R81.20 New Recommended Jumbo - Take #65

[MatanYanay]

Hi All

R81.20 Jumbo HF Take #65 is now our Recommended Jumbo take and is available for download to all via CPUSE (as recommended) and via Jumbo documentation (R81.20 ) 

Release Highlight:

• PRJ-55496 - CVE-2024-24919 - Quantum Security Gateway Information Disclosure. Refer to sk182336.
• PRJ-55471 - Remote Access VPN for local accounts authenticated only with Check Point password created in R80.20 or lower and not updated after the upgrade to R80.30 is blocked until the password is reset. Refer to sk182336.

A full list of resolved issues can be found in the Jumbo documentation ( R81.20) 

Note:

• Central Deployment allows you to perform a batch deployment of Hotfixes on your Security Gateways and clusters from SmartConsole!! For more information, see sk168597.
• With Blink images, you can upgrade your environment to the required Major version including its recommended Jumbo hotfix in one Step, using a single image file.

You can install Blink images using CPUSE – More details can be found in sk120193

Thanks,

Release Operations Group

[the_rock]

AWESOME news 🙂

[Moudar]

Does this release include a fix for: "Categorized HTTPS Sites" option does not classify specific websites when "TLS 1.3 hybridized Kyber support".

[the_rock]

@Moudar 

Based on below, does not appear so.

Andy

https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/R81.20/Take_65.htm?tocpath=_____5

[Chris_Atkinson]

@Moudar Yes, please refer PRJ-55345,
PMTR-104752

[the_rock]

Good catch @Chris_Atkinson ...sorry @Moudar , my bad, totally missed that.

Andy

[dt7]

How does this new Take affect the deployment of the hotfixes that were released as part of sk182336?

If we already deployed the CVE-2024-24919 hotfix + the Remote Access VPN hotfix on the gateways, does the installation of this update uninstall those or it just skips them if they are already present?

[MatanYanay]

Hi @dt7,

You should not have any issues with these specific hotfixes as they are part of take 65 

if you have other HFs installed you need to get a port fix for them to be created on top of take 65 ( if they are not part of this take already )

Thanks 

Matan.

[the_rock]

@dt7 

@MatanYanay is 100% right! I tested this in the lab by installing cve patch on top of jumbo 41, rebooted, then installed take 65, no issues.

Andy