Expedition 1.2.49 Hotfix Information

dpuigdomenec — Mon, 23 Jan 2023 15:01:21 GMT

Version 1.2.49 (Date Jan 23, 2023)

	INFORMATION
Link	https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.49.all.deb
sha1sum	cd194a8b8bfabf9730153040d08fe3cb64cb3f88
apt update	sudo apt-get update; sudo apt-get install expedition-beta
manual update	cd /tmp; wget https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.49.all.deb; sudo dpkg -i expedition_1.2.49.all.deb;

CHANGELOG

[MT-2524] - 1.2.49 - Installer - CVE-2022-37026 - Making sure new Installations get the latest version of Erlang and RabbitMQ. More information here: https://live.paloaltonetworks.com/t5/expedition-articles/how-to-address-cve-2022-37026-vulnerability-in-expedition/ta-p/524133
[MT-2542] - 1.2.49 - AutoZone is not working properly for addresses typed as ip-ranges.
[MT-2516] - 1.2.49 - CISCO - DNAT - New cloned Security rules need to contain the nat_services instead of translated ones.
[MT-2533] - 1.2.49 - Checkpoint R80+ - Unsupported interfaces defined on Checkpoint "host" type objects.
[MT-2537] - 1.2.49 - Checkpoint R80+ - Supporting session-timeout override on tcp-service object.
[MT-2548] - 1.2.49 - Checkpoint R80+ - Static routes are not created properly when routing file contains non-ascii characters
[MT-2551] - 1.2.49 - Checkpoint R80+ - Translation of Checkpoint's 'cluster-member' object. From now on 'cluster-member' interfaces are translated into Hosts instead of Subnets to assure the intended use from Checkpoint.

[MT-2532] - 1.2.49 - VPN IKE and IPSEC SA support on DHGroup 21 for PANOS 10.0+.