> Source: [sk165832](https://support.checkpoint.com/results/sk/sk165832) # sk165832 - Threat Extraction Engine Release Updates | Property | Value | |----------|-------| | Solution ID | sk165832 | | Date Created | 2020-03-17 | | Last Modified | 2026-07-14 | | Technical Level | General | | Products | Security Gateway | | Versions | R82.10, R82, R81.20, R81 (EOS) | | OS | Gaia | ## Solution **Introduction \| Availability \| Manual Installation \| List of Resolved Issues** Introduction {#Introduction} ---------------------------- Check Point's Threat Extraction Engine (TEX) supports a self-updatable package mechanism, this ensures your Security Gateways are always protected with the latest security improvements and features, without requiring manual intervention or hotfix installations. The Threat Extraction Engine package is installed automatically on all relevant Check Point devices when Automatic Update downloads are enabled (see [sk175504](https://support.checkpoint.com/results/sk/sk175504), section 2-B), and one or more of these Software Blades is enabled: * Threat Extraction * Data Loss Prevention * Content Awareness For R81.20, Jumbo Hotfix Accumulator R81.20 Take 56 or higher must be installed. If Automatic Updates are disabled, you must first manually install the latest [AutoUpdater](https://support.checkpoint.com/results/sk/sk165653) Take and then install the Threat Extraction Engine package manually using the steps below, in the Manual Installation section. ### Checking Threat Extraction Engine version {#Checking Threat Extraction Engine version} The Threat Extraction Engine version changes with every installed update. **To see the installed Threat Extraction Engine version in Gaia Portal:** 1. With a web browser, connect to Gaia Portal on the Security Gateway / Cluster Member. 2. Go to the **Overview** page: 3. In the right pane **Blades** , click **Threat Extraction**. 4. Refer to the line **Engine version**. > Example: > > ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk166934/Engine20200527110100.jpg) **To see the installed Threat Extraction Engine version in Command Line:** 1. Connect to the command line on the Security Gateway / each Cluster Member / Scalable Platform Security Group. 2. Log in to the Expert mode: `expert` 3. Run: * On the Security Gateway / each Cluster Member: `autoupdatercli show json | jq '.products[] | select(."product-name" == "tex") | ."product-components"[]."repository-packages"[] | select(."package-installed" == "true")'` * On the Scalable Platform Security Group: `g_all autoupdatercli show json | jq '.products[] | select(."product-name" == "tex") | ."product-components"[]."repository-packages"[] | select(."package-installed" == "true")'` Availability {#Availability} ---------------------------- > |--------------------------|-----------------------|-------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------| > | Security Gateway Version | Engine Update Version | Release Date | Package Download | > | **R82.10** | Update 1 - Take 8 | 19 July 2026 | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/144205) (TAR) | > | **R82.10** | Update 1 - Take 8 | 19 July 2026 | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/144206) (TAR) For Check Point Firewall 3900 Appliances | > | **R81.20** | Update 1 - Take 15 | 22 September 2024 | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/134706) (TAR) | > Manual Installation (Offline) {#Offline} ---------------------------------------- Show / Hide Instructions 1. **Mandatory:** Install the latest Take of the [AutoUpdater](https://support.checkpoint.com/results/sk/sk165653) on the Security Gateway / each Cluster Member / Scalable Platform Security Group. 2. Get the **Installation Script** package: 1. Download the *[autoupdateIntegralPackageInstall.tgz](https://support.checkpoint.com/results/download/105487)* package to your computer. 2. Copy the package from your computer to the Security Gateway / each Cluster Member / Scalable Platform Security Group to some directory (for example, */var/log/*). 3. Get the **Threat Extraction Engine Update** package: 1. Download the Threat Extraction Engine Update package (from the "**Availability**" section above) to your computer. 2. Copy the Threat Extraction Engine Update package (*Threat_Extraction_Engine_R\_T\_AutoUpdate.tar* ) to the Security Gateway / each Cluster Member / Scalable Platform Security Group to some directory (for example, */var/log/*). 4. Connect to the command line on the Security Gateway / each Cluster Member / Scalable Platform Security Group. 