This article lists public Hotfixes available to install on top of R77.30.

The hotfixes in this table are accumulative, i.e., the latest hotfix appears at the top of the table and includes previous hotfixes that appear in the table.

Downloads for Gaia OS

Use CPUSE in the Gaia Portal / Gaia Clish to quickly and easily update Check Point products.

In order to download some of the packages you will need to have a Software Subscription or Active Support plan.

	Hotfix Description	Release Date	Gaia CPUSE Offline	Gaia Legacy CLI
Hotfix # 6	sk106162 - Jumbo Hotfix Accumulator for R77.30 (Take_338)	20 Sep 2018	(TGZ)	N / A
Hotfix # 5	sk108192 - R77.30 - Security and stability enhancements for Security Gateway	25 Nov 2015	Included in Recommended Hotfix # 6	Included in Recommended Hotfix # 6
Hotfix # 4	sk106994 - R77.30 - Improved overlapping rules verification and H.323 protocol stability	10 Aug 2015	Included in Recommended Hotfix # 6	Included in Recommended Hotfix # 6
Hotfix # 3	sk106499 - Check Point response to CVE-2015-2808 (Bar Mitzvah) and OpenSSL CVE-2015-1789 (*)	06 July 2015	Included in Recommended Hotfix # 6	Included in Recommended Hotfix # 6
Hotfix # 2	sk106334 - Memory consumption on Security Gateway with enabled Anti-Virus blade increases during inspection of CIFS traffic	09 June 2015	Included in Recommended Hotfix # 6	Included in Recommended Hotfix # 6
Hotfix # 1	sk106196 - Policy installation might fail with "ERROR: stab identifier <lsv_profiles> for host redefined"	31 May 2015	Included in Recommended Hotfix # 6	Included in Recommended Hotfix # 6

(*) Additional configuration changes are required. Refer to the corresponding solution.

Notes:

• For symptoms and installation instructions, refer to the Hotfix Description articles that appear in the table.
• Some hotfixes are relevant to specific operating systems only.

 

Downloads for SecurePlatform, Linux, IPSO, Windows

 

Generic Installation Instructions

• Instructions for Gaia OS using CPUSE (Check Point Update Service Engine)
  
  

  • Online installation in Gaia Portal

    1. Connect to the Gaia Portal on your Check Point machine and navigate to Upgrades (CPUSE) section - click on Status and Actions.
    2. Click on the filter button near the help icon and select All.
    3. Select the hotfix package - click on More button on the toolbar - click on Verifier (or right-click on the package and click on Verifier).
    4. Select the package - click on Install Update button on the toolbar.
    5. Reboot is required.

  • Online installation in Gaia Clish

    1. Connect to command line on Gaia OS and log in to Clish.
    2. Acquire the lock over Gaia configuration database:
       HostName:0> lock database override
    3. Check the available packages (refer to the top section "Hotfixes"):
       HostName:0> show installer packages available-for-download
    4. Verify that this package can be installed without conflicts:
       HostName:0> installer verify <Package_Number>
    5. Download the hotfix package from the Check Point Cloud:
       HostName:0> installer download <Package_Number>
    6. Show the downloaded packages:
       HostName:0> show installer packages downloaded
    7. Install the downloaded package:
       HostName:0> installer install <Package_Number>
       Note: The progress (in per cent) will be displayed in Clish.
    8. Reboot is required.

  • Offline installation in Gaia Portal

    1. Download the Gaia CPUSE Offline package from the table above.
    2. Install the latest build of CPUSE Agent from sk92449.
    3. Connect to the Gaia Portal on your Check Point machine and navigate to Software Updates section - click on Status and Actions.
    4. On the toolbar, click on the More button and select Import Package.
    5. In the Import Package window, click on Browse... - select the CPUSE package you downloaded in Step 1 - click on Upload.
    6. Select the imported package - click on More button on the toolbar - click on Verifier (or right-click on the package and click on Verifier).
    7. Select the imported package - click on Install Update button on the toolbar.
    8. Reboot is required.

  • Offline installation in Gaia Clish

    1. Download the Gaia CPUSE Offline package from the table above.
    2. Transfer the downloaded CPUSE Offline package to Gaia machine (into some directory, e.g., /some_path_to_package/).
    3. Install the latest build of CPUSE Agent from sk92449.
    4. Connect to command line on Gaia OS and log in to Clish.
    5. Acquire the lock over Gaia configuration database:
       HostName:0> lock database override
    6. Import the package from the hard disk:
       HostName:0> installer import local /some_path_to_package/<Package_File_Name>.tgz
       Note: When import completes, this package is deleted from the original location.
    7. Check the imported packages (refer to the top section "Hotfixes"):
       HostName:0> show installer packages imported
    8. Verify that this package can be installed without conflicts:
       HostName:0> installer verify <Package_Number>
    9. Install the imported package:
       HostName:0> installer install <Package_Number>
       Note: The progress (in per cent) will be displayed in Clish.
    10. Reboot is required.

  Notes:

  • For detailed installation instructions, refer to sk92449: CPUSE - Gaia Software Updates (including Gaia Software Updates Agent) - section "(4) How to work with CPUSE".
  • Make sure to take a snapshot of your Check Point machine before installing this hotfix.
  • Hotfix has to be installed on all Check Point machines running on Gaia OS.
  • In cluster environment, this procedure must be performed on all members of the cluster.
  • In Management HA environment, this procedure must be performed on both Management Servers.

  
  
  
• Instructions for SecurePlatform OS and Linux OS
  
  

  1. Download the relevant hotfix package from the table above and transfer the hotfix package to the machine.
  2. Unpack and install the hotfix package:
     [Expert@HostName]# tar -zxvf <HOTFIX_NAME>.tgz
     [Expert@HostName]# ./UnixInstallScript
     Note: The script will stop all of Check Point services (cpstop) - read the output on the screen.
  3. Reboot is required.

  Notes:

  • Make sure to take a snapshot of your Check Point machine before installing this hotfix (on SecurePlatform OS).
  • Hotfix has to be installed on all Check Point machines running on SecurePlatform OS / Linux OS.
  • In cluster environment, this procedure must be performed on all members of the cluster.
  • In Management HA environment, this procedure must be performed on both Management Servers.

  
  
  
• Instructions for IPSO OS
  
  

  1. Download the relevant hotfix package from the table above and transfer the hotfix package to the machine.
  2. Unpack and install the hotfix package:
     [admin]# tar -zxvf <HOTFIX_NAME>.tgz
     [admin]# ./UnixInstallScript
     Note: The script will stop all of Check Point services (cpstop) - read the output on the screen.
  3. Reboot is required.

  Notes:

  • Hotfix has to be installed on all Check Point machines running on IPSO OS.
  • In cluster environment, this procedure must be performed on all members of the cluster.
  • In Management HA environment, this procedure must be performed on both Management Servers.

  
  
  
• Instructions for Windows OS
  
  

  1. Download the relevant hotfix package from the table above, transfer the hotfix package to the machine.
  2. Unpack the hotfix package using an archive program (e.g., WinZIP, WinRAR, 7-zip, etc.).
  3. Install the hotfix: Right-click on the Setup.exe - click on Run as administrator
     Note: The script will stop all of Check Point services (cpstop) - read the output on the screen.
  4. Reboot is required.

  Notes:

  • Hotfix has to be installed on all Check Point machines running on Windows OS.
  • In cluster environment, this procedure must be performed on all members of the cluster.
  • In Management HA environment, this procedure must be performed on both Management Servers.

 

Revision History