Windows Agent OPENSSL Security Finding

General
1

Hello,

Checkmk 2.3.0 P19

Hello is there a date for fixing tthe security Findings for the Windows Agent?

Findings are :
c:\programdata\checkmk\agent\modules\python-3.venv\scripts\libcrypto-3.dll, c:\programdata\checkmk\agent\modules\python-3.venv\scripts\libssl-3.dll, c:\programdata\checkmk\agent\modules\python-3\dlls\libcrypto-3.dll,
…

Regards
Claus

2

If you update the system to the latest patch release the problem should be fixed.
Without knowing what security findings you mean, it is complicated to make a statement.

3

Hallo,
OPENSSL Version Python module → 3.0.15
→ C:\ProgramData\checkmk\agent\modules\python-3.venv\Scripts

Aktuell:
3.4.x

also after Update to 2.3.0.P34 not updated

Some security / software scanner generate now alarms for this.

4

for 3.0.15 there are only two CVE with severity low are existing. It is the latest version from the 3.0 version.

As i said before the alarms they generate would be relevant for the CMK team i think.

5

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed. Contact an admin if you think this should be re-opened.