2.7.1

• Fix CVE-2020-28928

2.7.0

• Add ubuntu:20.10 support
• Add distroless support
• Add k8s vulns to definitions.stackrox.io
• Fix .NET and ASP.NET vulnerability CPEs

2.6.0

• Return exact (x.y.z) .NET Core runtime and ASP.NET Core runtime versions (opposed to x.y)
• Reduce false-positive rate of Java and Ruby vulnerabilities

2.5.0

• Turn on ROX_CONTINUE_UNKNOWN_OS by default
• Use Red Hat's CVSS scores for RHEL/CentOS-based images
• Add .NET Core Runtime application-level support

2.4.1

• Update Genesis Manifest

2.4.0

• Add Image Scan notes
• Fix image severity labels
• Make cpe check deterministic

2.3.3

Fix change which disabled LANGUAGE_VULNS in favor of ROX_LANGUAGE_VULNS. Now both are allowed, but ROX_LANGUAGE_VULNS takes precedence.

2.3.2

Update Amazon support
Update Oracle and Red Hat support
[ROX-5374] Add support for continuing upon unknown OS
[ROX-5382] update alpine vuln src
[ROX-5394] Fix potential resource not found error in features
[ROX-5392] Add RHEL6 unpublished oval
Update genesis dump

2.3.1

[ROX-5341] NVD cache does not un-associate CVEs and products upon deletion

2.3.0

Several fixes + Update of Genesis Dump