fleet/server/vulnerabilities
Victor Lyuboslavsky 6d6a29a089
Fixed Admin By Request false positive CVEs (#42095)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #41586

The fix is speculative since I wasn't able to find/get the "Admin By
Request" app to install.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.

## Testing

- [x] Added/updated automated tests

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Bug Fixes**
* Fixed false-positive vulnerability reports for "Admin By Request" on
macOS and Linux. Vulnerabilities CVE-2019-17201 and CVE-2019-17202 are
Windows-specific and will now only be reported on Windows systems,
eliminating unnecessary alerts on other platforms.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-03-20 10:35:56 -05:00
..
customcve Migrating vulnerabilities pkgs to slog. (#40106) 2026-02-20 15:36:38 -06:00
goval_dictionary Migrating vulnerabilities pkgs to slog. (#40106) 2026-02-20 15:36:38 -06:00
io Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00
macoffice Vulnerabilities cron optimization (#39820) 2026-02-18 13:59:15 -06:00
msrc Fixed bug where Windows hosts would get 0 CVEs. (#42021) 2026-03-19 22:01:59 -05:00
nvd Fixed Admin By Request false positive CVEs (#42095) 2026-03-20 10:35:56 -05:00
oval Vulnerabilities cron optimization (#39820) 2026-02-18 13:59:15 -06:00
testdata Added vulnerability scanning support for Windows Server 2025 hosts (#41232) 2026-03-10 14:03:59 -05:00
utils Add gosimple linter (#23250) 2024-10-29 14:17:51 -05:00