For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Fred_A_30606's avatar
Fred_A_30606
Icon for Nimbostratus rankNimbostratus
May 13, 2014

Security Mailing List Updates

I have been subscribed to the F5 security mailing list for some time now (security-subscribe@lists.f5.com) but only ever seem to get updates regarding ASM attack signatures and not any vulnerabilitie...
devops
iControl
iControlREST
management
security
TMSH
Fred_A_30606's avatar
Fred_A_30606
Icon for Nimbostratus rankNimbostratus
May 14, 2014

I logged Service Request : C1576287 for this and will contact our account manager too. It seems logical that the security mailing list should be sending notices regarding F5 vulnerabilities.

 

Thanks for your responses and I will let you know what happens.

 

  • Jason_Cohen_417's avatar
    Jason_Cohen_417
    Historic F5 Account
    Aug 29, 2014
    Has there been any progress on this? I'd be interested in getting updates from this list anytime there is new information about and F5 related vulnerability.
  • Fred_A_30606's avatar
    Fred_A_30606
    Icon for Nimbostratus rankNimbostratus
    Aug 31, 2014
    Cohen - On the same day you posted your comment I received a security list email regarding CVE-2014-2927. Did you get that one? F5 told me that my service request regarding the F5 security list has sparked some internal discussion - perhaps they will be providing more vulnerabilities via this method in the future however for now they informed me that he RSS feeds are the best way to track vulns. Below is some info from the case I can share. According to your needs I believe that the RSS solution is the quickest way to receive the security advisory solutions: RSS feed for Security Advisory Solutions specifically (new and/or updated ones): http://support.f5.com/kb/en-us/rss.rss.doctype-securityadvisorypage.pageStatus-new.xml For further customization you can select amongst the categories here: http://support.f5.com/kb/en-us/rss.html Coming now to Outlook configuration, I searched on the Internet and for example you could use the sample configuration from the article below to set it up: http://blogmines.com/blog/how-to-use-outlook-2010-as-a-rss-reader/ The TechNews mailing list is an alternative but only if you prefer to receive updates weekly.