From 1c3cacb8baf8bd4a88981bbd1521af3ce898b95a Mon Sep 17 00:00:00 2001
From: allddd <me@allddd.onl>
Date: Tue, 18 Aug 2026 16:39:50 +0200
Subject: [PATCH] fix(main): fall back to /usr/share/mysqltuner for
 vulnerabilities.csv

basic_passwords.txt falls back to /usr/share/mysqltuner but
vulnerabilities.csv doesn't, so downstream distributions can't
package it

this adds the same fallback for the cve file
---
 mysqltuner.pl | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/mysqltuner.pl b/mysqltuner.pl
index f5342cb3a..17175878f 100755
--- a/mysqltuner.pl
+++ b/mysqltuner.pl
@@ -753,7 +753,7 @@ sub setup_environment {
     $opt{pass} = $opt{password}
       if ( !$opt{pass} and $opt{password} );
 
-    # for RPM distributions
+    # for downstream distributions
     $basic_password_files = "/usr/share/mysqltuner/basic_passwords.txt"
       unless -f "$basic_password_files";
 
@@ -777,6 +777,10 @@ sub setup_environment {
     $opt{cvefile} = './vulnerabilities.csv'
       if ( !$opt{cvefile} && -f './vulnerabilities.csv' );
 
+    # for downstream distributions
+    $opt{cvefile} = '/usr/share/mysqltuner/vulnerabilities.csv'
+      if ( !$opt{cvefile} && -f '/usr/share/mysqltuner/vulnerabilities.csv' );
+
     $opt{'bannedports'} = '' unless $opt{'bannedports'};
     @banned_ports       = split ',', $opt{'bannedports'};