For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

vishnu_agrawal_'s avatar
vishnu_agrawal_
Icon for Nimbostratus rankNimbostratus
Oct 07, 2014

ShellShock: For our customers, Could you please provide us a PATCH instead of going for an upgrade ?

Hi,   We have our customers having the products in the version " BIG-IP 10.2.4". The solution provided in the f5 website is to upgrade every products in the vulnerable version "10.2.4" to 11.6HF1 ...
application delivery
BIG-IP DNS
LTM
security
Andrew_Husking's avatar
Andrew_Husking
Icon for Cirrus rankCirrus
Oct 08, 2014

Depends on complexity of your setup.

 

We had issues in the past going from 10.2 to 11.0, but had no issues going from 11.2 to 11.5.0 (although that wasn't as much of a direct upgrade as it was migration to vCMP by moving config manually).

 

If you can spin up a virtual F5 to your active version (not allowing network access for anything except management, and changing the management address), then do the upgrade to 11.6 HF1 and see how it goes.

 

But as nitass said, they have patches for the latest versions, but older versions should be patched, but are likely to have a lower priority as it's old code.