This is the multi-page printable view of this section. Click here to print.

Return to the regular view of this page.

Anchore Data Service

Release Notes

1 - Anchore Data Service Release Notes - Version 0.25.0 (2025-12-17)

Anchore Data Service v0.25.0 - 2025-12-17

Added grype-db workflow details for improved visibility into database build processes.
Updated malware database references used during our automated test runs.
Ported build system to UV for faster and more reliable builds.

2 - Anchore Data Service Release Notes - Version 0.24.0 (2025-12-12)

Anchore Data Service v0.24.0 - 2025-12-12

Updated to Vunnel v0.45.2 with vulnerability provider improvements and bug fixes.
Various dependency updates for improved stability.

3 - Anchore Data Service Release Notes - Version 0.23.0 (2025-11-25)

Anchore Data Service v0.23.0 - 2025-11-25

Updated to grype-db v0.47.0 with increased maximum file size for decompression, improving handling of large vulnerability datasets.

4 - Anchore Data Service Release Notes - Version 0.22.0 (2025-11-24)

Anchore Data Service v0.22.0 - 2025-11-24

Added end-to-end validation for grype database builds to ensure database integrity.
Various dependency updates for improved stability.

5 - Anchore Data Service Release Notes - Version 0.21.2 (2025-11-10)

Anchore Data Service v0.21.2 - 2025-11-10

Enabled Chainguard Libraries provider for improved vulnerability data coverage for Chainguard-based container images.

6 - Anchore Data Service Release Notes - Version 0.21.1 (2025-11-07)

Anchore Data Service v0.21.1 - 2025-11-07

Updated grype-db version with bug fixes and improvements.

7 - Anchore Data Service Release Notes - Version 0.21.0 (2025-10-29)

Anchore Data Service v0.21.0 - 2025-10-29

Updated to grype-db v0.43.0 with improved vulnerability database builds.
Enhanced build validation to fail when date is missing for fixed vulnerability records, ensuring data quality.

8 - Anchore Data Service Release Notes - Version 0.20.2 (2025-10-26)

Anchore Data Service v0.20.2 - 2025-10-26

Updated to Vunnel v0.43.0 with fixes for Red Hat vulnerability parsing.
Various dependency updates for improved stability.

9 - Anchore Data Service Release Notes - Version 0.20.1 (2025-10-17)

Anchore Data Service v0.20.1 - 2025-10-17

Fixed typo in MSRC vunnel output for improved Microsoft vulnerability data accuracy.
Updated CI infrastructure to use runners with more RAM for improved build reliability.

10 - Anchore Data Service Release Notes - Version 0.20.0 (2025-10-02)

Anchore Data Service v0.20.0 - 2025-10-02

Updated ClamAV malware database to version 1.4.3 with the latest malware signatures and detection capabilities.
Fixed publish tracking for STIG profiles database ensuring reliable data updates.

11 - Anchore Data Service Release Notes - Version 0.19.0 (2025-10-01)

Anchore Data Service v0.19.0 - 2025-10-01

Added STIG Profiles database support for security compliance checking.
- STIG (Security Technical Implementation Guide) profiles provide DoD-approved security configurations.
- This enables customers to validate their systems against STIG compliance requirements.
Improved CI publishing status tracking for STIG profiles.

12 - Anchore Data Service Release Notes - Version 0.18.0 (2025-09-29)

Anchore Data Service v0.18.0 - 2025-09-29

Updated to Vunnel v0.41.0 with enhanced vulnerability provider support.
Updated to grype-db v0.42.0 with vulnerability matching improvements.
Added MSRC first-observed fix date protections for improved Microsoft vulnerability tracking.
Fixed broken MSRC provider for consistent Microsoft vulnerability data.

13 - Anchore Data Service Release Notes - Version 0.17.0 (2025-09-11)

Anchore Data Service v0.17.0 - 2025-09-11

Updated to grype-db v0.41.0 with enhanced vulnerability matching.
Updated to Vunnel v0.39.2 with updated RHEL modularity data for improved Red Hat vulnerability matching.

14 - Anchore Data Service Release Notes - Version 0.16.0 (2025-08-14)

Anchore Data Service v0.16.0 - 2025-08-14

Updated to grype-db v0.40.0 with support for fix dates in vulnerability records.
Updated to Vunnel v0.38.2 with provider improvements.
Added advisory date to MSRC (Microsoft Security Response Center) records for improved vulnerability tracking.

15 - Anchore Data Service Release Notes - Version 0.15.2 (2025-08-14)

Anchore Data Service v0.15.2 - 2025-08-14

Improved database compression by using pigz for faster gzip compression.
Increased compression level for reduced database file sizes.

16 - Anchore Data Service Release Notes - Version 0.15.0 (2025-08-12)

Anchore Data Service v0.15.0 - 2025-08-12

Added support for Debian 13 (trixie) as a released distribution and Debian 14 (forky) as testing/sid/unstable.
Various dependency updates for improved stability.

