F5 security advisory (AV25-509)

Serial number: AV25-509
Date: August 13, 2025

On August 13, 2025, F5 published a security advisory to address vulnerabilities in the following products:

  • APM Clients – version 7.2.5
  • BIG-IP (APM) – versions 17.1.0 to 17.1.2, versions 16.1.0 to 16.1.5 and versions 15.1.0 to 15.1.10
  • BIG-IP (APM) – versions 17.5.0 to 17.5.1, versions 17.1.0 to 17.1.2, versions 16.1.0 to 16.1.6 and versions 15.1.0 to 15.1.10
  • BIG-IP (all modules) – versions 17.1.0 to 17.1.2, versions 16.1.0 to 16.1.5 and versions 15.1.0 to 15.1.10
  • BIG-IP (all modules) – versions 17.5.0 to 17.5.1, versions 17.1.0 to 17.1.2, versions 16.1.0 to 16.1.6 and versions 15.1.0 to 15.1.10
  • BIG-IP Next (all modules) – versions 20.3.0
  • BIG-IP Next CNF – versions 2.0.0 to 2.0.2 and versions 1.1.0 to 1.4.1
  • BIG-IP Next SPK – versions 2.0.0 to 2.0.2 and versions 1.7.0 to 1.9.2
  • BIG-IP Next for Kubernetes – version 2.0.0
  • F5 Access for Android – versions 3.1.0 to 3.1.1
  • F5 Silverline in HTTP/2 enabled proxy servers (all services)
  • NGINX Open Source – versions 0.7.22 to 1.29.0
  • NGINX Plus – versions R30 to R34

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

Date modified: