For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

10 Replies

  • R_Marc's avatar
    R_Marc
    Icon for Nimbostratus rankNimbostratus
    Feb 08, 2017

    Rumor has it, in the late march time frame. Not sure what else it fixes, but it currently 12.1.2 (and all versions of 12.0 that I've tested) produces invalid CSRs (blank attribute) which will be rejected by some CAs if you are using tmsh or the gui to generate CSRs.

     

  • Simon_Waters_13's avatar
    Simon_Waters_13
    Icon for Cirrostratus rankCirrostratus
    Apr 06, 2017

    F5 security told me "slated for next week" on the 3rd.

     

    Has a rather newbie style security hole in APM I stumbled over, which has already been fixed in 13.

     

  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    Icon for Noctilucent rankNoctilucent
    Apr 19, 2017

    Current F5 released 

    Hotfix: Hotfix-BIGIP-12.1.2.0.93.249-EHF93

    But if you have any issue and which is effecting to production traffic. In that case ask F5 Support for Engineering hot fix.

    • Simon_Waters_13's avatar
      Simon_Waters_13
      Icon for Cirrostratus rankCirrostratus
      Apr 19, 2017

      Do I take it if I have 0.212.249 I already have the same base build, and there is no need to upgrade?

       

      Alas "Engineering Hotfix Index" is a meaningless without F5 explaining what it means.

       

      Also unclear what the EHF93 suffix is doing, I don't recall seeing suffixes on builds before.

       

    • Samir_Jha_52506's avatar
      Samir_Jha_52506
      Icon for Noctilucent rankNoctilucent
      Apr 19, 2017

      Yeah; Without major impact ENG hotfix is meaningless. I guess, we should wait till F5 release new hot-fix officially to everyone.

       

      In fact we have discovered few bugs in latest 12.1.2 version & reported to F5.