659 [Firewall] Invalid IP Host import fails but leaves invalid db entries causing system framework failure
• NC-19674 [Firewall] Unidentified user usage from identity based rule
• NC-20343 [Firewall] Wrong GeoIP classification for some IP addresses
• NC-19745 [Hotspot] Hotspot custom voucher is changed to default upon hotspot update
• NC-19956 [Localization] XG translation error on the firewall policies page for Brazilian (PT-BR) language
• NC-19300 [Mail Proxy] Unable to parse or decode the contents of the email when the banner contains bare LF
• NC-19354 [Mail Proxy] Quarantined Emails are not visible in Webadmin
• NC-19829 [Mail Proxy] Email are bounced with SMTP/s scanning and RBL enabled
• NC-19873 [Mail Proxy] XG inconsistent NDR notification behaviour
• NC-19901 [Mail Proxy] Attachment name causing awarrentmta to stop
• NC-20490 [Mail Proxy] SMTP Quarantine data doesn’t load in User Portal for all users
• NC-20784 [Mail Proxy] SMTP Quarantine data is not loading
• NC-19621 [Network Services] nslookup / dnslookup commands not using specified server
• NC-19136 [Networking] Incorrect information in System Graphs for bandwidth usage
• NC-19598 [Networking] Gateway failover not working
• NC-19750 [Networking] IPv6 Policy Route not removed from system when gateway is deleted
• NC-19716 [UI] SQL Injection: Current Activities
• NC-19753 [UI] SQL Injection: filter function
• NC-19540 [WAF] WAF – Fix CVE-2017-7679: mod_mime buffer overread
• NC-19717 [WAF] SQL injection: IPS backend server add
• NC-19718 [Web] SQL Injection: Proxy file type add
• NC-20787 [Web] Proxying is allowed through port 8090
• NC-19719 [Wireless] Blind code execution: Access point edit

Downloads

You can find the firmware for your appliance from in MySophos portal.