Chapter 3. Bug fixes

Deleting a document can break the data model

Corruption of the data model was happening when you used the API to delete Software Bill of Materials (SBOM) and Common Security Advisory Framework (CSAF) documents. This could cause RHTPA to become unstable. With this release, we fixed this bug, and you can use the API to delete SBOM and CSAF documents.

Fixed a panic caused by uploading a document with temporal or environment components

Before this update, when uploading a document with a Common Vulnerability Scoring System (CVSS) score that has temporal or environment components caused the task process to panic. Currently, RHTPA does not support temporal or environment components, and we report this document with the unsupported components as a normal error. With this release, we fixed the issue causing the process to panic, and only fail the current step in the uploading process, allowing the uploading process to continue on.

Python packages wrongly reported as affected by a vulnerability

If a Software Bill of Materials (SBOM) document contains a Python package version with a dash, for example, 1.0-rc0, RHTPA would give a false positive, reporting that the package is affected by a vulnerability. With this release, we fixed a bug when comparing Python package versions to correctly handle version numbers with dashes.