Schedule for RSA Authentication Manager Updates? (for java updates)

[msg9]

Hello,

our environment vulnerability scanner notes Java vulnerabilities on our RSA servers whenever there is a new Java release.

Is there a general schedule for the release of RSA's Authentication Manager updates in order to get Java updated?

Am I correct in review/monitoring the Advisories section for Authentication Manager for updates and vulnerabilities information, or would there be a better way to be notified when patches are released?
https://community.rsa.com/t5/securid-advisories/ct-p/securid-access-advisories

Thank you

[EricaChalfin · Accepted solution]

@msg9,

The patch release for Authentication Manager is approximately every three months, give or take. If a Java vulnerability is raised in the Oracle Critical Patch Update (OCPU), RSA's response will lag behind the announcement so that we have time to determine if Authentication Manager is impacted by the vulnerability, address the issue or determine that Authentication Manager infrastructure and/or components are not impacted. We recommend always being at the latest version of Authentication Manager and scanning again once you've patched.

As you already noted, the best way to stay up-to-date on product releases is to be subscribed to our product advisories.