What's New in 7.1.8
This release contains the following bug fixes and enhancements.
System Update
This release includes Rocky Linux OS 8.10 patches until March 17, 2025. Details can be found at https://rockylinux.org/news/rocky-linux-8-10-ga-release. FortiSIEM Rocky Linux Repositories (os-pkgs-cdn.fortisiem.fortinet.com and os-pkgs-r8.fortisiem.fortinet.com) have also been updated to include Rocky Linux 8.10. FortiSIEM customers in versions 6.4.1 and above, can upgrade their Rocky Linux versions by following the FortiSIEM OS Update Procedure.
Bug Fixes and Enhancements
|
Bug ID |
Severity |
Module |
Description |
|---|---|---|---|
| 1077901 | Major | App Server | Improve App Server performance by handling PostGreSQL Idle Transaction issue. |
|
1079987 |
Major |
Parser |
Improper TLS handling can result in phParser module consuming large memory. |
|
1116583 |
Enhancement |
System |
Enable FortiSIEM deployment for VMware versions 7 and 8. |
| 1012778 |
Enhancement |
System |
Change pg_dump output from gzip to pigz for faster processing. |
Implementation Notes
PostGreSQL Related
FortiSIEM 7.1.8 includes PostGreSQL v13.14 containing the patch for CVE-2024-0985.
-
If you are doing a fresh install of FortiSIEM 7.1.8, then the patch is included and there is nothing to do.
-
If you are upgrading to FortiSIEM 7.1.8, then the patch is included and there is nothing to do.
-
If you want to remain on a version of FortiSIEM 7.1.4 or earlier, then you can't get this patch by running
yum upgrade, since Postgres changed the repo gpg key as per this change
(https://yum.postgresql.org/news/pgdg-rpm-repo-gpg-key-update/). To get this Postgres patch, on the Supervisor, run the following script:
curl -s https://os-pkgs-cdn.fortisiem.fortinet.com/postgres/misc/switch-pgdg-repo-and-upgrade-to-pg13.14.sh | bash -xe
Post-Upgrade ClickHouse IP Index Rebuilding
If you are upgrading ClickHouse based deployment from pre-7.1.1 to 7.1.8, then after upgrading to 7.1.8, you need to run a script to rebuild ClickHouse indices. If you are running 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6 or 7.1.7, and have already executed the rebuilding steps, then nothing more needs to be done.
For details about this issue, see Release Notes 7.1.3 Known Issue.
The rebuilding steps are available in Release Notes 7.1.4 - Script for Rebuilding/Recreating pre-7.1.1 ClickHouse Database Indices Involving IP Fields.
Upgrade Related
You may encounter a blank Global Dashboard after upgrading to 7.1.8. There are two workarounds.
-
If you have not upgraded yet, then run the script
updateDashboard.sh -
If you have upgraded to 7.1.8 and then see a blank Global Dashboard, then run the script
updateImportDashboard.sh