What's New in 7.1.9

This release contains the following bug fixes and enhancements.

• System Update
• Linux Agent Update
• Bug Fixes and Enhancements
• Implementation Notes

System Update

This release includes Rocky Linux OS 8.10 patches until October 22, 2025. Details can be found at https://rockylinux.org/news/rocky-linux-8-10-ga-release. FortiSIEM Rocky Linux Repositories (os-pkgs-cdn.fortisiem.fortinet.com and os-pkgs-r8.fortisiem.fortinet.com) have also been updated to include Rocky Linux 8.10. FortiSIEM customers in versions 6.4.1 and above, can upgrade their Rocky Linux versions by following the FortiSIEM OS Update Procedure.

Linux Agent Update

This release updates the Linux Agent code signing certificate.

Bug Fixes and Enhancements

This release fixes the following bug:

Bug ID	Severity	Module	Description
1206464	Minor	System	"configFSM.sh" run failed on Hardware Appliances during re-installation.

Implementation Notes

• PostGreSQL Related
• Post-Upgrade ClickHouse IP Index Rebuilding
• Upgrade Related

PostGreSQL Related

FortiSIEM 7.1.9 includes PostGreSQL v13.14 containing the patch for CVE-2024-0985.

• If you are doing a fresh install of FortiSIEM 7.1.9, then the patch is included and there is nothing to do.

• If you are upgrading to FortiSIEM 7.1.9, then the patch is included and there is nothing to do.

• If you want to remain on a version of FortiSIEM 7.1.4 or earlier, then you can't get this patch by running yum upgrade, since Postgres changed the repo gpg key as per this change
  (https://yum.postgresql.org/news/pgdg-rpm-repo-gpg-key-update/). To get this Postgres patch, on the Supervisor, run the following script:

curl -s https://os-pkgs-cdn.fortisiem.fortinet.com/postgres/misc/switch-pgdg-repo-and-upgrade-to-pg13.14.sh | bash -xe

Post-Upgrade ClickHouse IP Index Rebuilding

If you are upgrading ClickHouse based deployment from pre-7.1.1 to 7.1.9, then after upgrading to 7.1.9, you need to run a script to rebuild ClickHouse indices. If you are running 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7 or 7.1.8, and have already executed the rebuilding steps, then nothing more needs to be done.

For details about this issue, see Release Notes 7.1.3 Known Issue.

The rebuilding steps are available in Release Notes 7.1.4 - Script for Rebuilding/Recreating pre-7.1.1 ClickHouse Database Indices Involving IP Fields.

Upgrade Related

You may encounter a blank Global Dashboard after upgrading to 7.1.9. There are two workarounds.

1. If you have not upgraded yet, then run the script updateDashboard.sh as root on Supervisor before upgrade. You can upgrade after running the script.

2. If you have upgraded to 7.1.9 and then see a blank Global Dashboard, then run the script updateImportDashboard.sh as root on Supervisor.