Security advisory subscription

[seren]

The recent post by Michael_Kammer (Stay safe with Zabbix Security Advisories) raises the question of how to be alerted when new security advisories are published. I see no way of subscribing, nor anything easy to monitor like an RSS feed.

I've resorted to using VisualPing to monitor https://www.zabbix.com/security_advisories for changes, but it would be nice to have method that doesn't rely of page-scraping.

Is there something I'm missing, or is there a plan to implement this? Even a "Security Advisories" forum (like the "Zabbix Announcements" forum) would work.

Thanks.

[Africala]

Hi,
You’re not missing anything — currently Zabbix doesn’t provide a dedicated subscription mechanism (like RSS or email alerts) specifically for security advisories, which is why many users end up relying on workarounds like page monitoring.

A couple of alternative approaches you could consider:

• Use a web scenario or HTTP agent item in Zabbix itself to monitor the security advisories page for changes (e.g., hash or content length changes)
• Set up a custom script with cron to check for updates and trigger alerts via Zabbix when differences are detected
• Monitor Zabbix release announcements or GitHub activity, as security fixes are often reflected there as well

I agree that having an official RSS feed or a dedicated “Security Advisories” notification channel would be much cleaner and more reliable than page-scraping tools like VisualPing. A forum or subscription-based update system would definitely improve visibility for critical updates.
Until something official is introduced, combining page monitoring with alerting (email/SMS/other channels) is probably the most practical approach.

[vitalijs.m]

Zabbix now has RSS subscription for Security Advisories, available on the page: https://www.zabbix.com/security_advisories
Direct link: https://assets.zabbix.com/files/zabb...advisories.rss

[Africala]

Thanks for the update and for adding the RSS subscription feed — this is definitely a much cleaner approach for monitoring security advisories.

We were previously evaluating different approaches around automated alerting and notification delivery for these advisories (email/SMS/webhook integrations), especially for infrastructure and operations teams that need faster escalation workflows.
Having an official RSS endpoint simplifies the process significantly and makes it easier to integrate into monitoring and messaging pipelines.

We’ll likely test integrating this feed into our notification infrastructure workflows at Africala( https://africala.net) for real-time alert delivery across SMS and messaging channels. Appreciate the clarification and the addition of the feed.