Anchore Data Service Release Notes - Version 0.34.0 (2026-08-14)

Enables the govulndb provider, adding vulnerability data from the Go vulnerability database.
Emit ubuntu:X.YY+esm channel records for Ubuntu Pro (ESM). [#1240]
RHEL minor version aware advisory grouping. [#1237]
Emit architecture-scoped versions in Oracle Linux ELSAs. [#1223]

Updates ClamAV to version 1.4.5 to address several security findings.
Fixes the MSRC product ID used for Windows ARM64 in the microsoft provider.
Preserves the existing wolfi and chainguard data processing for v5 vulnerability databases ahead of upstream changes that are only supported by v6 databases.
Fixes wolfi and chainguard providers failing when secdb secfixes contain IDs without a CVE- or GHSA- prefix (e.g. GO- IDs). [#1264]
Improves workspace disk space management. [#1256]

Last modified October 12, 2026