fleet/tools
Lucas Manuel Rodriguez ae00add76e
Update alpine to patch vulnerability with severity "HIGH" (#26593)
The vulnerability was posted by a prospect.

Posting manual command until we get #25902 done.
```sh
trivy image --ignore-unfixed --pkg-types os,library --severity CRITICAL,HIGH --show-suppressed fleetdm/fleet:v4.64.1
[...]
fleetdm/fleet:v4.64.1 (alpine 3.21.0)

Total: 2 (HIGH: 2, CRITICAL: 0)

┌────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬──────────────────────────────────────────────────────────┐
│  Library   │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                          Title                           │
├────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼──────────────────────────────────────────────────────────┤
│ libcrypto3 │ CVE-2024-12797 │ HIGH     │ fixed  │ 3.3.2-r4          │ 3.3.3-r0      │ openssl: RFC7250 handshakes with unauthenticated servers │
│            │                │          │        │                   │               │ don't abort as expected                                  │
│            │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-12797               │
├────────────┤                │          │        │                   │               │                                                          │
│ libssl3    │                │          │        │                   │               │                                                          │
│            │                │          │        │                   │               │                                                          │
│            │                │          │        │                   │               │                                                          │
└────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴──────────────────────────────────────────────────────────┘
```
2025-02-25 18:33:24 -03:00
..
android Basic Android MDM on/off functionality (#26309) 2025-02-18 09:43:11 -06:00
api added mention of new vuln endpoint (#17912) 2024-05-29 17:08:05 -06:00
apm-elastic Adding missing instrumentation for APM. (#23882) 2024-11-18 09:58:24 -06:00
app Fix SSO paths to always use /v1/ instead of /latest/ (#5246) 2022-04-20 12:46:45 -04:00
backup_db Add Fleet dev snapshot tool (#25909) 2025-02-05 09:52:10 -06:00
bomutils-docker Remove invalid --depth=1 (#23316) 2024-10-29 15:22:39 -05:00
calendar Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00
ci Modifying chart to include dependencies (#14758) 2023-11-07 11:16:33 -06:00
cis Script for comparing two CIS PDF files (#15307) 2023-12-06 09:21:12 -05:00
cloner-check Add gitops app config fields, API access, activities, tests (#26282) 2025-02-20 08:40:46 -08:00
custom-package-parser Correct fix for long MSI interned strings (#25104) 2025-01-02 14:43:36 -06:00
dbutils Host software deleted at remigration (#20996) 2024-08-02 10:47:40 -04:00
desktop Move external dependency fleetdm/kolide-kit to monorepo (#15861) 2024-01-02 18:22:52 -03:00
dialog add kdialog for kubuntu key escrow (#24405) 2024-12-05 08:44:16 -07:00
file-server Switching systray dependency to one without glibc requirements (#14197) 2023-11-02 14:40:21 -05:00
fleet-docker Update alpine to patch vulnerability with severity "HIGH" (#26593) 2025-02-25 18:33:24 -03:00
fleetctl-docker Lock rust dependencies for apple-codesign (#24123) 2024-11-25 11:04:21 -03:00
fleetctl-npm Adding changes for Fleet v4.64.1 (#26491) 2025-02-20 19:39:26 -06:00
fleetd-linux Added fleetd docker images to test/develop linux fleetd features (#25027) 2024-12-27 16:16:39 -03:00
inspect-cert chore: remove refs to deprecated io/ioutil (#14485) 2023-10-27 15:28:54 -03:00
installerstore Enable errcheck linter for golangci-lint (#8899) 2022-12-05 16:50:49 -06:00
jira-integration Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00
kubequery Move kubequery dependency to monorepo (#16027) 2024-01-11 08:30:26 -03:00
loadtest Add script execs and software installs stats to osquery-perf (#26239) 2025-02-11 12:46:53 -05:00
luks add kdialog for kubuntu key escrow (#24405) 2024-12-05 08:44:16 -07:00
mailpit Fix SMTP e-mail send when SMTP server has credentials (#10758) 2023-03-28 15:23:15 -03:00
mdm Update alpine to patch vulnerability with severity "HIGH" (#26593) 2025-02-25 18:33:24 -03:00
mysql-replica-testing MySQL 8.0 Migration (#20225) 2024-07-22 16:27:36 -04:00
nvd/nvdvuln Add gosimple linter (#23250) 2024-10-29 14:17:51 -05:00
oncall Move and fix oncall.sh script (#18217) 2024-04-11 16:23:00 -03:00
osquery Quick spelling/grammar fixes (#23859) 2024-11-18 13:36:59 -06:00
osquery-agent-options Add capability to serve YARA rules via authenticated Fleet endpoints (#23343) 2024-11-13 09:01:08 -08:00
osquery-testing 15135 remove atom package (#15410) 2023-12-04 14:26:26 -05:00
percona/test MySQL 8.0 Migration (#20225) 2024-07-22 16:27:36 -04:00
redis-stress Add redis stress (#3363) 2022-01-20 16:18:17 -03:00
redis-tests Bump go to 1.19.1 (#7690) 2022-09-12 20:32:43 -03:00
release Update release script to reflect new release article URL convention (#26041) 2025-02-06 15:48:21 -06:00
run-scripts Implement script execution on the fleetd agent (disabled by default) (#13569) 2023-08-30 14:02:44 -04:00
saml use the configured EntityID for audience validation on MDM SSO (#16144) 2024-01-22 14:30:45 -03:00
seed_data Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00
sentry-self-hosted Fix stack trace of captured errors in Sentry, capture errors in more code paths (#16966) 2024-02-22 15:10:28 -03:00
sign-fleetctl sign fleetctl for macOS during releases (#16670) 2024-04-19 14:36:30 -03:00
smtp4dev 14729 smtp settings validation for TLS (#15029) 2023-11-21 11:48:21 -07:00
snapshot Add Fleet dev snapshot tool (#25909) 2025-02-05 09:52:10 -06:00
team-builder Add team builder script (#10086) 2023-05-03 09:55:14 -07:00
telemetry Scope pending host profile rebuilds (#23772) 2024-11-15 11:55:30 -05:00
terraform Bump golang.org/x/net from 0.25.0 to 0.33.0 in /tools/terraform (#25342) 2025-01-10 13:32:34 -06:00
test-certs Add fake certificates for testing TLS issues (#20390) 2024-07-16 13:21:39 -03:00
test-orbit-mtls Fixing SSL certificates to make them valid. (#16359) 2024-01-31 12:00:59 -06:00
test_extensions/hello_world Add support for Linux ARM64 (#19931) 2024-07-17 16:07:59 -04:00
testdata Add fixtures for software and vulnerabilities end-to-end tests (#6337) 2022-06-23 10:01:37 -05:00
tuf Fixes to releaser.sh (#26397) 2025-02-17 19:10:55 -03:00
webhook Additional changes to happy path and cleanup cron job (#17757) 2024-03-26 13:39:37 -05:00
windows-mdm-enroll Implement Windows MDM programmatic unenrollment (notification + orbit trigger) (#12505) 2023-06-28 09:13:37 -04:00
wix-docker Update fleetdm/fleetctl, fleetdm/wix and fleetdm/bomutils docker images (#21063) 2024-08-20 14:07:59 -03:00
zendesk-integration Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00