17 - Anchore Data Service Release Notes - Version 0.14.0 (2025-08-01)

Anchore Data Service v0.14.0 - 2025-08-01

Updated to Vunnel v0.36.0 with enhanced provider support.
Various dependency updates for improved stability.

18 - Anchore Data Service Release Notes - Version 0.13.0 (2025-07-23)

Anchore Data Service v0.13.0 - 2025-07-23

Updated to Vunnel v0.36.0 with provider improvements and bug fixes.

19 - Anchore Data Service Release Notes - Version 0.12.0 (2025-07-07)

Anchore Data Service v0.12.0 - 2025-07-07

Updated to grype-db v0.35.0 with vulnerability matching enhancements.
Various dependency updates for improved stability.

20 - Anchore Data Service Release Notes - Version 0.11.0 (2025-06-04)

Anchore Data Service v0.11.0 - 2025-06-04

Updated to grype-db v0.34.1 with improved vulnerability matching capabilities.
Updated to Vunnel v0.34.2 with various provider improvements.
Security update to ClamAV version 1.0.9.
Enabled publishing v6 schema grype databases to support newer versions of Grype.
Enabled EPSS and KEV vunnel providers for enhanced vulnerability scoring and known exploited vulnerability data.
Added separate publishing pipeline for vulnerability match exclusions data.

21 - Anchore Data Service Release Notes - Version 0.10.1 (2025-03-05)

Anchore Data Service v0.10.1 - 2025-03-05

Update to use Vunnel v0.30.0
- This version now uses RedHat’s CSAF advisories for vulnerability data. No change is expected to be noticed by our end users. Please see https://security.access.redhat.com/data/csaf/v2/advisories/ for more information

22 - Anchore Data Service Release Notes - Version 0.10.0 (2025-03-01)

Anchore Data Service v0.10.0 - 2025-03-01

Update to use grype-db v0.28.0
- https://github.com/anchore/grype-db/releases/tag/v0.28.0

23 - Anchore Data Service Release Notes - Version 0.9.0 (2025-02-05)

Anchore Data Service v0.9.0 - 2025-02-05

The Malware database now uses ClamAV version 1.0.8. This version includes the latest malware signatures and detection capabilities.
Added enhancements to the CISA KEV Database to fix certain inconsistencies in the data.

24 - Anchore Data Service Release Notes - Version 0.8.0 (2024-11-18)

Anchore Data Service v0.8.0 - 2024-11-18

The vulnerability database has been improved by providing the inferred NVD Fix Version for vulnerabilities when possible. This data is used to provide information on the version of a package that contains the fix for a vulnerability.
- Customers running Enterprise v5.10.0 and greater will automatically see this improved data on their next data sync.
- This data is used in Vulnerabilities Policy Gate, Package Trigger with optional parameter of Fix Available.
- For further background see https://anchorecommunity.discourse.group/t/grype-is-getting-more-fix-info-soon/165
  - The following PRs contain the relevant vulnerability database logic changes for this enhancement:
    - fix: add nvd fix version when versionEndExcluding provided grype-db#112
    - feat: Add config for inferring fixes from NVD grype-db#411

25 - Anchore Data Service Release Notes - Version 0.7.1 (2024-11-05)

Anchore Data Service v0.7.1 - 2024-11-05

Provides a new dataset Exploit Prediction Scoring System Database (EPSS).
- The EPSS data is developed by the Forum of Incident Response and Security Teams (FIRST).
- This dataset can be used to provide a risk score for a vulnerability based on the likelihood that it will be exploited.
- The EPSS dataset will be available to all Anchore customers once they upgrade to the future Enterprise v5.12.0 release which is expected at the end of November 2024.
  - This data will be used in the Vulnerabilities Policy Gate and Package Trigger with optional parameters:
    - EPSS Score Comparison
    - EPSS Score
    - EPSS Percentile Comparison
    - EPSS Percentile

26 - Anchore Data Service Release Notes - Version 0.6.1 (2024-10-23)

Anchore Data Service v0.6.1 - 2024-10-23

Updated Grype DB v0.26.0 which includes the following changes:
- Ability to handle symlink paths when found in the upstream vulnerability providers.

27 - Anchore Data Service Release Notes - Version 0.6.0 (2024-10-18)

Anchore Data Service v0.6.0 - 2024-10-18

Grype DB version has been incremented to 0.25.0. This brings in the following change:
- Grype DB now fetches OS type records from the NVD database.

28 - Anchore Data Service Release Notes - Version 0.5.1 (2024-09-26)

Anchore Data Service v0.5.1 - 2024-09-26

Initial release of Anchore Data Service
Anchore Data Service is a hosted service by Anchore that provides various data to all Enterprise customers. The datasets served include:
- Vulnerability Database (grypedb)
- ClamAV Malware Database
- CISA KEV (Known Exploited Vulnerabilities)
Your Anchore License is all that’s required to authenticate with this service. The data syncer service in your Enterprise installation will automatically sync this data to your installation.