Vulnerability CVE-2024-4741 in Checkmk agent

Feedback
1

When will Checkmk update OpenSSL files to solve the vulnerability CVE-2024-4741 in Checkmk agent?

Information is found by Microsoft Defender and the source look like to be at python-3.
image

You find information here:

2

What exactly should be fixed. Inside CheckMK is no “node-openssl” NPM package included as far as i know.

3

Hi Andreas
I’m really sorry but I get wrong info from our security team. I will update the text to correct vulnerability. The security risk is is placed in Checkmk Agent.

4

Hi Magnus,

This should be solved in version 2.3.0p18 (and p19 as well of course), where the Windows agent’s Python version was updated.

5

Great to here Hannes! :slight_smile:

6

Hello Hannes,

is that also true for the 2.2p36 Release ? I have a customer that is explicitly asking for that.
Thank you :slight_smile:

7

Hello Andre,

If nothing went wrong, 2.2.0p35 should already ship Python 3.11.10 for the Windows agent, which should contain a sufficiently recent version of OpenSSL.

Please let me know if that’s not the case :slight_smile:

Just for reference:
[1] Changelog — Python 3.11.10 documentation
[2] https://openssl-library.org/news/secadv/20240528.txt