Sophos has released an update for the Shophos UTM. The update fixes the following issues:
- [NUTM-8851]: [Basesystem] System doesn't boot if Posgtresql database cannot start
- [NUTM-7240]: [RED] RED 50 loosing ARP entries of internal machines
- [NUTM-8782]: [RED] RED10, RED15, RED50: Update OpenSSL and TCPdump to most current Version
- [NUTM-8858]: [RED] DNSMasq vulnerabilities
If the update is not yet available via Up2Date, it can be downloaded directly here and installed manually
In the past, there have always been problems with the updates for Sophos UTM, so a backup and extensive tests are mandatory.
Interestingly, the update does not yet include any updates to the WPA2 vulnerability (KRACK), which Sophos still seems to be working on. to work. Hopefully another update will be released soon, although Sophos is already at the back of the pack, as many other manufacturers have already released patches. In my opinion, Sophos should react more quickly here. Slow updates to known vulnerabilities in a "next generation firewall" are somehow contradictory, but that's just my opinion...
Here are the release notes on the Sophos website:
