M25 Hotfix dependence not available

For the my Pega environments (Pega 8.5.6) is ​​required to install the M25 Security Advisory hotfix. The release notes indicate that installing the F25 Security Advisory hotfix might also be necessary; however, it is not available for my environment. The F25 hotfix is available only for the Pega 8.8, Infinitry 23 and 24

What is the recommended course of action in this case?

Hi @salvogiu ,

Pega Security Advisory F25 Vulnerability - Remediation Note | Support Center? - Based on the official Pega documentation, standard hotfixes for the F25 security advisory are not available for versions prior to 8.8.1.

The official advisory explicitly states: “Hotfixes are only being created for the patch releases listed above under Hotfix Remediation. We will not provide hotfixes on prior versions of the platform.”

Option 1: Upgrade the Pega Platform (Recommended)

and if immediate upgrade is not possible Option 2: Contact Pega Global Client Support


Thanks for the support Kiruthika A

Hi @salvogiu The same convo over here, You can reach the Pega GCS

Thanks @Tharun K T , but my question is different: Hotfix M25 depend on Hotfix F25, but F25 is not available for my version of Pega. In this case, can I install hotfix M25?