Support Center > Search Results > SecureKnowledge Details
R77.30 Recommended Hotfixes
Solution

This article lists public Hotfixes available to install on top of R77.30.

The hotfixes in this table are accumulative, i.e., the latest hotfix appears at the top of the table and includes previous hotfixes that appear in the table.

Downloads for Gaia OS

Use CPUSE in the Gaia Portal / Gaia Clish to quickly and easily update Check Point products.

In order to download some of the packages you will need to have a Software Subscription or Active Support plan.

  Hotfix Description Release Date Gaia
CPUSE
Offline
Gaia
Legacy
CLI
Hotfix # 6 sk106162 - Jumbo Hotfix Accumulator for R77.30 (Take_338) 20 Sep 2018 (TGZ) N / A
Hotfix # 5 sk108192 - R77.30 - Security and stability enhancements for Security Gateway 25 Nov 2015 Included in
Recommended
Hotfix # 6
Included in
Recommended
Hotfix # 6
Hotfix # 4 sk106994 - R77.30 - Improved overlapping rules verification and H.323 protocol stability 10 Aug 2015 Included in
Recommended
Hotfix # 6
Included in
Recommended
Hotfix # 6
Hotfix # 3 sk106499 - Check Point response to CVE-2015-2808 (Bar Mitzvah) and OpenSSL CVE-2015-1789 (*) 06 July 2015 Included in
Recommended
Hotfix # 6
Included in
Recommended
Hotfix # 6
Hotfix # 2 sk106334 - Memory consumption on Security Gateway with enabled Anti-Virus blade increases during inspection of CIFS traffic 09 June 2015 Included in
Recommended
Hotfix # 6
Included in
Recommended
Hotfix # 6
Hotfix # 1 sk106196 - Policy installation might fail with "ERROR: stab identifier <lsv_profiles> for host redefined" 31 May 2015 Included in
Recommended
Hotfix # 6
Included in
Recommended
Hotfix # 6

(*) Additional configuration changes are required. Refer to the corresponding solution.

Notes:

  • For symptoms and installation instructions, refer to the Hotfix Description articles that appear in the table.
  • Some hotfixes are relevant to specific operating systems only.

 

Downloads for SecurePlatform, Linux, IPSO, Windows

Show / Hide downloads

In order to download some of the packages you will need to have a Software Subscription or Active Support plan.

  Hotfix Description Release Date SecurePlatform,
Linux
IPSO Windows
Hotfix # 5 sk108192 - R77.30 - Security and stability enhancements for Security Gateway 25 Nov 2015 (TGZ) (TGZ) (TGZ)
Hotfix # 4 sk106994 - R77.30 - Improved overlapping rules verification and H.323 protocol stability 10 Aug 2015 Included in
Recommended
Hotfix # 5
Included in
Recommended
Hotfix # 5
Included in
Recommended
Hotfix # 5
Hotfix # 3 sk106499 - Check Point response to CVE-2015-2808 (Bar Mitzvah) and OpenSSL CVE-2015-1789 (*) 06 July 2015 Included in
Recommended
Hotfix # 5
Included in
Recommended
Hotfix # 5
Included in
Recommended
Hotfix # 5
Hotfix # 2 sk106334 - Memory consumption on Security Gateway with enabled Anti-Virus blade increases during inspection of CIFS traffic 09 June 2015 Included in
Recommended
Hotfix # 5
N/A N/A
Hotfix # 1 sk106196 - Policy installation might fail with "ERROR: stab identifier <lsv_profiles> for host redefined" 31 May 2015 Included in
GA Take 207
Included in
Recommended
Hotfix # 5
Included in
GA Take 207

(*) Additional configuration changes are required. Refer to the corresponding solution.

Notes:

  • For symptoms and installation instructions, refer to the Hotfix Description articles that appear in the table.
  • Some hotfixes are relevant to specific operating systems only.

 

Generic Installation Instructions

  • Instructions for Gaia OS using CPUSE (Check Point Update Service Engine)

    • Online installation in Gaia Portal

      1. Connect to the Gaia Portal on your Check Point machine and navigate to Upgrades (CPUSE) section - click on Status and Actions.
      2. Click on the filter button near the help icon and select All.
      3. Select the hotfix package - click on More button on the toolbar - click on Verifier (or right-click on the package and click on Verifier).
      4. Select the package - click on Install Update button on the toolbar.
      5. Reboot is required.
    • Online installation in Gaia Clish

      1. Connect to command line on Gaia OS and log in to Clish.
      2. Acquire the lock over Gaia configuration database:
        HostName:0> lock database override
      3. Check the available packages (refer to the top section "Hotfixes"):
        HostName:0> show installer packages available-for-download
      4. Verify that this package can be installed without conflicts:
        HostName:0> installer verify <Package_Number>
      5. Download the hotfix package from the Check Point Cloud:
        HostName:0> installer download <Package_Number>
      6. Show the downloaded packages:
        HostName:0> show installer packages downloaded
      7. Install the downloaded package:
        HostName:0> installer install <Package_Number>
        Note: The progress (in per cent) will be displayed in Clish.
      8. Reboot is required.
    • Offline installation in Gaia Portal

