Linux Atlant Changelog

This changelog provides updates for WithSecure™ Linux Atlant, the cloud-native threat detection and response platform designed for large-scale, real-time security operations. It includes the latest improvements, new features, and fixes that enhance detection capabilities, data processing, and integration with security ecosystems.

Find more posts tagged with

Changelog

Comments

New update for Atlant has been released (2025-05-20)

New FSBG update (version 1.0.921) has been released. FSBG is a component of Atlant. This update includes the following changes:

LNX-839: Resolved an issue where a failed update could cause the product to become unresponsive.
LNX-857: Addressed a problem where network disruptions could cause hotfix service to fail.
Miscellaneous bug fixes and improvements.

New Atlant update has been released (2025-03-25)

New FSBG update (version 1.0.918) has been released. FSBG is a component of Atlant. This update includes the following changes:

LNX-780: Add block_encrypted_archives option to the REST scanning API.
Fixed an issue where uninstalling the product occasionally triggered SELinux warnings in the audit log.
Fixed an issue where the update installation schedule was not adhered to.
Miscellaneous bug fixes and improvements.

New Atlant update has been released (2024-12-09)

New Atlant update (version 1.0.338) has been released. This update includes the following changes:

Miscellaneous bug fixes and improvements.

New Atlant update has been released (2024-12-04)

New FSBG update (version 1.0.914) has been released. FSBG is a component of Atlant. This update includes the following changes:

LNX-755: Fixed an issue where scanning certain files would cause scanning to fail.

New Atlant update has been released (2024-12-02)

New FSBG update (version 1.0.913) has been released. FSBG is a component of Atlant. This update includes the following changes:

LNX-692: Improved product's responsiveness in the presence of network connectivity issues. The product now tries to automatically detect if certain backend services are unreachable and temporarily disable their use if they cannot be reached.
LNX-658: Introduced a new hotfix update mechanism to the product. This new hotfix service is used for rapidly delivering critical fixes to the product.
Miscellaneous bug fixes and improvements.

New pinnable Atlant version is available (2024-10-02)

New pinnable Atlant version atlant-2024_3 has been released. Product version pinning enables Atlant installation to be locked to a specific version of the product. When the product version has been pinned the installation will still receive new engine and definition updates. Atlant supports product version pinning in standalone mode.

Each pinnable product version is supported for a year from the release of the subsequent pinnable version.
Note: As an exception, both atlant-2024_2 and atlant-2024_3 will be supported for the same period: one year from the release of the subsequent pinnable version.

atlant-2024_3 contains the following components:

Atlant version 1.0.328
FSBG version 1.0.909

To learn more about product version pinning, please refer to the Atlant manual.

Connectivity Requirements for WithSecure Atlant

To function correctly, WithSecure Atlant requires access to several online services. The detailed list of these services can be found in the User Guide.

Required Domains

Atlant needs access to the following domains:

a.karma.sc2.fsapi.com
api.disobus.fsapi.com
api.prd.glb.us-prd.fsapi.com
aspam.fsapi.com
aspam.sp.f-secure.com
baseguard.doorman.fsapi.com
download.fsapi.com
guts2.fsapi.com
guts2.sp.f-secure.com
mind-failover.sc2.fsapi.com
restmc.mind.sc2.fsapi.com
update.sebe.fsapi.com

The domains ending with f-secure.com will not be necessary after January 1st, 2025.

Proxy Configuration

If Atlant is configured to use an HTTP proxy for internet access, it will utilize this proxy for the above connections.

Offline Mode

In environments where access to these services is restricted, Atlant can operate in offline mode. To enable offline mode, execute the following command after installing atlant-2024_3:

/opt/f-secure/atlant/fsbg/bin/offline-mode enable

This command disables connections to certain non-essential online services, allowing Atlant to function effectively with limited network access.

Known Issues

When upgrading from a previous pinnable product version, the atlantctl status command might display the product version status as in-progress for several hours. During this time, you may notice several HTTP 404 errors in the update.log file. These errors are harmless, and the product should eventually reach a state where atlantctl status reports the product version as fully applied.

