10000 wip: rhel eus support by willmurphyscode · Pull Request #796 · anchore/vunnel · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

wip: rhel eus support #796

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Draft
wants to merge 1 commit into
base: main
Choose a base branch
from
Draft

wip: rhel eus support #796

wants to merge 1 commit into from

Conversation

willmurphyscode
Copy link
Contributor
@willmurphyscode willmurphyscode commented Mar 18, 2025 •
edited
Loading

This PR adds the ability for vunnel to emit EUS-specific fix information from the red hat provider. It enables the following match distinctions:

# non-EUS - package is vulnerable
❯ grype -v --distro rhel:9 'pkg:rpm/redhat/kernel@5.14.0-427.50.2.el9_4?epoch=0' | rg -e NAME -e 53104
[0000]  INFO grype version: [not provided]
[0000]  INFO using distro: rhel:9
[0000]  INFO found 2370 vulnerability matches across 1 packages
NAME    INSTALLED                FIXED-IN                 TYPE  VULNERABILITY   SEVERITY   
kernel  0:5.14.0-427.50.2.el9_4  0:5.14.0-503.23.2.el9_5  rpm   CVE-2024-53104  High        
# EUS - package is fixed
❯ grype -v --distro rhel:9.4-eus 'pkg:rpm/redhat/kernel@5.14.0-427.50.2.el9_4?epoch=0' | rg -e NAME -e 53104
[0000]  INFO grype version: [not provided]
[0000]  INFO using distro: rhel:9.4-eus
[0000]  INFO found 47 vulnerability matches across 1 packages
NAME    INSTALLED                FIXED-IN                 TYPE  VULNERABILITY   SEVERITY

This change also depends on anchore/grype#2540 and anchore/grype-db#540.

When they're all in and released, it will fix anchore/grype#2446

@willmurphyscode
wip: rhel eus support
82b5383 
Signed-off-by: Will Murphy <willmurphyscode@users.noreply.github.com>
This was referenced Mar 18, 2025
Draft
Draft
@willmurphyscode willmurphyscode self-assigned this Mar 18, 2025
@willmurphyscode willmurphyscode added the enhancement New feature or request label Mar 18, 2025
@willmurphyscode willmurphyscode moved this to In Progress in OSS Mar 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@willmurphyscode willmurphyscode

Labels
enhancement New feature or request
Projects
OSS
Status: In Progress
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Add support for RHEL EUS
1 participant
@willmurphyscode
0