cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Who Me Too'd this topic

After more than 2 years Linux vulnerability reporting is still useless.

L1 Bithead

It is about 2 years ago that the Linux vulnerabilities reporting issues where announced to Palo Alto.
It's still not fixed. 😞

It looks like Cortex does not look beyond the dash in the version numbers of installed applications.  For example; Cortex is reporting a vulnerable zlib 1.2.11
The one actually installed was: zlib.x86_64 1.2.11-40.el9
which was the patched version. 

Reported it again and so far no progress or action.
We're currently investigating a Cortex replacement due to Palo's lack of actions on this one and other reported Cortex issues.


Who Me Too'd this topic