WithSecure Policy Manager 16.11 and WithSecure Policy Manager Proxy 16.11

Changes in this release

Platform & Technology Upgrades

• Java: 17.0.17
• Netty: 4.1.125
• Solr: 9.9.0
• Spring Framework: 6.2.11
• Spring Security: 6.4.11

Security & Vulnerability Fixes

• Java 17: CVE-2025-53066, CVE-2025-53057
• Spring: CVE-2025-41248, CVE-2025-41249
• Other third-party libraries: CVE-2025-55163, CVE-2025-58056, CVE-2025-58754, CVE-2025-7962

Bug Fixes and Improvements

• Corrected issue where HTTP proxy settings were not applied when connecting to Corporate Registration Server.
• Fixed issue with exporting reports in Policy Manager Console.
• Improved Web Reporting stability by stopping the Chrome process from opening when report data is invalid.
• Fixed issue where Disallow user changes is not effective for Trusted sites/Disallowed sites table.

Policy Manager and Policy Manager Proxy 16.11 supports the following operating systems:

Windows:

• Windows Server 2016
• Windows Server 2019
• Windows Server 2022
• Windows Server 2025
• Windows 10
• Windows 11

Linux:

• Alma Linux 8, 9
• Debian 11, 12
• openSUSE Leap 15
• Oracle Linux 8, 9
• Red Hat Enterprise Linux 8, 9
• Rocky Linux 8, 9
• SuSE Linux Enterprise Server 12, 15
• SuSE Linux Enterprise Desktop 12, 15
• Ubuntu 18.04, 20.04, 22.04, 24.04 LTS

New Atlant update has been released (2025-11-17)

New Atlant (version 1.0.342) update has been released. This update includes the following changes:

• LNX-894: Added support for Debian 13.
• LNX-875: Added support for Red Hat Enterprise Linux 10, AlmaLinux 10, Rocky Linux 10, and Oracle Linux 10.
• LNX-695: Added support for ICAP over TLS. Configuration is currently available only through the atlantctl command-line tool. To enable:

1. Configure TLS certificates
2. Add ICAPS (ICAP over TLS) endpoint
   Example:

/opt/f-secure/atlant/atlant/bin/atlantctl set tls '{"certificate": "/root/cert.pem", "key": "/root/key.pem"}'

/opt/f-secure/atlant/atlant/bin/atlantctl add scanning icaps_endpoints '{"address": "0.0.0.0", "port": 11344}'

• LNX-869: Virtual Appliance OS updates now use official AlmaLinux repository.
  • Atlant Virtual Appliance now pulls OS updates directly from the official AlmaLinux repository, enabling more timely updates.
  • Weekly update checks may now result in more frequent updates and reboots.
  • The check runs at a fixed time, randomized at deployment (typically around Sunday 4:00 a.m.).
  • The schedule is configurable, but the update check cannot be disabled.
• Miscellaneous bug fixes and improvements.

New Atlant update has been released (2025-11-11)

New FSBG update (version 1.0.923) has been released. FSBG is a component of Atlant. This update includes the following changes:

• LNX-933: Resolved an issue where the product created new scanner processes too aggressively, which could lead to unnecessary resource consumption.
• LNX-943: Fixed a compatibility problem that prevented the product from running inside LXC containers on certain older Linux distributions.
• Miscellaneous bug fixes and improvements.

New Atlant update has been released (2025-10-13)

New FSBG update (version 1.0.922) has been released. FSBG is a component of Atlant. This update includes the following changes:

• LNX-858: Improved the efficiency of writing scanning statistics to disk. Instead of updating the disk on every individual change, statistics are now saved at regular intervals, reducing unnecessary disk activity.
• LNX-865: Added a new command-line utility designed to help diagnose and troubleshoot connectivity issues more effectively.
• LNX-735: Optimized disk usage for the settings service by excluding specific statistics from the history database, leading to more efficient storage management.
• LNX-883: Resolved an issue where the status update service could consume excessive CPU resources when an invalid license was detected.
• LNX-259: Fixed a defect that caused the scanning service to inaccurately measure the duration of different scanning phases, ensuring more precise performance reporting.
• LNX-635: Addressed a problem where engine updates could momentarily interrupt scanning.