5. Log in to the Expert mode: `expert` 6. On the Scalable Platform Security Group, copy the two packages to all Security Group Members (in our example, the packages are located in */var/log/* ): 1. Copy the Installation Script package: `asg_cp2blades /var/log/autoupdateIntegralPackageInstall.tgz` 2. Copy the Threat Extraction Engine Update package: `asg_cp2blades /var/log/Threat_Extraction_Engine_R_T_AutoUpdate.tar` 7. Go to the directory with the required packages (in our example, */var/log/* ): * On the Security Gateway / each Cluster Member: `cd /var/log/ ; pwd` * On the Scalable Platform Security Group: `g_all cd /var/log/ ; g_all pwd` 8. Create a temporary directory: * On the Security Gateway / each Cluster Member: `mkdir -v TexEngineUpdate` * On the Scalable Platform Security Group: `g_all mkdir -v TexEngineUpdate` 9. Move the required packages into the temporary directory: 1. Move the Installation Script package: * On the Security Gateway / each Cluster Member: `mv -v /var/log/autoupdateIntegralPackageInstall.tgz /var/log/TexEngineUpdate` * On the Scalable Platform Security Group: `g_all mv -v /var/log/autoupdateIntegralPackageInstall.tgz /var/log/TexEngineUpdate` 2. Move the Threat Extraction Engine Update package: * On the Security Gateway / each Cluster Member: `mv -v /var/log/Threat_Extraction_Engine_R_T_AutoUpdate.tar /var/log/TexEngineUpdate` * On the Scalable Platform Security Group: `g_all mv -v /var/log/Threat_Extraction_Engine_R_T_AutoUpdate.tar /var/log/TexEngineUpdate` 10. Go into the temporary directory: * On the Security Gateway / each Cluster Member: `cd /var/log/TexEngineUpdate ; pwd` * On the Scalable Platform Security Group: `g_all cd /var/log/TexEngineUpdate ; g_all pwd` 11. Extract the installation script: * On the Security Gateway / each Cluster Member: `tar xzf autoupdateIntegralPackageInstall.tgz` * On the Scalable Platform Security Group: `g_all tar xzf autoupdateIntegralPackageInstall.tgz` 12. Run the installation script: * On the Security Gateway / each Cluster Member: `autoupdateIntegralPackageInstall.sh Threat_Extraction_Engine_R_T_AutoUpdate.tar` * On the Scalable Platform Security Group: `g_all autoupdateIntegralPackageInstall.sh Threat_Extraction_Engine_R_T_AutoUpdate.tar` 13. Follow the instructions on the screen. 14. Wait for 5 minutes. 15. Get the installed Threat Extraction Engine Update version: * On the Security Gateway / each Cluster Member: `autoupdatercli show json | jq '.products[] | select(."product-name" == "tex") | ."product-components"[]."repository-packages"[] | select(."package-installed" == "true")'` * On the Scalable Platform Security Group: `g_all autoupdatercli show json | jq '.products[] | select(."product-name" == "tex") | ."product-components"[]."repository-packages"[] | select(."package-installed" == "true")'`
Note - In the output, refer to "*package-version*" - it must match the Take of the package you installed. **Important** - The installation does not require a restart of Check Point services (*cpstop;cpstart*) or a reboot. After the installation, no further action is required, the update is applied immediately. List of Resolved Issues and New Features per Threat Extraction Engine Update {#Resolved Issues} ----------------------------------------------------------------------------------------------- ### R82.10 Release |------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | ID | Description | | **R82.10 Update 1 - Take 8 (19 July 2026)** || | TCAI-12480 | * Resolved an issue that could cause Excel-to-PDF conversion to stop responding. * Resolved an issue where watermark operations on PDF files could fail on ARM-based deployment machines. * Fixed a rare issue that could cause the conversion service to crash and generate a core dump during shutdown. |
### R81.20 Release |------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | ID | Description | | **R81.20 Update 1 - Take 15 (22 September 2024)** || | - | **NEW:** Added pictures error handling mechanism. Refer to [sk181575](https://support.checkpoint.com/results/sk/sk181575). | | TEX-2525, TEX-2523, TEX-2419 | Enhancement: Added a defense mechanism against issues described in [CVE-2022-42003](https://nvd.nist.gov/vuln/detail/CVE-2022-42003), [CVE-2022-42004](https://nvd.nist.gov/vuln/detail/CVE-2022-42004), [CVE-2021-29425](https://nvd.nist.gov/vuln/detail/CVE-2021-29425) and [CVE-2022-30190](https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-30190). | | TEX-2502 | Enhancement: Added the ability to remove URLs from the *.pdf* files. | | TEX-2525 | Enhancement: * Added support for Microsoft Excel 95. * Resolved issue where the .*dot* and .*dotm* files are not handled properly. | | TEX-2497 | Enhancement: Major upgrade of Threat Extraction Engine: improved memory usage and stability. | | PMTR-91487 | Enhancement: Added support for the EMF font in *.pdf* files. | | - | Enhancement: Added various code improvements. |
--- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content