topic Defender with a vulnerability in openssl-libs in Prisma Cloud Discussions

Defender with a vulnerability in openssl-libs

PJablonski — Mon, 21 Dec 2020 23:06:11 GMT

Defender contains a vulnerability openssl-libs version 1.0.2k-19.el7. The fix is in 1.0.2k-21.el7_9.

Do you advise to upgrade manually all Defenders or an upgrade will be available in Prisma?

Re: Defender with a vulnerability in openssl-libs

PBowden — Tue, 29 Dec 2020 11:53:05 GMT

Hi,

I think it would be appropriate to patch vulnerabilities like this without waiting for a hotfix, however, remember to always have a dev/sandbox to test in with a good backup. Lastly, always upgrade to the fixed version exactly to avoid false positives.