This message was deleted.
# neuvector_suse-securitya
adamant-kite-43734
12/16/2025, 8:32 PMThis message was deleted.
q
quaint-candle-18606
12/16/2025, 10:15 PMArguments among CVE scanners is common, sadly. And before I even got to that point in your post, my brain went "_Is it RedHat? I'll bet it's RedHat_" 😄
A quick (🤞 ) and dirty solution may be to "accept" the CVEs in the UI. Guessing it's not 10k CVEs, but 10k hits across your org, correct?
a
alert-petabyte-51499
12/16/2025, 10:23 PMThis was just a scan done on a single node, patched w/ dnf update last week!
We were looking for a way to sort or filter by the "Informational" findings so we could quickly accept/eliminate those, but didn't see an option for that.
alert-petabyte-51499
12/16/2025, 10:23 PMAnd it was 23000 findings ðŸ«
🤯 1
q
quaint-candle-18606
12/16/2025, 10:29 PMThat's indeed a LOT. Are there a ton of packages on there?
quaint-candle-18606
12/16/2025, 10:45 PMIn your opinion would filtering against the Errata help, if you could do that?
a
alert-petabyte-51499
12/17/2025, 2:17 AMThere aren't honestly that many packages installed, its a fairly minimal build for k8s prep
alert-petabyte-51499
12/17/2025, 2:21 AMI do think filtering against errata could help - it seems that I'm not the first person to run into false positives w/ RedHat back-porting fixes to earlier versions
q
quaint-candle-18606
12/19/2025, 5:57 PMShort version: There's a bit of a ground-up rewrite of scanning coming in 2026; issues like this are top of mind.
3 Views