Zitat von mpca am 28. März 2022, 16:21 Uhr

https://www.heise.de/news/Sicherheitsupdate-Sophos-Firewall-koennte-Schadcode-passieren-lassen-6653493.html?wt_mc=rss.red.security.alert-news.rdf.beitrag.beitrag

Die Firewall von Sophos ist löchrig. Aktualisierte Versionen lösen das Sicherheitsproblem.

https://www.borncity.com/blog/2022/03/28/fix-fr-schwachstelle-cve-2022-104-in-sophos-firewall-v18-5-mr3/

Verifying if the hotfix for CVE-2022-1040 is applied

Use the following command to check if the hotfix is applied from a shell.

test -f /static/up_mode_json_stamp && echo "Hotfix is applied" || echo "Hotfix isn't applied"

• if the hotfix is applied, it will echo the first string => “Hotfix is applied”
• If not, it will echo the second echo string => "Hotfix isn’t applied"

Example output:

Hotfix is applied

# SFVUNL_SO01_SFOS 18.5.2 MR-2-Build380# test -f /static/up_mode_json_stamp && echo "Hotfix is applied" || echo "Hotfix isn't applied"

Hotfix is applied

Hotfix isn't applied
# SFVUNL_SO01_SFOS 18.5.2 MR-2-Build380# test -f /static/up_mode_json_stamp && echo "Hotfix is applied" || echo "Hotfix isn't applied"

Hotfix isn't applied