Lucas Manuel Rodriguez
91b3dd697c
Fixes: https://github.com/fleetdm/fleet/actions/runs/26082608768/job/76687709248. Run: https://github.com/fleetdm/fleet/actions/runs/26104309524. <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Chores** * Added vulnerability assessment documents for CVE-2026-29111 and CVE-2026-4878 indicating these vulnerabilities do not affect the product. <!-- review_stack_entry_start --> [](https://app.coderabbit.ai/change-stack/fleetdm/fleet/pull/45800?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack) <!-- review_stack_entry_end --> <!-- end of auto-generated comment: release notes by coderabbit.ai -->
30 lines
803 B
JSON
30 lines
803 B
JSON
{
|
|
"@context": "https://openvex.dev/ns/v0.2.0",
|
|
"@id": "https://openvex.dev/docs/public/vex-1a423d64a3cd480f2dfc14f1239d3c07765a885b166eeb4d0e3195e17301eb97",
|
|
"author": "@lucasmrod",
|
|
"timestamp": "2026-05-19T10:25:00.000000-03:00",
|
|
"version": 1,
|
|
"statements": [
|
|
{
|
|
"vulnerability": {
|
|
"name": "CVE-2026-29111"
|
|
},
|
|
"timestamp": "2026-05-19T10:25:00.000000-03:00",
|
|
"products": [
|
|
{
|
|
"@id": "bomutils"
|
|
},
|
|
{
|
|
"@id": "pkg:deb/debian/libsystemd0"
|
|
},
|
|
{
|
|
"@id": "pkg:deb/debian/libudev1"
|
|
}
|
|
],
|
|
"status": "not_affected",
|
|
"status_notes": "mkbom and xar from fleetdm/bomutils do not use systemd IPC APIs",
|
|
"justification": "vulnerable_code_not_in_execute_path"
|
|
}
|
|
]
|
|
}
|