Solved: Need to understand why we did not receive notification of CloverDX’s 5.16.1 patch/update

merodrig · ‎Nov 16, 2022

We received a CloverDX Security Advisory from CloverDX having to do with Text4Shell vulnerability (CVE-2022-42889). The recommendation was to upgrade to 5.16.1

ChrisG · ‎Dec 01, 2022

Thanks for noting this @merodrig. Flexera didn't receive an expected notification from the vendor about this update to trigger information it to be published through SVM.

The team have now been in touch with the vendor to ensure notifications will be received in the future, and also put in place some proactive monitoring of the vendor's website to watch for updates.

(Did my reply solve the question? Click "ACCEPT AS SOLUTION" to help others find answers faster. Liked something? Click "KUDO". Anything expressed here is my own view and not necessarily that of my employer, Flexera.)

View solution in original post

StevenW · ‎Nov 18, 2022

Hi,

I see you have raised a case for this query also, as advised this is being reviewed by our Research team.

Kind regards,

Steve

ChrisG · ‎Dec 01, 2022

Thanks for noting this @merodrig. Flexera didn't receive an expected notification from the vendor about this update to trigger information it to be published through SVM.

The team have now been in touch with the vendor to ensure notifications will be received in the future, and also put in place some proactive monitoring of the vendor's website to watch for updates.

(Did my reply solve the question? Click "ACCEPT AS SOLUTION" to help others find answers faster. Liked something? Click "KUDO". Anything expressed here is my own view and not necessarily that of my employer, Flexera.)