Released: April 1, 2024
Highlights
Apply Watch on Existing Content REST API
Introduced a new REST API that enables you to apply a Watch or multiple Watches on existing content. For more information, see Apply Watch on Existing Content.
Curation
Added NuGet Gallery public repository for .NET packages support in Curation.
To enable JFrog Curation for the newly supported public repository, configure the URL NuGet Gallery in the Artifactory remote repository of type NuGet and connect it to your Curation service. For more information, see Curation Supported Technologies.
Introduced a new JFrog Curation template for custom conditions regarding packages vulnerable to CVEs within configured CVSS score ranges.
For example: Block packages if vulnerable to a CVE with a CVSS score in the range of 7-8. The template supports an option to block the package only when a newer version of the vulnerable package exists without the CVE (aka fix available).
We recommend you use this option to avoid cases where no newer version with a fix to the CVE exists. This new template is in addition to the existing out-of-the-box JFrog Curation conditions with predefined CVSS score ranges.
Introduced a new JFrog Curation template for custom conditions regarding immature packages, with the ability to skip blocking if the immature package fixes a CVE with a custom CVSS score configured by the user.
For example: Block immature packages if the release date is less than 7 days unless it fixes a Critical CVE (CVSS score above 9).
This new template provides an automated method to skip blocking when a clear high-priority security fix is included.
Resolved Issues
Jira | Description |
|---|---|
XRAY-25309 | Fixed an issue whereby, Builds within a Project that were selected for a scan (indexing) by pattern, were returned by the GET /xray/api/v1/binMgr/default/builds API as non_indexed_builds. |
XRAY-26218 | Fixed the license information of numpy PyPI package in Xray OSS DB (XUC). |
XRAY-28404 | Fixed an issue whereby Xray nodes failed to restart if one or more RabbitMQ nodes were offline and required an admin manual intervention to restart the RabbitMQ node or to remove it from the cluster. |
XRAY-44724 | Fixed an issue whereby Xray analysis did not stop when the Xray service was stopped. |
XRAY-14552 | Fixed an issue whereby indexing of artifacts was not triggered if an artifact's extension is either uppercase or a mixed case (e.g. .ZIP instead of .zip) |
XRAY-36393 | Fixed an issue whereby when the Xray tab in Artifactory was switched to the old Xray view it displayed partial information. |
XRAY-46484 | Fixed an issue whereby the Scans List - Builds screen did not list all the builds whose versions of them were scanned. |