fix: add translation for iterm2 (#25477) (#25541)

cherry-pick for #25477
fleetdm · Jan 17, 2025 · 77de97e · 77de97e
1 parent c382e8d
commit 77de97e
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 1 deletion.
diff --git a/changes/25130-iterm-false-neg b/changes/25130-iterm-false-neg
@@ -0,0 +1 @@
+- Fixed a false negative vulnerability reporting for iTerm2 (available to all recent Fleet releases as of January 17th via a vulnerability feed update)
diff --git a/server/vulnerabilities/nvd/cpe_translations.json b/server/vulnerabilities/nvd/cpe_translations.json
@@ -545,5 +545,15 @@
       "product": ["cli"],
       "vendor": ["github"]
     }
+  },
+  {
+    "software": {
+      "bundle_identifier": ["/^com\\.googlecode\\.iterm2/"],
+      "source": ["apps"]
+    },
+    "filter": {
+      "product": ["iterm2"],
+      "vendor": ["iterm2"]
+    }
   }
-]
+]
diff --git a/server/vulnerabilities/nvd/cve_test.go b/server/vulnerabilities/nvd/cve_test.go
@@ -375,6 +375,9 @@ func TestTranslateCPEToCVE(t *testing.T) {
 			excludedCVEs:      []string{"CVE-2024-37051"},
 			continuesToUpdate: true,
 		},
+		"cpe:2.3:a:iterm2:iterm2:3.5.2:*:*:*:*:*:*:*": {
+			includedCVEs: []cve{{ID: "CVE-2024-38395", resolvedInVersion: ""}},
+		},
 	}
 
 	cveOSTests := []struct {
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		- Fixed a false negative vulnerability reporting for iTerm2 (available to all recent Fleet releases as of January 17th via a vulnerability feed update)