Sophos UTM: New update (9.509-3)

Sophos has released a new update for Sophos UTM today. The update is for version 9.508-10 and upgrades the version to 9.509-3. The update fixes these three issues:

• [NUTM-9619]: [Email] CVE-2018-6789: buffer overflow in base64d function in SMTP listener
• [NUTM-9698]: [Network] After upgrade to 9.508 in VPC IPsec BGP status shows "state error"
• [NUTM-9713]: [Network] BGP not advertising network to all neighbors

The update requires a restart. The problem with the S/MIME signatures is not fixed, but there is now a workaround for this:

• Sophos UTM 9.508-10: Signing mails using S/MIME problematic

In addition, some users have reported problems with the MIME type recognition of Mailprotection since the update to 9.508-10. This problem is also not being addressed.

The update can be downloaded here:

• http://ftp.astaro.de/UTM/v9/up2date/u2d-sys-9.508010-509003.tgz.gpg

As always with Sophos updates: create a backup and test it thoroughly!