New pinnable Atlant version is available (2025-09-30)

A new pinnable version of Atlant, atlant-2025_2, has been released. With product version pinning, you can lock an Atlant installation to a specific product version. Even when pinned, the installation will continue to receive the latest engine and definition updates. Product version pinning is supported when Atlant is running in standalone mode.

Each pinnable product version remains supported for one year following the release of the next pinnable version.

atlant-2025_2 contains the following components:

• Atlant version 1.0.341
• FSBG version 1.0.921

For additional details on product version pinning, please consult the Atlant Manual.

New Atlant update has been released (2025-09-02)

New Atlant (version 1.0.341) update has been released. This update includes the following changes:

• LNX-806: Product activation will now wait for all components to finish installing before exiting. Previously, installing some components was delayed after the installation was finished. This change ensures that the product is fully functional after the activation has finished. This change does not affect Policy Manager-managed installations.
• LNX-734: Product activation will now try to automatically detect and report certain common connectivity issues.
• LNX-763: Added support for Amazon Linux 2023.
• Miscellaneous bug fixes and improvements.

New Atlant installer package for Policy Manager has been released (2025-06-27)

New Atlant installer package version 3.0.14 compatible with Policy Manager Server version 16.00 and above has been released.

This release introduces the modernized Policy Manager 16.10 installation wizard support. The same package can be used with the older Policy Manager 16.x versions. There are no other changes to the functionality with this package.

WithSecure Policy Manager 16.10 and WithSecure Policy Manager Proxy 16.10

Changes in this release

Platform & Technology Upgrades

• Migrated to Java 17, Spring 6.2, and Jetty 11.0.24
• Upgraded Solr to version 9.8.0
• Web Reporting now uses Vue 3

Linux Enhancements

• Switched to Systemd (replacing init.d) for modern distro compatibility
• Newly supported distributions:
  • Alma Linux 9
  • Oracle Linux 9
  • Red Hat Enterprise Linux 9
  • Rocky Linux 9

Installation wizard changes

The installation wizard in Policy Manager Console has been modernized in version 16.10, which affects compatibility with some older installer packages. To install any client product, make sure you have the latest installation packages imported from our Downloads page.

Security & Vulnerability Fixes

• Addressed multiple CVEs in JRE and Spring:
  • JRE: CVE-2024-21147, CVE-2024-21140, CVE-2024-21235, CVE-2025-21502
  • Spring: CVE-2024-38829, CVE-2024-38828, CVE-2024-38820, CVE-2024-38819, CVE-2024-38816, CVE-2025-41232

Bug Fixes & Improvements

• Improved Active Directory synchronization and Syslog alert forwarding
• Host products on Windows Server 2025 are correctly detected
• Chromium version updated to address vulnerabilities
• Other fixes and enhancements

Dropped features

• Discontinued updates from the old update server (guts2-old.fsapi.com)
• Legacy Web Reporting removed

Policy Manager and Policy Manager Proxy 16.10 supports the following operating systems:

Windows:

• Windows Server 2016
• Windows Server 2019
• Windows Server 2022
• Windows Server 2025
• Windows 10
• Windows 11

Linux:

• Alma Linux 8, 9
• Debian 11, 12
• openSUSE Leap 15
• Oracle Linux 8, 9
• Red Hat Enterprise Linux 8, 9
• Rocky Linux 8, 9
• SuSE Linux Enterprise Server 12, 15
• SuSE Linux Enterprise Desktop 12, 15
• Ubuntu 18.04, 20.04, 22.04, 24.04 LTS

New update for Atlant has been released (2025-05-20)

New FSBG update (version 1.0.921) has been released. FSBG is a component of Atlant. This update includes the following changes:

• LNX-839: Resolved an issue where a failed update could cause the product to become unresponsive.
• LNX-857: Addressed a problem where network disruptions could cause hotfix service to fail.
• Miscellaneous bug fixes and improvements.

A new version of the WithSecure Ultralight Core update (expected version 2025-05-09_01), part of the Windows endpoint client, will be released on 26th of May 2025.

This release introduces a new ‘wsulavprothoster‘ service, executing ‘fsulprothoster.exe‘ process. For partners and customers who have custom integrations in their endpoint devices to ensure that the EPP product is functioning correctly, we advise that these integrations are reviewed to ensure correct functionality. 

For more details please check Changes to the Windows EPP Scanning Components – May 2025