Chapter 2. Bug fixes
In this release of Red Hat Trusted Profile Analyzer (RHTPA), we fixed the following bugs.
Fixed a bug in the CVE ingestion process
When deserializing Common Vulnerabilities and Exposures (CVE) data, validation is applied to ensure all mandatory fields are supplied. CVEs with missing data is rejected. Some optional fields were erroneously being treated as mandatory causing some CVEs being rejected unnecessarily.
Indexing CVE data fails
Only Common Vulnerabilities and Exposures (CVE) data with the original schema was being indexed by RHTPA. The indexing process for CVE data was failing with the following error message.
Error parsing document 'CVE-2024-30171': DocParser("data did not match any variant of untagged enum Cve")
The v11y-indexer process was failing because the CVE schema was recently changed, and it did not recognize this new schema format. With this release of RHTPA, we updated the CVE indexing process to handle the new schema format, which allows the v11y-indexer process to index CVE data properly.
