What's New in 6.7.9

This release fixes an important security issue described in Fortinet PSIRT Advisory FG-IR-23-130 impacting Supervisor and Worker nodes.

This release includes published Rocky Linux OS updates until January 16, 2024. The list of updates can be found at https://errata.rockylinux.org/. FortiSIEM Rocky Linux Repositories (os-pkgs-cdn.fortisiem.fortinet.com and os-pkgs-r8.fortisiem.fortinet.com) have also been updated to include fixes until January 16, 2024. Therefore, FortiSIEM customers in versions 6.4.1 and above, can upgrade only their Rocky Linux versions by following the procedures described in FortiSIEM OS Update Procedure.

One Known Issue is as follows: Once you have installed version 6.7.9, for future upgrades, you will need to upgrade to version 7.0.3 or later. Upgrade to version 7.0.2 will fail.

This release also includes the following bug fixes and enhancements.

Bug ID	Severity	Module	Description
991851	Major	Performance Monitoring	phPerfMonitor module crashes when both STM and perf monitoring are defined.
953313	Minor	App Server	In Enterprise mode, audit log is not generated when rule is activated or deactivated.
952241	Minor	App Server	Occasional NullPointerException error when testing a rule.
937174	Minor	App Server	During Upgrade and Content Update, GUI shows many Collector status as 'inwaiting'.
965081	Minor	Query Engine	Legend does not show due to order of trend result not being retained by Query Engine.
965077	Enhancement	App Server	Handle AlienVault integration via new native STIX/TAXII 2.1 based API.