Hello,
we monitor our OPNsense installation with netdata. We found that netdata.cloud complains about security issue with netdata 1.39.1 on our OPNsense Business Edition installations. We have a few with Community Editions and these are fine and have a newer installation.
Is it possible for the OPNsense Team to include netdata in the next Update? or is it possible to use the netdata package from the community edition on the business edition or does this brake the updating process?
Thanks
Since when? A security refresh was provided last week and it didn't show a netdata vulnerability.
It would also help reference the CVE in question (if applicable).
Cheers,
Franco
Hi Franco,
you are right, the banner "9 Nodes are below recommend agent version v1.39.1. Please update them to ensure you get the latest security bug fixes." in the netdata cloud console is a bit misleading and suggest there might be a security issue with the old netdata agent. It looks like there is no open cve for this version.
Ah, ok, 1.42.4 will be provided with 23.10. The release date is October 17th.
If there is a CVE coming out that FreeBSD ports doesn't record letting is know is a good way to see if a hotfix can be provided for the business edition. But in this particular case we will have to wait it out :)
Cheers,
Franco