topic Re: New Security Advisories Page in General Topics

New Security Advisories Page

PhoneBoy — Thu, 13 Feb 2025 16:24:10 GMT

Thanks to @Uri_Lewitus and team, we are happy to announce a new page for Security Advisories that impact Check Point products: https://support.checkpoint.com/security-advisories

The main thing that's new here is that we now have a single page that lists all the relevant disclosures versus being scattered across multiple sources. This is consistent with our CISA Pledge that includes a commitment to improving transparency. Also, this page does not require you to be logged into SupportCenter.

Key highlights:

Clickable CVEs linking to SK articles or the Jumbo Hotfix book (unless Check Point is unaffected).
170+ CVEs imported so far, covering vulnerabilities since 2021 and all Security Alert-tagged SKs.
Includes Third-Party & Check Point Software vulnerabilities.
Ongoing Expansion with backlog CVEs being added based on priority.
Search functionality is currently basic, though we plan to add advanced search, filters, and export options in the future.

Re: New Security Advisories Page

Lesley — Thu, 13 Feb 2025 17:27:46 GMT

Yes! great work. Makes life more easy.

Re: New Security Advisories Page

the_rock — Thu, 13 Feb 2025 18:12:20 GMT

Great news! Awesome work.

Andy

Re: New Security Advisories Page

JoSec — Thu, 13 Feb 2025 19:48:26 GMT

I mentioned this to my SE years ago about making it easier to find an applicable CVE . Thank you and about time.

Re: New Security Advisories Page

the_rock — Thu, 13 Feb 2025 19:50:38 GMT

I mentioned it one time "in passing" when on phone with TAC and guy said to bring it up with SE. I did, but its been few years. Very happy its done now.

Andy

Re: New Security Advisories Page

JozkoMrkvicka — Thu, 13 Feb 2025 21:59:44 GMT

Pretty please make it as RSS feed.

If new Advisory is published, will it be "Advisory # 1" and current Advisory #1 will be #2 ?

Would like to see some timestamp, like date of publish or date of fix in overview of every Advisory. Possible used for future filter/search.

Re: New Security Advisories Page

PhoneBoy — Fri, 14 Feb 2025 00:04:52 GMT

As much as I'm with you on RSS feeds, I'm not aware of any concrete plans regarding them.
The Published/Update dates are actually there already on the page and you can sort by them (though it only shows date, not time).

Re: New Security Advisories Page

Henrik_Noerr1 — Fri, 14 Feb 2025 08:16:32 GMT

Wow! I never thought I lived to see Check Point deliver a CVE page 🙂

Ok, no rss feed. So can you send a notif to a email when the site is updated?

Also let me filter out product suites like Harmony that we do not use.

Thanks,

Henrik

Re: New Security Advisories Page

PhoneBoy — Fri, 14 Feb 2025 19:34:39 GMT

Filtering right now is very limited, as noted in the initial post.
If you subscribe to Security Alerts (something already possible), I believe it will get the content that appears on this page as well as everything on it links to an SK.

Re: New Security Advisories Page

the_rock — Sat, 15 Feb 2025 00:08:30 GMT

Just the fact page is now available is AWESOME!

Re: New Security Advisories Page

MattGo — Tue, 18 Feb 2025 09:36:38 GMT

A great start but as you mention, filtering is basic. I can search for e.g. R81.20 but it would be great to be able to filter by JHF too, so I know what vulnerabilities a particular gateway might be susceptible to if downlevel.

Re: New Security Advisories Page

PhoneBoy — Tue, 18 Feb 2025 21:07:40 GMT

That would definitely be a bonus.

Re: New Security Advisories Page

the_rock — Wed, 19 Feb 2025 00:17:27 GMT

Agree there 100%...filtering by jumbo would be amazing.