Scott Gress edc68d3042 Add versions to product names in MSRC bulletins to aid Windows vulnerability matching (#24172) ... for #24041 This PR addresses an issue that can cause Windows vulnerability checks to fail (possibly causing false negatives). We determine whether a vulnerability in an MSRC bulletin applies to any hosts in a Fleet instance by attempting to matching the data in [each row of the `operating_systems` table](65e374c85c/cmd/fleet/cron.go (L297-L303)) with [at least one "product" in a bulletin](e2d9a9016c/server/vulnerabilities/msrc/analyzer.go (L39)), including [matching architecture and "display version"](76f5baced9/server/vulnerabilities/msrc/parsed/product.go (L26-L39)). However a subset of products listed in these bulletins do not include the display version, so for example a host whose OS was listed as `Microsoft Windows Server 2022 Datacenter 21H2` (21H2 being the "display version") would match nothing in the bulletins because no listed Server 2022 products include "21H2" in their names. The fix made here is to add relevant version info to the products list when we do our ETL of the MSRC bulletins. The version info was gleaned from https://en.wikipedia.org/wiki/List_of_Microsoft_Windows_versions. We see logs related to this issue a lot, so cleaning this up will alleviate some noise and infra costs as well.		2024-12-17 09:46:03 -06:00
..
parsed	Add versions to product names in MSRC bulletins to aid Windows vulnerability matching (#24172)	2024-12-17 09:46:03 -06:00
testdata	Add resolved_in_version for Windows OS Vulns (#16546)	2024-02-07 06:19:59 -07:00
xml	Updating golangci-lint to 1.61.0 (#22973)	2024-10-18 12:38:26 -05:00
analyzer.go	Add gosimple linter (#23250)	2024-10-29 14:17:51 -05:00
analyzer_test.go	Add resolved_in_version for Windows OS Vulns (#16546)	2024-02-07 06:19:59 -07:00
msrc_api.go	Don't reuse GitHub HTTP client to pull MSRC feeds (#22493)	2024-09-27 21:23:48 -05:00
msrc_api_test.go	Update MSRC feed URL in test (#22494)	2024-09-28 09:18:55 -05:00
parser.go	Updating golangci-lint to 1.61.0 (#22973)	2024-10-18 12:38:26 -05:00
parser_test.go	Add versions to product names in MSRC bulletins to aid Windows vulnerability matching (#24172)	2024-12-17 09:46:03 -06:00
sync.go	Feature 9386: Parse the Mac Office release notes for vulnerability processing (#9993)	2023-02-24 14:18:25 -04:00
sync_test.go	Improve test coverage and bug fix (#10301)	2023-03-06 15:07:27 -04:00