diff --git a/articles/vulnerability-processing.md b/articles/vulnerability-processing.md index a830710093..114a7c3458 100644 --- a/articles/vulnerability-processing.md +++ b/articles/vulnerability-processing.md @@ -21,7 +21,7 @@ Fleet detects vulnerabilities for these software types: | Packages | Python, Homebrew | Python, Atom, Chocolatey |
For Ubuntu, Debian, RHEL (including CentOS), and Fedora: packages defined in the [OVAL definitions](https://github.com/fleetdm/nvd/blob/master/oval_sources.json), except for vulnerabilities involving configuration files.
For Amazon Linux, packages maintained by Amazon by checking [ALAS advisories](https://alas.aws.amazon.com/).
| | IDE extensions | VS Code extensions | VS Code extensions | VS Code extensions | -As of right now, only app names with all ASCII characters are supported. Apps with names featuring non-ASCII characters, such as Cyrillic, will not generate matches. +Currently, only software names with all ASCII characters are supported. Vulnerabilities won't be detected for software with names featuring non-ASCII characters, such as Cyrillic, or software that has been renamed from its default name (e.g. "Chrome 2" instead of "Google Chrome"). For some software, Fleet uses [custom rules](https://github.com/fleetdm/fleet/blob/main/server/vulnerabilities/nvd/cpe_translations.json) to mitigate these issues on an app-by-app basis. For Ubuntu Linux, kernel vulnerabilities with known variants (ie. `-generic`) are detected using OVAL. Custom kernels (unknown variants) are detected using NVD.