From ffb90d79512ac05c23f32f4bfc84ea97d830ea2d Mon Sep 17 00:00:00 2001 From: Lucas Manuel Rodriguez Date: Mon, 28 Apr 2025 12:11:45 -0300 Subject: [PATCH] Run `make generate-doc` (#28595) PRs are failing due to mismatch in auto-generated docs: https://github.com/fleetdm/fleet/actions/runs/14685592347/job/41213770932?pr=28531 Co-authored-by: Rachael Shaw --- security/status.md | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) diff --git a/security/status.md b/security/status.md index 9289451769..5488c2233b 100644 --- a/security/status.md +++ b/security/status.md @@ -88,6 +88,16 @@ Following is the vulnerability report of Fleet components. - **Justification:** `vulnerable_code_not_in_execute_path` - **Timestamp:** 2025-04-10T07:36:31.1157-03:00 +### CVE-2019-10202 +- **Author:** @lucasmrod +- **Status:** `not_affected` +- **Status notes:** fleetctl does not use Java +- **Products:** + - `fleetctl` + - `pkg:maven/org.codehaus.jackson/jackson-mapper-asl` +- **Justification:** `vulnerable_code_not_in_execute_path` +- **Timestamp:** 2025-04-15T10:31:31.924953-03:00 + ### CVE-2023-32698 - **Author:** @getvictor - **Status:** `not_affected` @@ -98,6 +108,26 @@ Following is the vulnerability report of Fleet components. - **Justification:** `vulnerable_code_cannot_be_controlled_by_adversary` - **Timestamp:** 2025-04-09T10:26:02.350338-03:00 +### CVE-2023-45853 +- **Author:** @lucasmrod +- **Status:** `not_affected` +- **Status notes:** fleetctl does not use zlib C library +- **Products:** + - `fleetctl` + - `pkg:deb/debian/zlib1g` +- **Justification:** `vulnerable_code_not_in_execute_path` +- **Timestamp:** 2025-04-15T10:17:19.625099-03:00 + +### CVE-2023-6879 +- **Author:** @lucasmrod +- **Status:** `not_affected` +- **Status notes:** fleetctl does not use libaom3 +- **Products:** + - `fleetctl` + - `pkg:deb/debian/libaom3` +- **Justification:** `vulnerable_code_not_in_execute_path` +- **Timestamp:** 2025-04-15T10:28:21.796437-03:00 + ### CVE-2024-7254 - **Author:** @lucasmrod - **Status:** `not_affected`