Expedition 1.2.49 Hotfix Information

[dpuigdomenec]

Version 1.2.49 (Date Jan 23, 2023)

PACKAGE DOWNLOAD

	INFORMATION
Link	https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.49.all.deb
sha1sum	cd194a8b8bfabf9730153040d08fe3cb64cb3f88
apt update	sudo apt-get update; sudo apt-get install expedition-beta
manual update	cd /tmp; wget  https://conversionupdates.paloaltonetworks.com/expedition-updates/expedition_1.2.49.all.deb; sudo dpkg -i expedition_1.2.49.all.deb;

CHANGELOG

Bugs

• [MT-2524] - 1.2.49 - Installer - CVE-2022-37026 - Making sure new Installations get the latest version of Erlang and RabbitMQ. More information here: https://live.paloaltonetworks.com/t5/expedition-articles/how-to-address-cve-2022-37026-vulnerability...
• [MT-2542] - 1.2.49 - AutoZone is not working properly for addresses typed as ip-ranges.
• [MT-2516] - 1.2.49 - CISCO - DNAT - New cloned Security rules need to contain the nat_services instead of translated ones.
• [MT-2533] - 1.2.49 - Checkpoint R80+ - Unsupported interfaces defined on Checkpoint "host" type objects.
• [MT-2537] - 1.2.49 - Checkpoint R80+ - Supporting session-timeout override on tcp-service object.
• [MT-2548] - 1.2.49 - Checkpoint R80+ - Static routes are not created properly when routing file contains non-ascii characters
• [MT-2551] - 1.2.49 - Checkpoint R80+ - Translation of Checkpoint's 'cluster-member' object. From now on 'cluster-member' interfaces are translated into Hosts instead of Subnets to assure the intended use from Checkpoint.

New feature

• [MT-2532] - 1.2.49 - VPN IKE and IPSEC SA support on DHGroup 21 for PANOS 10.0+.