Skip to main content

Changes in Update Released on 27-October-2023

This update includes the changes described in the following sections.

Issues/Bugs Addressed​

The following issues were addressed in the Update:

Issue IDIssue Summary
SCA-50609Resolved False Positive vulnerabilities being detected for Component ckan (Id: 21948217) with version 0.6 (Id: 117793043).
SCA-49864Addition of vulnerability mappings to Chart.js 1.0.2 for CVE-2020-7746
SCA-49752Enhanced the Debian collector to collect more packages from different folders like non-free, non-free-firmware, contrib
SCA-48039Resolved False Positive vulnerabilities for components like "bootstrap" and "commons-collections"

Enhanced License Detection Capability for Components​

License detection capability and license evidence mechanism for the following components was updated/added:

  • Reciprocal Public License 1.1

  • Reciprocal Public License 1.5

  • Red Hat eCos Public License v1.1

  • SGI Free Software License B v1.0

  • SGI Free Software License B v1.1

  • SGI Free Software License B v2.0

  • SHL-2.0

  • SHL-2.1

  • SWI-exception

  • Swift-exception

  • Universal-FOSS-exception-1.0

  • vsftpd-openssl-exception

  • Autoconf-exception-generic

  • Autoconf-exception-macro

  • Asterisk-exception

  • cryptsetup-OpenSSL-exception

  • LLGPL

  • OCaml-LGPL-linking-exception

  • PS-or-PDF-font-exception-20170817

  • QPL-1.0-INRIA-2004-exception

  • GNAT-exception

  • x11vnc-openssl-exception

  • Qt-GPL-exception-1.0

  • Qt-LGPL-exception-1.1

Collector Status​

The following table lists Collector Status information.

NameDate of Last Successful Run
npm8/15/2023
crates8/25/2022
cpan10/19/2023
clojars10/19/2023
rubygems10/19/2023
maven-google10/13/2023
cran10/21/2023
hackage10/22/2023
packagist10/22/2023
go10/23/2023
pypi10/16/2023
nuget gallery10/15/2023
maven2-ibiblio9/27/2023
github10/23/2023
fedora-koji10/20/2023
alpine10/18/2023
gitlab6/6/2023
debian10/23/2023