Please note that any new standalone installations that make use of the pinned product version functionality must be made using the latest available Atlant installer (version 1.0.53 or later) to be supported beyond the end of 2024.

New Atlant update has been released (2024-09-25)

New FSBG update (version 1.0.909) has been released. FSBG is a component of Atlant. This update includes the following changes:

LNX-703: The update will automatically enable offline mode during installation if the system cannot access all necessary backend services.
Miscellaneous bug fixes and improvements.

New pinnable Atlant version is available (2024-09-04)

New pinnable Atlant version atlant-2024_2 has been released. Product version pinning enables Atlant installation to be locked to a specific version of the product. When the product version has been pinned the installation will still receive new engine and definition updates. Atlant supports product version pinning in standalone mode.

Each pinnable product version is supported for a year from the release of the subsequent pinnable version.

atlant-2024_2 contains the following components:

Atlant version 1.0.328
FSBG version 1.0.907

To learn more about product version pinning, please refer to the Atlant manual.

Connectivity Requirements for WithSecure Atlant

To function correctly, WithSecure Atlant requires access to several online services. The detailed list of these services can be found in the User Guide.

Required Domains

Atlant needs access to the following domains:

a.karma.sc2.fsapi.com
api.disobus.fsapi.com
api.prd.glb.us-prd.fsapi.com
aspam.fsapi.com
aspam.sp.f-secure.com
baseguard.doorman.fsapi.com
download.fsapi.com
guts2.fsapi.com
guts2.sp.f-secure.com
mind-failover.sc2.fsapi.com
restmc.mind.sc2.fsapi.com
update.sebe.fsapi.com

The domains ending with f-secure.com will not be necessary after January 1st, 2025.

Proxy Configuration

If Atlant is configured to use an HTTP proxy for internet access, it will utilize this proxy for the above connections.

Offline Mode

In environments where access to these services is restricted, Atlant can operate in offline mode. To enable offline mode, execute the following command after installing atlant-2024_2:

/opt/f-secure/atlant/fsbg/bin/offline-mode enable

This command disables connections to certain non-essential online services, allowing Atlant to function effectively with limited network access.

Known Issues

When upgrading from a previous pinnable product version, the atlantctl status command might display the product version status as in-progress for several hours. During this time, you may notice several HTTP 404 errors in the update.log file. These errors are harmless, and the product should eventually reach a state where atlantctl status reports the product version as fully applied.

Please note that any new standalone installations that make use of the pinned product version functionality must be made using the latest available Atlant installer (version 1.0.53 or later) to be supported beyond the end of 2024.

New Atlant update has been released (2024-09-02)

New Atlant (version 1.0.328) and FSBG (version 1.0.907) updates have been released. FSBG is a component of Atlant. These updates includes the following changes:

LNX-503: Added support for Ubuntu 24.04.
LNX-566: Fixed an issue where the product could cause SELinux warnings to be shown under certain conditions.
LNX-548: Switched the product to use a new online reputation backend service.
LNX-612: Fixed an issue where reinstalling the product could fail due to leftover configuration from the previous installation.
LNX-578: Fixed an issue where the product could cause excessive CPU usage if Policy Manager was unreachable.
LNX-634: Fixed an issue where the product could fail to identify device's IP address and DNS name.
LNX-661: Fixed an issue regarding database version data included into
diagnostic packages.
LNX-576: Product installation will now show a warning if the product is being installed using a deprecated installer.
LNX-299: Removed obsolete BaseGuard update service.
LNX-561: Removed support for TLS 1.0.
LNX-629: Removed dependency on libcurl.
LNX-668: Improved support for using the product in environments with limited connectivity.
Miscellaneous bug fixes and improvements.

Connectivity Requirements for WithSecure Atlant

To function correctly, WithSecure Atlant requires access to several online services. The detailed list of these services can be found in the User Guide.

