FortiOS 5.4.9 is out!

[bommi]

https://docs.fortinet.com...os-5.4.9-release-notes

[kphed · Accepted solution]

nick22d - Thanks for the reply.  Unfortunately, as a large MSSP for predominately financial institutions, we cannot upgrade our customers' Fortigates to a new FortiOS just because it's the "latest version".  All the HA and GUI bugs that arose in FortiOS v5.4.6 and v5.4.7 are great examples of why one should not blindly upgrade to the new firmware iteration before extensive testing is complete.

[bommi · Accepted solution]

Hi,

both CVEs are now public:

https://fortiguard.com/psirt/FG-IR-17-231

https://fortiguard.com/psirt/FG-IR-17-245

Regards

bommi

[kphed]

Has anyone upgraded to v5.4.9?  Is anyone experiencing any issues with v5.4.8 to justify upgrading to v5.4.9?

Our organization recently adopted v5.4.8 and have not experienced any issues as of late with approximately 100+ Fortigates of varying models running full UTMs.

[Nicholas_Doropoulos]

It is generally considered a best practice to keep your Fortigate up to date with the latest version installed. One of the main benefits is patching previously discovered vulnerabilities. Have a look at the link below for issues related to specific versions of Fortigate:

[link]https://fortiguard.com/[/link]

[kphed · Accepted solution]

nick22d - Thanks for the reply.  Unfortunately, as a large MSSP for predominately financial institutions, we cannot upgrade our customers' Fortigates to a new FortiOS just because it's the "latest version".  All the HA and GUI bugs that arose in FortiOS v5.4.6 and v5.4.7 are great examples of why one should not blindly upgrade to the new firmware iteration before extensive testing is complete.

[simonorch]

There are two CVE's i can't find any information on, only that the numbers are reserved.

Anyone know more?

2017-14185 2017-14187

[ddskier]

Upgraded a couple of development / test firewalls from 5.4.8 to 5.4.9.    Don't see any issues associated to the upgrade.

Will report as I ssslllloooowwwwllly roll this upgrade out to various production firewalls.

[ddskier]

Rolled this version out everywhere.  No issues.

[r0bbienz]

Same here - rolled out in weekend on a 100d cluster and no issues - my problem with the browser crashing when looking at fortiview cloud applications isnt fixed :(

[Baptiste]

Since upgrade to 5.4.9, some VPN SSL users complain that they are frequently disconnected.

do you have same issue ?

[bommi]

Just check if you see an crash of the sslvpnd using this command:

diag debug crashlog read

Regards

bommi