In the security tab there are 2 notifications: coolercontrol: 3 critical problems and 56 h
Posted by franciscus
My question: In the security tab there are 2 notifications: coolercontrol: 3 critical problems and 56 high-severity problems — a newer version would fix them Needs attention You are already on the newest coolercontrol that SparkBox ships, so there is nothing to click. Fixes exist upstream — SparkBox needs to ship a newer coolercontrol image. cloudflared: 1 critical problem and 10 high-severity problems — a newer version would fix them Needs attention You are already on the newest cloudflared that SparkBox ships, so there is nothing to click. Fixes exist upstream — SparkBox needs to ship a newer cloudflared image. SparkBox AI replied: Yeah, that's a "waiting on Tom" situation, not something you can fix from your end. Both messages are telling you the same thing: SparkBox is already shipping the newest image it has for those two apps, and the CVEs flagged live upstream in coolercontrol/cloudflared themselves — a new SparkBox release needs to bump those image pins before the count drops. Couple practical notes while you wait: - Your cloudflared logs actually show this already: Your version 2026.8.2 is outdated. We recommend upgrading it to 2026.8.3 — so there is a newer upstream build, it just hasn't been pinned into a SparkBox release yet. - Run sudo sparkbox upgrade periodically (or check Settings → Updates) — once Tom ships a release with newer pins for these two, that command is what pulls them in. sparkbox update alone won't get you a new pin, only refresh …(reply truncated — full chat sent to Tom)
1 replies
Chris wrote:
That AI answer is spot on, nothing wrong with your box. Those two flags just mean coolercontrol and cloudflared themselves have known security issues in the versions SparkBox currently ships, and you're already on the newest ones we have. There's no button on your end to clear them — it only happens once we ship an update that bumps those two images. Running sudo sparkbox upgrade (not update) every so often is what pulls a new one in once it's out. I've logged this so we can look at making that tab's wording less alarming when there's genuinely nothing to click.