Hi,
We have Version 18.0 (Build 939) 32 SC Enterprise Annual running in a Debian VM built with PBXExpress in Azure. Auto updates are enabled for a weekly check. I'm aware that when configured like this, Debian security updates should be applied following each update check.
Our vulnerability scanners are identifying problems in the virtual machine, for example, one in Python 2.7.
When I check the system logs, I can see that there was an update check made at 4am on a Tuesday, as it should be, but it did not update Python:
Using the terminal I checked the version of Python that's installed:
Visiting the Python package page for Debian Buster, it shows a newer version is available that contains the security fixes that I want:
We have Version 18.0 (Build 939) 32 SC Enterprise Annual running in a Debian VM built with PBXExpress in Azure. Auto updates are enabled for a weekly check. I'm aware that when configured like this, Debian security updates should be applied following each update check.
Our vulnerability scanners are identifying problems in the virtual machine, for example, one in Python 2.7.
When I check the system logs, I can see that there was an update check made at 4am on a Tuesday, as it should be, but it did not update Python:
Code:
2023-10-10 04:26:01,063 DEBUG Checking: python2.7 ([<Origin component:'main' archive:'buster' origin:'Debian' label:'Debian' site:'repo.3cx.com' isTrusted:True>])
2023-10-10 04:26:01,076 WARNING package python2.7 upgradable but fails to be marked for upgrade ()Using the terminal I checked the version of Python that's installed:
Code:
[email protected]$ dpkg-query -W python2.7
python2.7 [email protected]$ dpkg-query -W python2.7Visiting the Python package page for Debian Buster, it shows a newer version is available that contains the security fixes that I want:
Code:
2.7.16-2+deb10u3Why is 3CX not applying these updates? Are they not pushed to repo.3cx.com? Thank you! |