      1. Download the Gaia CPUSE Offline package from the table above.
      2. Install the latest build of CPUSE Agent from sk92449.
      3. Connect to the Gaia Portal on your Check Point machine and navigate to Software Updates section - click on Status and Actions.
      4. On the toolbar, click on the More button and select Import Package.
      5. In the Import Package window, click on Browse... - select the CPUSE package you downloaded in Step 1 - click on Upload.
      6. Select the imported package - click on More button on the toolbar - click on Verifier (or right-click on the package and click on Verifier).
      7. Select the imported package - click on Install Update button on the toolbar.
      8. Reboot is required.
    • Offline installation in Gaia Clish

      1. Download the Gaia CPUSE Offline package from the table above.
      2. Transfer the downloaded CPUSE Offline package to Gaia machine (into some directory, e.g., /some_path_to_package/).
      3. Install the latest build of CPUSE Agent from sk92449.
      4. Connect to command line on Gaia OS and log in to Clish.
      5. Acquire the lock over Gaia configuration database:
        HostName:0> lock database override
      6. Import the package from the hard disk:
        HostName:0> installer import local /some_path_to_package/<Package_File_Name>.tgz
        Note: When import completes, this package is deleted from the original location.
      7. Check the imported packages (refer to the top section "Hotfixes"):
        HostName:0> show installer packages imported
      8. Verify that this package can be installed without conflicts:
        HostName:0> installer verify <Package_Number>
      9. Install the imported package:
        HostName:0> installer install <Package_Number>
        Note: The progress (in per cent) will be displayed in Clish.
      10. Reboot is required.

    Notes:

    • For detailed installation instructions, refer to sk92449: CPUSE - Gaia Software Updates (including Gaia Software Updates Agent) - section "(4) How to work with CPUSE".
    • Make sure to take a snapshot of your Check Point machine before installing this hotfix.
    • Hotfix has to be installed on all Check Point machines running on Gaia OS.
    • In cluster environment, this procedure must be performed on all members of the cluster.
    • In Management HA environment, this procedure must be performed on both Management Servers.


  • Instructions for SecurePlatform OS and Linux OS

    1. Download the relevant hotfix package from the table above and transfer the hotfix package to the machine.
    2. Unpack and install the hotfix package:
      [Expert@HostName]# tar -zxvf <HOTFIX_NAME>.tgz
      [Expert@HostName]# ./UnixInstallScript
      Note: The script will stop all of Check Point services (cpstop) - read the output on the screen.
    3. Reboot is required.

    Notes:

    • Make sure to take a snapshot of your Check Point machine before installing this hotfix (on SecurePlatform OS).
    • Hotfix has to be installed on all Check Point machines running on SecurePlatform OS / Linux OS.
    • In cluster environment, this procedure must be performed on all members of the cluster.
    • In Management HA environment, this procedure must be performed on both Management Servers.


  • Instructions for IPSO OS

    1. Download the relevant hotfix package from the table above and transfer the hotfix package to the machine.
    2. Unpack and install the hotfix package:
      [admin]# tar -zxvf <HOTFIX_NAME>.tgz
      [admin]# ./UnixInstallScript
      Note: The script will stop all of Check Point services (cpstop) - read the output on the screen.
    3. Reboot is required.

    Notes:

    • Hotfix has to be installed on all Check Point machines running on IPSO OS.
    • In cluster environment, this procedure must be performed on all members of the cluster.
    • In Management HA environment, this procedure must be performed on both Management Servers.


  • Instructions for Windows OS

    1. Download the relevant hotfix package from the table above, transfer the hotfix package to the machine.
    2. Unpack the hotfix package using an archive program (e.g., WinZIP, WinRAR, 7-zip, etc.).
    3. Install the hotfix: Right-click on the Setup.exe - click on Run as administrator
      Note: The script will stop all of Check Point services (cpstop) - read the output on the screen.
    4. Reboot is required.

    Notes:

    • Hotfix has to be installed on all Check Point machines running on Windows OS.
    • In cluster environment, this procedure must be performed on all members of the cluster.
    • In Management HA environment, this procedure must be performed on both Management Servers.

 

Revision History

Show / Hide the revision history

Date Description
22 Apr 2018       * Replaced Take 216 with Take 302 of sk106162 for Gaia OS. 
08 Oct 2017
  • Replaced Take 216 with Take 286 of sk106162 for Gaia OS
18 Feb 2017
  • Replaced Take 205 with Take 216 of sk106162 for Gaia OS
11 Feb 2017
  • Removed the section "Instructions for Gaia OS using Legacy installation in Command Line" (because it is deprecated on Gaia OS - CPUSE should be used for all installations)
16 Dec 2016
  • Replaced Take 185 with Take 205 of sk106162 for Gaia OS
14 Nov 2016
  • Replaced Take 159 with Take 185 of sk106162 for Gaia OS
25 Nov 2015
25 Nov 2015
10 Aug 2015
06 July 2015
29 June 2015
  • Added generic installation instructions for hotfixes
  • Changed the design of "Downloads" table
09 June 2015
  • First release of this document

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment