8682 2015-11-11 22:37:23 +0000 Implement a way to check for vulnerable software on running target 2021-04-08 14:35:52 +0000 1 1 7 Build System, Metadata & Runtime Security - Recipe Upgrade security unspecified x86 Multiple RESOLVED WORKSFORME Medium enhancement Future 1 mariano.lopez newcomer akuster bluelightning randy.macleod --- --- Yes (doc changes required) oldest_to_newest 56400 0 mariano.lopez 2015-11-11 22:37:23 +0000 When a target is deployed in the field, usually is never updated, not even for security fixes. What I'm proposing is to have a service in the target that checks the current packages and versions used, then compare with a list of vulnerable packages and versions; if the target is using a vulnerable software then notify the vendor/user. This won't automatically do the software update on the field but I think is a step in the right direction. 56712 1 sgw 2015-11-23 21:58:33 +0000 Also please review the existing meta-security layer which has some other runtime testing tools. 79544 2 akuster 2018-02-22 04:00:25 +0000 there is a way of doing this. basically OVL files via openscap to run. this works. recipes in meta-security. Its generating the OVL files. This also creates html reports. 89898 3 randy.macleod 2021-04-08 14:35:52 +0000 As Armin mentioned there is a solution in meta-security. There are other solutions provided by companies.