You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Some binary packages have different version numbers than the associated source package. Since CVEs in Ubuntu are tracked against source packages, some CVEScan results may be incorrect, as dpkg-query -l does not include the source package version.
Instead of using dpkg -l to query the installed packages on the system, the following command could be used to provide more detail, including the source package versions:
After this change, the UCT JSON data should no longer need to include a list of binaries so that binaries can be mapped to source packages. This should significantly decrease the size of those JSON files, improving download times, JSON deserialization, and overall runtime.
The text was updated successfully, but these errors were encountered:
Some binary packages have different version numbers than the associated source package. Since CVEs in Ubuntu are tracked against source packages, some CVEScan results may be incorrect, as
dpkg-query -l
does not include the source package version.Instead of using
dpkg -l
to query the installed packages on the system, the following command could be used to provide more detail, including the source package versions:After this change, the UCT JSON data should no longer need to include a list of binaries so that binaries can be mapped to source packages. This should significantly decrease the size of those JSON files, improving download times, JSON deserialization, and overall runtime.
The text was updated successfully, but these errors were encountered: