These are the release notes for Sophos Linux Sensor. You can download the sensor in Sophos Central.
The features mentioned in these release notes are only available if you have the appropriate license and run a supported distribution and kernel. See Sophos Linux Sensor distribution and kernel support.
You may find that you can't yet download and use the latest version. This is because Sophos releases the software over a number of days, but publishes the release notes on the first day.
View the product documentation at Sophos Linux Sensor.
View the runtime detection content updates at Sophos Linux Runtime Detection updates.
There are no new features for this release.
| Release date | Sophos Linux Sensor | SPL-Runtime-Detection-Plugin | Sensor container tags | Content container tags |
|---|---|---|---|---|
| April 2025 | 5.11.1.17 | 5.11.1 | 5.11.1.17 Digest: sha256:88a20bd3c4ad492714c4005cfd9e7f55056414f37cb1c7882aee38630e9a3763 |
Tag: 5.10.0.472 Digest: sha256:0e0d25c93af90705260f6843e35711f1b20e5838bccd97b0ef071b7c9ef0c98b |
| April 2025 | 5.11.0.679 | 5.11.0 | Tag: 5.11.0.679 Digest: sha256:113f9c62d82babfefee58d925f3fd3466af1185c248b6af94b32e1fb401e04d1 |
Tag: 5.10.0.472 Digest: sha256:0e0d25c93af90705260f6843e35711f1b20e5838bccd97b0ef071b7c9ef0c98b |
| March 2025 | 5.10.0.1164 | 5.10.0 | Tag: 5.10.0.1164 Digest: sha256:ed51758c305df299f0764542703527bff8a9de49d525e9d90bfc88ba44629fa7 |
Tag: 5.10.0.472 Digest: sha256:0e0d25c93af90705260f6843e35711f1b20e5838bccd97b0ef071b7c9ef0c98b |
| November 2024 | 5.9.3 | 5.9.3.1787 | Tag: 5.9.3.1787 Digest: sha256:cc2da005a299ef770f8de9d7b6f4108cfb4cd3aa15c8684120b86ce78ff18db0 |
Tag: 5.9.0.2300 Digest: sha256:cf7a3252a234b9c9fb065f230ce951a58277b2147d89740ed8ee64636c874065 |
| June 2024 | 5.9.1 | 5.9.1 | Tag: 5.9.2.184 Digest: sha256:fe7803aa75d365bcebc395f45db6dfd095d71e84605fee8599c0641467142fd3 |
Tag: 5.8.0.4 Digest: sha256:65575a79b901fd19c6c9ba91299dc0f2c8d6406e2ec371e7aa1347eec5a49077 |
| April 2024 | 5.8.1 | 5.8.1 | Tag: 5.8.1.10 Digest: sha256:0d967be9578aacfc9f005ddb6ef12c7d84b61aa25d7161571b3787f3ff399d95 |
Tag: 5.8.0.4 Digest: sha256:65575a79b901fd19c6c9ba91299dc0f2c8d6406e2ec371e7aa1347eec5a49077 |
| February 2024 | 5.8.0 | 5.8.0 | Tag: 5.8.0.942 Digest: sha256:d97dd4f97f54ab7f252b5a36ff2185f7ca9686e5718d7e2615335d061e571a61 |
Tag: 5.6.2.24 Digest: sha256:a6b9251abf6ba96a82d62fee85ec8d6d97481c1fd482e57c3af7dcccda9b435a |
| November 2023 | 5.7.0 | 5.7.0 | Tag: 5.7.0.581 Digest: sha256:f2d83dc336c37d9b8de3062a406d6781ca5cfecc380c2c09e5523ee735941427 |
Tag: 5.6.1.2 Digest: sha256:fbc755290ccf10f61e5c7b806ca5d0aff60a5a92a35f04b8dba897b7616dd664 |
| September 2023 | 5.6.0 | 5.6.0 | Tag: 5.6.1.6 Digest: sha256:9206ec390404d882e3f2d3b2784029e4dae06e8e555e4138822cad558b40980b |
Tag: 5.5.3.16 Digest: sha256:0e7e503c045760cb80895abd4add849e190860f2662c332e08ce636d02b8cc52 |
| August 2023 | 5.5.2 | 5.5.2 | Tag: 5.5.2.30 Digest: sha256:af1600aa53c6a1545a345c98c3674d8824396821a9e274c73df6322bbd9dc63f |
Tag: 5.4.2.51 Digest: sha256:146160d14cdab038bd5644190afffb3c47137b28d376f10d4c385bf7c87ac9d8 |
| June 2023 | 5.5.1 | 5.3.0 | Tag: 5.5.1.198 Digest: sha256:3e520f7afa185099125eb11d567e518d68512f1a7780b402f9487e411f00e192 |
Tag: 5.4.2.51 Digest: sha256:146160d14cdab038bd5644190afffb3c47137b28d376f10d4c385bf7c87ac9d8 |
| February 2023 | 5.4.0 | 5.4.0 | ||
| October 2022 | 5.1.1 | 5.1.1 | ||
| September 2022 | 5.1.0 | 5.1.0 | ||
| July 2022 | 5.0.2 | 5.0.2 | ||
| June 2022 | 5.0.0 | 5.0.0 |
audit_selinux table includes SELinux events on the host.Audit_user_msg table includes user event activity on the host and
events running in a container.optional_metadata_gathering_timeout value to help when
encountering slow start-up times for the sensor.Various software updates and improvements.
SPL-Runtime-Detection-Plugin: 5.4.0
Optimizations for resource usage.
Optimizations for memory usage.
Improvements to the management of memory and list reference counting.
Optimizations to event state and task list handling when completing tasks.
Reliability updates for gRPC.
SPL-Runtime-Detection-Plugin updated to version 5.1.1.
Resolved intermittent segmentation fault issues.
Resolved an issue where process event filters prevented Sophos Linux Sensor from starting.
Various software updates and improvements.
Sophos Linux Runtime Detection plugin is now called SPL-Runtime-Detection-Plugin.
Sophos Linux Sensor supports ARM64.
Sophos Linux Sensor includes Sophos Linux Runtime Detection. You can download the sensor, in Sophos Central, as RPM Package Manager (RPM) and Debian (DEB) packages.
We test the latest point release for platforms listed here.
Minimum kernel versions for x86_64 systems are noted where applicable.
The following legacy platforms include versions of platforms that have recently reached their end of mainstream support as published by the distribution vendor. For additional details on support for legacy versions, see Legacy versions.
Minimum kernel versions for x86_64 systems are noted where applicable.
Sophos will investigate any issues by attempting to replicate them on a corresponding testing distribution. For more information related to platforms and versions not listed here, including platforms that have reached their end of mainstream support as published by the distribution vendor, such as downstream and upstream distributions and legacy platforms, see Sophos Protection for Linux distribution and kernel support.
To gather more information on installation errors, see the following pages:
You can find technical support for Sophos products in any of these ways:
Copyright © 2023 Sophos Limited. All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.
Sophos and Sophos Anti-Virus are registered trademarks of Sophos Limited and Sophos Group. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.