mirror of
https://github.com/fleetdm/fleet
synced 2026-05-23 08:58:41 +00:00
bfe3b186d3
For #28837. Fixing this all of this because we got multiple reports from the community and customers and these were also detected by Amazon Inspector. - Fixes CVE-2025-22871 by upgrading Go from 1.24.1 to 1.24.2. - `docker scout` now fails the daily scheduled action if there are CRITICAL,HIGH CVEs (we missed setting `exit-code: true`). - Report CVE-2025-46569 as not affected by it because of our use of OPA's go package. - Report CVE-2024-8260 as not affected by it because Fleet doesn't run on Windows. - The `security/status.md` shows a lot of changes because we are now sorting CVEs so that newest come first. --- - [X] Changes file added for user-visible changes in `changes/`, `orbit/changes/` or `ee/fleetd-chrome/changes`. See [Changes files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files) for more information. - [ ] Manual QA for all new/changed functionality - For Orbit and Fleet Desktop changes: - [ ] Make sure fleetd is compatible with the latest released version of Fleet (see [Must rule](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/fleetd-development-and-release-strategy.md)). - [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit feature/bugfix should only apply to one platform (`runtime.GOOS`). - [ ] Manual QA must be performed in the three main OSs, macOS, Windows and Linux. - [ ] Auto-update manual QA, from released version of component to new version (see [tools/tuf/test](../tools/tuf/test/README.md)). - [ ] For unreleased bug fixes in a release candidate, confirmed that the fix is not expected to adversely impact load test results or alerted the release DRI if additional load testing is needed. |
||
|---|---|---|
| .. | ||
| .keep | ||
| 10098-org-logo | ||
| 19235-microsoft-compliance-conditional-access | ||
| 23497-gitops-sha | ||
| 24087-app-names | ||
| 24209-windows-mdm-error-msg | ||
| 24394-wlan-xml-profile-verification | ||
| 24475-manual_agent_install | ||
| 24878-renew-ndes | ||
| 25700-luks-escrow-longtime | ||
| 26114-new-team-with-vpp-apps | ||
| 26366-update-sql-parser | ||
| 26553-renew-digicert | ||
| 26692-upload-install-tarballs | ||
| 27003-list-host-software | ||
| 27007-host-certificate-serial-display | ||
| 27052-round-live-policy-percentages | ||
| 27436-query-automation-query-ids | ||
| 27445-webhook-automation-backend | ||
| 27458-update-calendar-events | ||
| 27463-add-script-syntax-highlighting | ||
| 27475-fix-query-page-selection-clear | ||
| 27477-do-not-interpolate-gitops-text-sections | ||
| 27501-clear-windows-mdm-info-on-linux-enroll | ||
| 27700-validate-bootstrap-is-distribution-pkg | ||
| 27822-dep-host-cleanup | ||
| 27909-hover-checkbox-radio | ||
| 27941-GOM-shouldn't-apply-to-VPP-token | ||
| 28032-email-to-header | ||
| 28033-support-end-user-idp-fleet-vars | ||
| 28049-conditional-access-fe-updates | ||
| 28054-surface-policy-count-triggering-install | ||
| 28137-my-device-page-layout-changes | ||
| 28138-categories-be | ||
| 28154-fix-gitops-dry-run-labels | ||
| 28158-batch-script-backend | ||
| 28159-batch-scripts | ||
| 28166-webhook-logging | ||
| 28240-log-invalid-soap-msg | ||
| 28266-clean-up-settings | ||
| 28343-reverting-some-mcx-validation | ||
| 28379-vpp-app-install-status | ||
| 28411-self-service-install-status | ||
| 28443-add-hash-to-software-title-response | ||
| 28543-exe-edits | ||
| 28616-renew-custom-scep | ||
| 28619-remove-paths-err | ||
| 28743-gom-premium-only | ||
| 28747-allow-advanced-save-in-GOM | ||
| C10298-additional-stats | ||
| issue-26070-add-ui-for-manual-agent-install | ||
| issue-26148-remove-config-settings-when-no-team-removed | ||
| issue-26505-keyboard-accssibility-to-activites | ||
| issue-27198-long-host-name | ||
| issue-27775-fix-activity-date-tooltip | ||
| migration-speedup | ||
| update-go-1.24.2 | ||