- We fixed Apache HTTPD and Apache Kafka importer. - We removed excessive network calls from Redhat importer. - Add documentation for version 32.0.0.
32.0.0rc4
-------------------
- We added loading of env for GitHub datasource in vulntotal. - We fixed import process in github importer in vulnerablecode reported here https://github.com/nexB/vulnerablecode/issues/1142. - We added an improver to get all package versions of all ecosystems for a range of affected packages. - We added documentation for configuring throttling rate for API endpoints. - We fixed kbmsr2019 importer. - We added support for conan advisories through gitlab importer.
32.0.0rc3
-------------------
- Add aliases to package endpoint. - We added Apache HTTPD improver. - We removed redundant API tests. - We added fireye vulnerabilities advisories importer. - We added support for public instance of vulnerablecode in vulntotal. - We re-enabled support for the Apache Kafka vulnerabilities advisories importer. - We re-enabled support for the xen vulnerabilities advisories importer. - We re-enabled support for the istio vulnerabilities advisories importer. - We re-enabled support for the Ubuntu usn vulnerabilities advisories importer.
32.0.0rc2
--------------------
- We added migration for adding apache tomcat option in severity scoring.
32.0.0rc1
--------------------
- We re-enabled support for the mozilla vulnerabilities advisories importer. - We re-enabled support for the gentoo vulnerabilities advisories importer. - We re-enabled support for the istio vulnerabilities advisories importer. - We re-enabled support for the kbmsr2019 vulnerabilities advisories importer. - We re-enabled support for the suse score advisories importer. - We re-enabled support for the elixir security advisories importer. - We re-enabled support for the apache tomcat security advisories importer. - We added support for CWE. - We added migrations to remove corrupted advisories https://github.com/nexB/vulnerablecode/issues/1086.
31.1.1
---------------
- We re-enabled support for the Apache HTTPD security advisories importer. - We now support incomplete versions for a valid purl in search. For example, you can now search for ``pkg:nginx/nginx1`` and get all versions of nginx starting with ``1``.