Ian Littman issues

Results 73 issues of


                                            Ian Littman

fleetdm/nvd feed releases can be tagged when parsing the feed would cause a panic on the currently released Fleet server

**Fleet version**: all ### 💥 Actual behavior The `nvd` feed build workflow is capable of pushing a release that panics Fleet server attempts to parse it. Unlike #21239, to my...

bug

~backend

~vulnerability-management

~released bug

:product

#g-software

🪲Existing false-positive OVAL vulnerabilities for Amazon Linux 2 don't clear when upgrading to 4.56.0 goval-dictionary based scanning

**Fleet version**: < 4.56.0 -> 4.56.0 ### 💥 Actual behavior False positives remain after upgrade on Amazon Linux 2; see https://github.com/fleetdm/fleet/issues/20934#issuecomment-2339900214 ### 🧑‍💻 Steps to reproduce 1. On Fleet <...

bug

~backend

:release

~vulnerability-management

~released bug

#g-software

Self-service categories: docs updates

:release

~sub-task

#g-software

Self-service categories: GitOps

~backend

:release

~sub-task

#g-software

Self-service categories: Backend (REST endpoints + DB)

~backend

:release

~sub-task

#g-software

Clean up timing for clearing stale false-positive vulnerabilities

## Goal | User story | |:---------------------------------------------------------------------------| | As a user of vulnerability management, | I want to see fixed false-positive vulnerabilities cleared as soon as I finish a vulnerabilities...

story

~engineering-initiated

~vulnerability-management

:product

#g-software

Tarballs: BE

~backend

:release

~sub-task

#g-software

FMA GitOps: Docs

:improve documentation

:release

~sub-task

#g-software

FMA GitOps: BE

~backend

:release

~sub-task

#g-software

Add new expected CVE to iTerm2, don't fail tests if additional CVEs are found

Confirmed that both CVEs apply to this version by checking against NVD. # Checklist for submitter If some of the following don't apply, delete the relevant line. - [x] Added/updated...