From c01da99930fef10ef8254ec7b6f4ea7422d9dd50 Mon Sep 17 00:00:00 2001 From: crozzy <1027041+crozzy@users.noreply.github.com> Date: Wed, 21 Aug 2024 17:24:20 +0000 Subject: [PATCH] chore: v1.5.29 changelog bump Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --- CHANGELOG.md | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index efb1ada3b..c1d84b3f0 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,25 @@ + +## [v1.5.29] - 2024-08-21 +[v1.5.29]: https://github.com/quay/claircore/compare/v1.5.28...v1.5.29 + +- rhel: move IgnoreUnpatched config key from updater to matcher +
+ Previously the IgnoreUnpatched config key was a part of the RHEL + updater and would dictate whether or not the updater would ingest + unpatched vulnerabilities. This change moves that key to the RHEL + matcher and dictates whether the matcher should check for a + fixed_in_version when querying potential vulnerabilities. This makes the + config option more usable at the expense of DB size. +
+ +- rhel: add csaf/vex updater +
+ Replace the RHEL OVAL updater with a CSAF/VEX updater for Red Hat + security data. Update the matching logic to deal with CPE patterns + coming from the VEX files. Remove RHEL updater and add a migration to + delete Red Hat OVAL data from the database. +
+ ## [v1.5.28] - 2024-05-13 [v1.5.28]: https://github.com/quay/claircore/compare/v1.5.27...v1.5.28