List of CVE and half a solution

[Hugo_vd_Kooij]

Based on https://blog.checkpoint.com/security/check-point-frontier-ai-models-readiness-program-security-updat... and the 6 relates Secure Knowledge articless we have started the patch process for devices.

But there is a kink. There is no solution for the 1530/.1550/170/1590 appliances.

I follow the breacdcrumbs to https://support.checkpoint.com/results/sk/sk184981 which showa a link for the R80.10.17 firmware.

So I follow https://support.checkpoint.com/results/sk/sk183153 and go to the download section.

Download Package	1500 Appliances	1595R Appliances	1600 / 1800 / 1900 / 2000 Appliances
R81.10.17 Build 996004892 for Local Installation	(IMG)	(IMG)	(IMG)
R81.10.17 Build 996004892 for Central Deployment in SmartConsole	(TAR)	(TAR)	(TAR)
R81.10.17 Build 996004892 for SmartUpdate	(TGZ)	(TGZ)	(TGZ)

For the 1530 I follow the link to https://support.checkpoint.com/results/download/143412

But here it states ... 

• Platforms1575R, 15X5

So something is definitly not right. Its this still an aftermath of the leapyear bug and and am I a day too soon?

[Hugo_vd_Kooij]

TAC case for this is 6-0004609572

And just to be sure. We tried the image on a 1530. It installed. It rebooted with it once. But the second reboot did a rollback. 

[PhoneBoy]

It may be the file is labeled incorrectly on the backend.
Tagging @Sergei_Shir to confirm.

I actually installed this on one of my 1590s this afternoon and have done a couple of reboots since.
Seems to be sticking for me. 

[Hugo_vd_Kooij]

We have tested this on:

1. 1570 by colleague 1
2. 1530 by colleague 2
3. 1530 by myself

Number 1 took over15 minutes before it came back online with the old firmware.

Number 2 took 10 minutes to come back with the old firmware.

Number 3 came back with the new firmware. But then I did a second reboot and it perform a rollback.

That is when we aborted the plannned upgrades and logged a ticket.

To be honest I am not thrilled about the workaround that Itay suggested. (Switch to locally managed, upgrade, switch to centrally managed.) As it involves a rather lengthy downtime for the VPN connections.

[Hugo_vd_Kooij]

To validate the file .... it matches the published SHA1 and SHA256 hashes.

PS S:\CheckPoint\1500> cat fw1_vx_dep_R81_10_17_996004892.img.txt
R81.10.17 Build 996004892 for 1500 Appliances

Size 219.4 MB
Date Published 2026-05-26
Description R81.10.17 Build 996004892 for 1500 Appliances
Product Spark Firewall
Version R81.10.x
Platforms 1575R, 15X5
OS Gaia Embedded
File Name fw1_vx_dep_R81_10_17_996004892.img
Revision 1

To ensure the integrity of your file, kindly verify the checksum value
SHA1 7ba783cf0eddd3afe7b8221f6fff1f08e581ac5f
SHA256 f257bdec4b5bc634aca74461110a19ab28df7a893c49449cf2d26a43761db959
PS S:\CheckPoint\1500> get-filehash s:\CheckPoint\1500\fw1_vx_dep_R81_10_17_996004892.img -Algorithm SHA1

Algorithm Hash Path
--------- ---- ----
SHA1 7BA783CF0EDDD3AFE7B8221F6FFF1F08E581AC5F S:\CheckPoint\1500\fw1_vx_dep...

PS S:\CheckPoint\1500> get-filehash s:\CheckPoint\1500\fw1_vx_dep_R81_10_17_996004892.img -Algorithm SHA256

Algorithm Hash Path
--------- ---- ----
SHA256 F257BDEC4B5BC634ACA74461110A19AB28DF7A893C49449CF2D26A43761DB959 S:\CheckPoint\1500\fw1_vx_dep...