Required Domains

Atlant needs access to the following domains:

a.karma.sc2.fsapi.com
api.disobus.fsapi.com
api.prd.glb.us-prd.fsapi.com
aspam.fsapi.com
aspam.sp.f-secure.com
baseguard.doorman.fsapi.com
download.fsapi.com
guts2.fsapi.com
guts2.sp.f-secure.com
mind-failover.sc2.fsapi.com
restmc.mind.sc2.fsapi.com
update.sebe.fsapi.com

The domains ending with f-secure.com will not be necessary after January 1st, 2025.

Proxy Configuration

If Atlant is configured to use an HTTP proxy for internet access, it will utilize this proxy for the above connections.

Offline Mode

In environments where access to these services is restricted, Atlant can operate in offline mode. To enable offline mode, execute the following command:

/opt/f-secure/atlant/fsbg/bin/offline-mode enable

This command disables connections to certain non-essential online services, allowing Atlant to function effectively with limited network access.

New Atlant container release is available (2024-08-15)

Atlant container 1.0.60 is now available from our container registry. This release includes the following changes:

Switched the container to use a new online reputation backend service.
Miscellaneous enhancements and bug fixes.

Extending the Support for atlant-2023_1 Pinnable Product Version

We have decided to extend the support period for the pinnable product version "atlant-2023_1". The new expiry date for this version is 2024-09-30. Previously, we had committed to supporting this pinnable version until the end of June 2024.

New Atlant Virtual Appliance version is available (2024-05-27)

New Atlant Virtual Appliance version 1.0.21 is now available for download. This release contains the following changes that have been added since the 1.0.20 release:

The installation mode for Policy Manager now necessitates the use of the most recent installer, which must be exported from Policy Manager version 16 or later.
The addresses of the servers that are used for downloading updates in standalone mode or when the local Policy Manager is inaccessible have been changed.
Please refer to the related announcement for changes in network addresses: https://community.withsecure.com/en/kb/articles/31208-network-addresses-for-withsecure-on-premise-products

New Atlant update has been released (2024-05-27)

New FSBG update (version 1.0.841) has been released. FSBG is a component of Atlant. This update includes the following changes:

Authorization endpoint now requires TLS 1.1 or later for communication. TLS 1.0 connections are no longer accepted because of security weaknesses in TLS 1.0.
Miscellaneous bug fixes and improvements.

New Atlant installers have been released (2024-05-16)

The new product installers released are as follows:

Atlant Policy Manager installation package version 3.0.10, compatible with Policy Manager Server version 16.0 and above.
Atlant installer DEB and RPM packages, version 1.0.53-1.

The updates include the following changes:

Changed the activation to use new update server addresses by default. The new installer may download product content from guts2.fsapi.com and api.prd.glb.us-prd.fsapi.com.
See related announcement for network address changes: https://community.withsecure.com/en/kb/articles/31208-network-addresses-for-withsecure-on-premise-products
Installer file and package names have been changed. This would affect any automated deployment and uninstall.
Fixed an issue where product activation would fail if Squid proxy version 6.0 or higher was used.
Fixed an issue where invoking activate with --download and --help options would incorrectly mark the product as activated.
Miscellaneous bug fixes and improvements.

Please note that the old installer packages are going to stop working at the end of the year. It is recommended to always use the latest available installer.

If you have already successfully installed the product there is no need to download or install these package. The product installer is only needed for the initial setup process and does not need to be kept up to date afterwards.

New Atlant update has been released (2024-03-12)

New Atlant update (version 1.0.319) has been released. This update includes the following changes:

LNX-280: This update changes the address of the server that is used for downloading updates. This change does not affect installations that download updates from a local Policy Manager except in situations where the local
Policy Manager cannot be reached.This update also changes the address of the service that is used for downloading metadata about pinned product versions.For installations in environments with restrictive firewall policies, this update might require manual intervention to ensure that the installation can still contact all the necessary services. See Atlant manual for more information about the addresses that Atlant installations may contact.
LNX-64: Fixed an issue where Atlant VA did not configure firewall rules automatically when the endpoint configuration was changed.
Miscellaneous bug fixes and improvements.

Note for customers using ZIP files to update their installations

This product update includes changes which will affect the procedure to install future malware definition or product updates from ZIP archives. Please continue reading if you are currently making use of ZIP archives to install updates using the offline-update program.

