Skip to content

Commit

Permalink
Merge pull request #852 from hlxsites/runtime-pascal-33-0-LA
Browse files Browse the repository at this point in the history
Pascal (33.00) Look Ahead for the transition to VEX format.
  • Loading branch information
manukumar6 authored Aug 22, 2024
2 parents 98596ad + 2e63fc6 commit a708205
Showing 1 changed file with 21 additions and 5 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -6,11 +6,11 @@

//The following text is a revert to the old content.

// Read this section to learn about what is planned in the upcoming `32.07` release on the Runtime Security of the Prisma Cloud console for WAAS, Host Security, Serverless Security, and Container Security.
Read this section to learn about what is planned in the upcoming `33.00` release on the Runtime Security of the Prisma Cloud console for WAAS, Host Security, Serverless Security, and Container Security.

// The Look Ahead announcements are for an upcoming release and it is not a cumulative list of all announcements.

Currently, there are no previews or announcements for updates.
//Currently, there are no previews or announcements for updates.

// [NOTE]
// ====
Expand All @@ -20,7 +20,7 @@ Currently, there are no previews or announcements for updates.

// // * <<defender-upgrade>>
// // * <<new-ips-for-runtime>>
// * <<announcement>>
// //* <<announcement>>
// * <<enhancements>>
// //* <<api-changes>>
// // * <<deprecation-notices>>
Expand All @@ -38,8 +38,24 @@ Currently, there are no previews or announcements for updates.
// //|===


// [#announcement]
// === Announcements
//[#announcement]
//=== Announcements
=== Upcoming Transition from OVAL to VEX Format for Red Hat Security Data

Prisma Cloud is transitioning from the OVAL format to the new VEX format that Red Hat has introduced and adopted for reporting security data and vulnerabilities in Red Hat artifacts.

* *Pre-33.00*: Until you upgrade to a 33.xx release, Prisma Cloud will continue using OVAL for vulnerability scanning with no expected impact.
* *33.xx*: After upgrading your Console and Defenders to version 33.00 or later, Prisma Cloud will switch to the VEX format for vulnerability reporting. This transition might result in a change in the number of reported CVEs due to the inherent differences between the VEX and OVAL content.
* *Comparison Between OVAL and VEX Formats*: With the OVAL format, Prisma Cloud reports vulnerabilities for each binary found during the scan. However, with the new VEX format, Prisma Cloud will report one vulnerability for the source package and provide information on related binaries.
+
This means that the number of vulnerabilities with the same CVE ID will be reduced, as Prisma Cloud will report one vulnerability for the RPM package instead of multiple reports for each binary.
* *Continued Support*: Prisma Cloud will continue to support OVAL format for two major versions—v33.xx and v34.xx—to maintain compatibility with Defenders in the pre-33.xx releases, as long as Red Hat continues to produce OVAL files.
* *Console Loading Time in 33.xx release*: For new Consoles paired with new Defenders, the Console loading time after a restart event will be approximately 1-2 minutes.
* *Console Memory Usage in 33.XX release*: For on-premise users upgrading to the latest Console, the Console memory requirement is 8GB. This requirement is only for self-hosted editions.

A more detailed explanation of this transition is available in the accompanying PDF document: link:https://tinyurl.com/49tfajn3[*Transition from Oval to VEX Files*].

If you have any concerns or need more information about this transition, please contact [email protected].

// [cols="30%a,70%a"]
// |===
Expand Down

0 comments on commit a708205

Please sign in to comment.