Hi i wonder if anyone can help shed some light on what is go

Question

Hi i wonder if anyone can help shed some light on what is going on here in the vulnerable software detection for example the top one that affects `cryptography` which is showing this CVE <https nvd nist gov vuln detail CVE 2020 36242>

Ryan · Answer

All 746 hosts listed here are running Ubuntu 18 04 which according to the vendor are not vulnerable to this <https ubuntu com security CVE 2020 36242>

Ryan · Answer

Is there any way for us to mark them as not actually vulnerable as I think this is a false positive

Ryan · Answer

Thanks slightly smiling face

Gavin · Answer

Just so you re aware this exists <https github com fleetdm fleet issues 4218>

Tomas Touceda · Answer

we are in the process of improving how we detect ubuntu vulnerabilities this work will reduce false positives such as the one you saw cc < Michal Nicpon>

Ryan · Answer

Ah brilliant thanks for that slightly smiling face

Ryan · Answer

Nice catch indeed

Ryan · Answer

I ve subscribed to the thread slightly smiling face