After updating your product installation to the new version, follow these steps to prepare update ZIP archives in the future:

Log on to the endpoint on which you intend to install updates from a ZIP archive.
Run the command
/opt/f-secure/atlant/fsbg/bin/withsecure-migrator status
Check the last line of output from the above command.
If the system reports that the command does not exist, or the command reports “not-performed” or “not-ready”, you can prepare a new f-secure-updates.zip archive for updates by using any version of fspm-definitions-update-tool and channels.json files you might already have available, and install the updates as before from the f-secure-updates.zip file using the offline-update program. Before starting to prepare another ZIP archive later, however, return to step 1 of these instructions.
If the command at step 2 reports "migrated", the procedure for installing the updates changes as follows:
1. First, please verify that you are using a recent enough version of fspm-definitions-update-tool for creating update archives.
  - If you are using fspm-definitions-update-tool from a Policy Manager Server 16 installation, you are already at a new enough version.
  - If you are not using Policy Manager 16, or are unsure about the version of fspm-definitions-update-tool, download the latest version of fspm-definitions-update-tool from the product download page, and extract the files to a directory.
2. Second, download the latest version of the channels.json file to use to configure fspm-definitions-update-tool:
  As before, replace the channels.json file under fspm-definitions-update-tool's conf/ subdirectory with the downloaded file, remove the data/ directory if it exists.
3. Run the fspm-definitions-update-tool program. fspm-definitions-update-tool will create a fresh data/ subdirectory with two ZIP archives: f-secure-updates.zip and withsecure-updates.zip. You must now use the withsecure-updates.zip file to install updates on the endpoint using the offline-update program.
  (The f-secure-updates.zip file should no longer be used for installing updates on that endpoint. When run, fspm-definitions-update-tool will however continue to create this file to support packaging updates for endpoints which still need this file.)
4. After installing the product updates for the first time from the withsecure-updates.zip file on an endpoint, it won't be necessary to verify the status of the installation again on that endpoint (step 2); all later product updates can be installed using the withsecure-updates.zip file.

New Atlant update has been released (2024-03-11)

New FSBG update (version 1.0.834) has been released. FSBG is a component of Atlant. This update includes the following changes:

Miscellaneous bug fixes and improvements.

New Atlant update has been released (2024-02-20)

New FSBG update (version 1.0.828) has been released. FSBG is a component of Atlant. This update includes the following changes:

LNX-200: The product will require /sys/class/dmi/id/product_uuid file to be in place only when it is being managed by Policy Manager. Previously this file was always required.
LNX-526: Fixed an issue where HTTP proxy was not used for downloading updates from fallback update server in Policy Manager managed mode.
LNX-471: Fixed issues with compatibility with nosetuid file systems.
Miscellaneous bug fixes and improvements.

Extending the Support for atlant-2023_1 Pinnable Product Version

We have decided to extend the support period for the pinnable product version "atlant-2023_1". The new expiry date for this version is 2024-06-30. Previously, we had committed to supporting this pinnable version until the end of 2023.

New Atlant update has been released (2023-10-24)

New Atlant update (version 1.0.295) has been released. This update includes the following changes:

LNX-379: Added support for Debian 12.
LNX-358: Fixed an issue where the product would fail to reinstall after having been uninstalled.
LNX-414: Upgraded to OpenSSL 3.

New Atlant Virtual Appliance version is available (2023-10-16)

New Atlant Virtual Appliance version 1.0.20 is now available for download. This release contains the following changes that have been added since the 1.0.17 release:

LNX-435: Fixed a crash in admin menu when showing current network configuration.
LNX-474: Added new source for AlmaLinux updates. The old source will be removed in a future online update.
The OVA archive is signed with a new code signing certificate.
Miscellaneous enhancements and bug fixes.

New Atlant update has been released (2023-10-16)

New FSBG update (version 1.0.787) has been released. FSBG is a component of Atlant. This update includes the following changes:

LNX-360: Solved an issue where an error about failing to clean up previous channel content could be printed after an update.
LNX-363: Solved an issue where certain updates could fail due to errors about incompatible product-control.
LNX-414: Upgraded to OpenSSL 3.
LNX-298: Removed f-secure-baseguard-av service from the product.

