Skip to main content

Changes in Update Released on 11-November-2022

This Update includes the changes described in the following sections.

Issues/Bugs Addressed

The following issues were addressed in the Update:

Issue IDIssue Summary
SCA-44237Addition of missing vulnerabilities for junit(componentId: 437385)
SCA-44183Addition of missing vulnerabilities for xercesimpl and spring-data-mongodb
SCA-44075Update license text for the license Microsoft .NET Library License
SCA-44065Fixing license evidences for net-tools component
SCA-41333Addition of Alpine forge to list of our forge data collection

Enhanced License Detection Capability for Components

License detection capability and license evidence mechanism for the following components was updated/added:

  • mplus.txt

  • MulanPSL-1.0.txt

  • MulanPSL-2.0.txt

  • NAIST-2003.txt

  • NCGL-UK-2.0.txt

  • NIST-PD-fallback.txt

  • NIST-PD.txt

  • NTP-0.txt

  • O-UDA-1.0.txt

  • ODC-By-1.0.txt

  • OpenJDK-assembly-exception-1.0.txt

  • OPUBL-1.0.txt

  • MIT-0

  • MIT-CMU

  • MIT-enna

  • MIT-feh

  • MIT-Modern-Variant.txt

  • MIT-open-group.txt

New/Update Component Requests

  • Google Play Services Android

  • android-support-library-v13

  • TrafficWatcher

  • ata-project

  • Telerik UI for ASP.NET MVC Components

  • Microsoft.Data.SqlClient.SNI.runtime

  • microsoft.aspnet.webapi.tracing

  • Microsoft SQL Server Compact 3.5 Service Pack 2

Collector Status

The following table lists Collector Status information.

NameDate of Last Successful Run
alpine11/8/2022
crates8/25/2022
npm10/11/2022
pypi10/18/2022
cran10/22/2022
maven2-ibiblio10/27/2022
clojars11/3/2022
rubygems11/3/2022
maven-google11/4/2022
cpan11/4/2022
nuget gallery11/5/2022
hackage11/6/2022
packagist11/7/2022
go11/9/2022
github11/9/2022
gitlab11/9/2022
fedora-koji11/10/2022