Security advisory subscription

[seren]

The recent post by Michael_Kammer (Stay safe with Zabbix Security Advisories) raises the question of how to be alerted when new security advisories are published. I see no way of subscribing, nor anything easy to monitor like an RSS feed.

I've resorted to using VisualPing to monitor https://www.zabbix.com/security_advisories for changes, but it would be nice to have method that doesn't rely of page-scraping.

Is there something I'm missing, or is there a plan to implement this? Even a "Security Advisories" forum (like the "Zabbix Announcements" forum) would work.

Thanks.

[Africala]

Hi,
You’re not missing anything — currently Zabbix doesn’t provide a dedicated subscription mechanism (like RSS or email alerts) specifically for security advisories, which is why many users end up relying on workarounds like page monitoring.

A couple of alternative approaches you could consider:

• Use a web scenario or HTTP agent item in Zabbix itself to monitor the security advisories page for changes (e.g., hash or content length changes)
• Set up a custom script with cron to check for updates and trigger alerts via Zabbix when differences are detected
• Monitor Zabbix release announcements or GitHub activity, as security fixes are often reflected there as well

I agree that having an official RSS feed or a dedicated “Security Advisories” notification channel would be much cleaner and more reliable than page-scraping tools like VisualPing. A forum or subscription-based update system would definitely improve visibility for critical updates.
Until something official is introduced, combining page monitoring with alerting (email/SMS/other channels) is probably the most practical approach.