Chapter 3. Bug fixes
In this release of Red Hat Trusted Profile Analyzer (RHTPA), we fixed the following bugs.
Uploading a CycloneDX SBOM with control characters fails
When uploading a CycloneDX-formatted software bill of materials (SBOM) file to RHTPA you can get parsing errors when control characters are present, such as \n. With this release, we fixed the validation logic when uploading a CycloneDX-formatted SBOM file so you can successfully upload an SBOM file into RHTPA.
Fixed inconsistent vulnerability information displayed on the SBOM details page
Only a subset of related vulnerability data was being reported on the software bill of materials (SBOM) details page. With this release, we fixed this reporting problem. You now have consistent results no matter where you are viewing the vulnerability data with RHTPA.
Validating the serialNumber string for compliance
The serialNumber property’s string value in CycloneDX-formatted software bill of materials (SBOM) files must match a certain regular expression. With this release, we check the serialNumber string to see if it conforms to the compliancy standard set by CycloneDX.
