OPNsense Security Audit with 1 pronlem

[Barney Calhoun]

Hello List,

i updated from 19.1.10_1 to 19.7 a few day ago, so my opnsense should be up to date. But my security-audit looks like this:

***GOT REQUEST TO AUDIT SECURITY***
vulnxml file up-to-date
python37-3.7.3_1 is vulnerable:
python 3.7 -- multiple vulnerabilities
CVE: CVE-2019-9948
CVE: CVE-2019-9740
WWW: https://vuxml.freebsd.org/freebsd/a449c604-a43a-11e9-b422-fcaa147e860e.html

1 problem(s) in the installed packages found.
***DONE***

Can someone confirm that this is normal ?

Thanks

[JoK]

Got the same problem, if it IS a problem...maybe its a bug :-)

[hbc]

It's not a bug, it's a feature. It informs you, that packages are installed that are known to have security issues and need updates.

Just wait for next opnsense update to install fixed packages.

See here:
https://forum.opnsense.org/index.php?topic=13571.0;topicseen

[JoK]

Thanks :-)

[franco]

Should be clean for now as for 19.7.1 as promised elsewhere. :)


Cheers,
Franco