fleet/changes/24810-cve-no-semver at a86253d2bfedd6b8a176fe7d3dfb55df7e28f837 - Elgato_dark/fleet - Forgejo: Beyond coding. We Forge.

Elgato_dark/fleet

mirror of https://github.com/fleetdm/fleet synced 2026-05-23 17:08:53 +00:00

Konstantin Sykulev 2b0be3771d

Removing usage of semver in resolved in version resolution (#26062 )

The host software version and VersionEndExcluding did not always get
parsed by semver properly. Switching to using `SmartVerCmp` from the
nvdtools code. This is much more relaxed when parsing versions.

https://github.com/fleetdm/fleet/issues/24810

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Added/updated automated tests
- [ ] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality

2025-02-11 12:21:42 -06:00

1 line

No EOL

112 B

Text

Raw Blame History

* Changed software version cve resolved in version parsing and comparison to use custom code rather than semver,