Changes in Update Released on 24-Feb-2022
This Update includes the changes described in the following sections.
Issues/Bugs Addressed
The following issues were addressed in the Update:
| Iss ue ID | Issue Summary |
|---|---|
| SCA-40339 | Fixed license mappings for hangfire.core nuget component . |
| SCA-40332 | Fixed license mappings for microsoft.net.workload.emscripten.manifest nuget component |
| SCA-40215 | Fixed false positive CVE for system.threading.tasks.extensions 4.5.4 component |
Addition of Missing Vulnerability Mappings
Missing vulnerability mappings for the following components were added:
-
stuk-jszip
-
firefly-iii
-
pjsip-pjproject
-
oisf-suricata
-
gitlogplus
-
velociraptor
-
contour
-
stmicroelectronics-stm32cubeh7
-
mod_auth_openidc
New/Update Component Requests
-
Microsoft Infographic Designer
-
Microsoft Advance Card
Collector Status
The following table lists Collector Status information.
| Name | Date of Last Successful Run |
|---|---|
| npm | 12/3/2021 |
| gitlab | 1/13/2022 |
| maven2-ibiblio | 2/15/2022 |
| rubygems | 2/17/2022 |
| cran | 2/18/2022 |
| maven-google | 2/18/2022 |
| nuget gallery | 2/19/2022 |
| hackage | 2/20/2022 |
| packagist | 2/20/2022 |
| crates | 2/22/2022 |
| clojars | 2/23/2022 |
| github | 2/23/2022 |
| pypi | 2/23/2022 |
| fedora-koji | 2/23/2022 |
| cpan | 2/24/2022 |