AWS inspector documentation change
Summary
Removed documentation for 7-Zip, Curl, Libcurl, and Elasticsearch ecosystem collections. Updated macOS spelling and removed related platform paths/version examples.
Security assessment
The changes remove documentation for specific software components but do not mention any security vulnerabilities, patches, or incidents. This appears to be a routine update deprecating support for certain ecosystems rather than addressing security issues. No CVEs, vulnerabilities, or security advisories are referenced in the diff.
Diff
diff --git a/inspector/latest/user/sbom-generator-ecosystem-collection.md b/inspector/latest/user/sbom-generator-ecosystem-collection.md index 013669d68..1d4b4ab14 100644 --- a//inspector/latest/user/sbom-generator-ecosystem-collection.md +++ b//inspector/latest/user/sbom-generator-ecosystem-collection.md @@ -5 +5 @@ -Supported ecosystems7-Zip ecosystem collectionApache ecosystem collectionCurl ecosystem collection Elasticsearch ecosystem collectionGoogle ecosystem collectionJava ecosystem collectionNginx ecosystem collectionNode.JS runtime collectionOpenSSH ecosystem collectionOpenSSL ecosystem CollectionOracle Database Server collectionWordPress ecosystem collection +Supported ecosystemsApache ecosystem collectionGoogle ecosystem collectionJava ecosystem collectionNginx ecosystem collectionNode.JS runtime collectionOpenSSH ecosystem collectionOpenSSL ecosystem CollectionOracle Database Server collectionWordPress ecosystem collection @@ -17 +16,0 @@ Ecosystems | Applications -7-Zip | 7-Zip archiver (version 21.07 and higher) @@ -19,2 +17,0 @@ Apache | Apache httpd Apache tomcat -Curl | Curl Libcurl -Elasticsearch | Elasticsearch @@ -31,48 +27,0 @@ Node.JS | node -## 7-Zip ecosystem collection - -###### Supported applications - - * 7 Zip archiver (version 21.07 or higher) - - - - -###### Key features - - * Examines 7-Zip binaries to extract the embedded version information. - - - - -###### Note - -Specifically, it searches for the product version value from the binary. - -###### Supported platforms – Windows - - * `C:/Program Files/7-Zip/7z.exe` - - * `C:/Program Files/7-Zip/7za.exe` - - * `C:/Program Files/7-Zip/7zz.exe` - - * `C:/Program Files/7-Zip/7zr.exe` - - * `C:/Program Files (x86)/7-Zip/7z.exe` - - * `C:/Program Files (x86)/7-Zip/7za.exe` - - * `C:/Program Files (x86)/7-Zip/7zz.exe` - - * `C:/Program Files (x86)/7-Zip/7zr.exe` - - - - -###### Example PURL - -The following is an example package URL for 7-Zip. - - - pkg:generic/7zip/[email protected] - @@ -187 +136 @@ The Amazon Inspector SBOM Generator scans for installations in common installati -###### MacOS +###### macOS @@ -227,149 +175,0 @@ The following is an example package URL for an `Apache tomcat` application. -## Curl ecosystem collection - -This section provides details about Curl and Libcurl applicatons. - -### Curl - -###### Supported applications - - * Curl - - - - -###### Supported platforms - - * Unix – Linux and MacOS - - * /usr/local/bin/curl - - - - -###### Key features – Curl - - * Examines curl binaries to extract the embedded version information. - - - - -###### Note - -Specifically, it searches for version strings in the binary executable `.rodata` section (for ELF binaries on Linux), `.rdata` section (for PE binaries on Windows), or __cstring section (for MachO binaries on MacOS). - -###### Curl version string - -The following is an example of a version string embedded in a Curl binary: - - - curl/8.14.1 - -Version `8.14.1` is extracted from the string to identify the `Curl` version. - -###### Example PURL (Curl) - -The following is an example package URL for a `Curl` version file. - - - Sample PURL: pkg:generic/curl/[email protected] - -### Libcurl - -###### Supported applications - - * Libcurl - - - - -###### Supported platforms - - * Unix – Linux and MacOS - - * /usr/local/bin/curl/curlver.h - - - - -###### Key features – Libcurl - - * Examines curlver.h to extract embedded version information for Libcurl. - - - - -###### Note - -Specifically, it extracts the version from the defined `LIBCURL_VERSION_MAJOR`, `LIBCURL_VERSION_MINOR`, and `LIBCURL_VERSION_PATCH` variables. - -###### Libcurl version string - -The following is an example of the version variables in a `curlver.h` file: - - - #define LIBCURL_VERSION_MAJOR 8 - #define LIBCURL_VERSION_MINOR 14 - #define LIBCURL_VERSION_PATCH 1 - -Version `8.14.1` is extracted from these lines to identify the `Libcurl` version. - -###### Example PURL (Libcurl) - -The following is an example package URL for a `Libcurl` version file. - - - Sample PURL: pkg:generic/curl/[email protected] - -## Elasticsearch ecosystem collection - -###### Supported applications - - * Elasticsearch - - - - -###### Note - -Vulnerability evaluation only applies to Elasticsearch version 7.17.0. - -###### Key features - - * **Version** – Unpacks the `elasticsearch-<specific.version>.jar` file to extract installation macros inside of `META-INF/MANIFEST.MF` files, which contain the Elasticsearch version string. - - - - -###### Supported platforms - - * **Linux** – `/etc/elasticsearch/lib`, `/opt/elasticsearch/lib/`, and `/usr/share/elasticsearch/lib/` - - * **MacOS** – `/usr/local/var/lib/elasticsearch/lib/` - - * **Windows** – `/elasticsearch/`, `/Program Files (x86)/Elastic/elasticsearch/lib/`, and `/Program Files/Elastic/elasticsearch/lib/` - - - - -###### Example `elasticsearch-<specific.version>.jar/META-INF/MANIFEST.MF` file - -The following is an example of an `elasticsearch-<specific.version>.jar/META-INF/MANIFEST.MF` file. - - - //truncated - - Manifest-Version: 1.0