New Atlant container release is available (2023-09-11)

Atlant container 1.0.53 is now available from our container registry. This release includes the following changes:

Stricter configuration file processing. Unknown properties in container's configuration file will now result in an error.
Miscellaneous enhancements and bug fixes.

New Atlant container release is available (2023-07-31)

Atlant container 1.0.40 is now available from our container registry. This release includes the following changes:

Added support for maximum scan size setting.

New Atlant container release is available (2023-07-24)

Atlant container 1.0.36 is now available from our container registry. This release includes the following changes:

Miscellaneous enhancements and bug fixes.

Atlant is now available as a container (2023-07-17)

Atlant is now available as a container image. Atlant container provides the same scanning and detection capabilities as other Atlant installation variants. See Atlant documentation for more information about deploying Atlant as a container.

Atlant container images can be found from our container registry.

New pinnable Atlant version is available (2023-06-21)

New pinnable Atlant version "atlant-2023_1" has been released. Product version pinning enables Atlant installation to be locked to a specific version of the product. When the product version has been pinned the installation will still receive new engine and definition updates. Atlant supports product version pinning in standalone mode.

This pinnable version will be supported until the end of 2023.

"atlant-2023_1" contains the following components:

Atlant version 1.0.281
FSBG version 1.0.741
BaseGuard version 1.0.723

To learn more about product version pinning, please refer to the Atlant manual.

New Atlant update has been released (2023-06-06)

New FSBG update (version 1.0.741) has been released. FSBG is a component of Atlant. This update includes the following changes:

LNX-369: Fixed an issue where URL scanning was not properly working with CONNECT requests.
LNX-359: Improved setup robustness.

New Atlant update has been released (2023-04-27)

New Atlant (version 1.0.281) update has been released. This update includes the following changes:

LNX-349: Fixed an issue that prevented fresh installations from completing successfully.

New Atlant update has been released (2023-04-25)

New Atlant (version 1.0.280) and FSBG (version 1.0.738) updates have been released. FSBG is a component of Atlant. These updates include the following changes:

LNX-278: Fixed an issue where an unreachable proxy could prevent certain services from starting.
CSLP-4211: Fixed an issue where certain product updates would ignore update installation schedule.
Added support for Rocky Linux 8 and 9.
Updated OpenSSL.
CSLP-4043: Fixed an issue with offline updates where updater could attempt to install channels in an incorrect order.
LNX-26: Fixed an issue where URL classification was not working correctly when used with certain ICAP clients.
LNX-245: Fixed an issue where offline-update command did not include any help text.
LNX-23: Merged BaseGuard contents into FSBG. Previously some parts of product's functionality was distributed as a separate BaseGuard component.
LNX-89: Fixed an issue related to ICAP protocol parsing.
CSLP-3646: Improved error messages in offline-update to indicate that channels cannot be downgraded.
CSLP-4205: Added a new setting to configure (or disable) maximum file size limit for scanned files.
LNX-238: Fixed an issue where fsanalyze command would print archive member names incorrectly.
CSLP-4174: Fixed a possible crash configuration management service.
CSLP-3958: Allowed offline updates to be installed even when automatic updates are enabled.
LNX-211: Fixed an issue where invalid utf-8 could be included to the access log.
LNX-304: Fixed an issue where scanning service could fail under a heavy load.

New pinnable Atlant version is available (2022-12-07)

New pinnable Atlant version "atlant-2022_6" has been released. Product version pinning enables Atlant installation to be locked to a specific version of the product. When the product version has been pinned the installation will still receive new engine and definition updates. Atlant supports product version pinning in standalone mode.

This pinnable version is supported until the end of 2023.

"atlant-2022_6" contains the following components:

Atlant version 1.0.249
FSBG version 1.0.703
BaseGuard version 1.0.723

To learn more about product version pinning, please refer to the Atlant manual.

Quick Links