Lucas Manuel Rodriguez
91b3dd697c
Fixes: https://github.com/fleetdm/fleet/actions/runs/26082608768/job/76687709248. Run: https://github.com/fleetdm/fleet/actions/runs/26104309524. <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Chores** * Added vulnerability assessment documents for CVE-2026-29111 and CVE-2026-4878 indicating these vulnerabilities do not affect the product. <!-- review_stack_entry_start --> [](https://app.coderabbit.ai/change-stack/fleetdm/fleet/pull/45800?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack) <!-- review_stack_entry_end --> <!-- end of auto-generated comment: release notes by coderabbit.ai -->
30 lines
800 B
JSON
30 lines
800 B
JSON
{
|
|
"@context": "https://openvex.dev/ns/v0.2.0",
|
|
"@id": "https://openvex.dev/docs/public/vex-8c9c9f5a907de09127f39bed428cf3e4cc9af921abccf73926fa1d36405b89c8",
|
|
"author": "@lucasmrod",
|
|
"timestamp": "2026-05-19T10:25:00.000000-03:00",
|
|
"version": 1,
|
|
"statements": [
|
|
{
|
|
"vulnerability": {
|
|
"name": "CVE-2026-4878"
|
|
},
|
|
"timestamp": "2026-05-19T10:25:00.000000-03:00",
|
|
"products": [
|
|
{
|
|
"@id": "bomutils"
|
|
},
|
|
{
|
|
"@id": "pkg:deb/debian/libcap2"
|
|
},
|
|
{
|
|
"@id": "pkg:deb/debian/libcap2-bin"
|
|
}
|
|
],
|
|
"status": "not_affected",
|
|
"status_notes": "mkbom and xar from fleetdm/bomutils do not call cap_set_file()",
|
|
"justification": "vulnerable_code_not_in_execute_path"
|
|
}
|
|
]
|
|
}
|