AWS inspector documentation change
Summary
Added documentation for 7-Zip, Curl, Elasticsearch, Jenkins, MariaDB/MySQL, and PHP ecosystem collections including supported versions, file paths, and version extraction methods
Security assessment
The changes expand SBOM generation documentation to include new software ecosystems, which supports vulnerability detection through component inventory. While SBOMs are security-related, there is no direct mention of addressing specific vulnerabilities or security incidents in these changes.
Diff
diff --git a/inspector/latest/user/sbom-generator-ecosystem-collection.md b/inspector/latest/user/sbom-generator-ecosystem-collection.md index bb7a68399..b93291cb6 100644 --- a//inspector/latest/user/sbom-generator-ecosystem-collection.md +++ b//inspector/latest/user/sbom-generator-ecosystem-collection.md @@ -5 +5 @@ -Supported ecosystemsApache ecosystem collectionGoogle ecosystem collectionJava ecosystem collectionNginx ecosystem collectionNode.JS runtime collectionOpenSSH ecosystem collectionOpenSSL ecosystem CollectionOracle Database Server collectionWordPress ecosystem collectionWindows applicaitons ecosystem collection +Supported ecosystems7-Zip ecosystem collectionApache ecosystem collectionCurl ecosystem collection Elasticsearch ecosystem collectionGoogle ecosystem collectionJava ecosystem collectionJenkins ecosystem collectionMariaDB and MySQL ecosystem collectionNginx ecosystem collectionNode.JS runtime collectionOpenSSH ecosystem collectionOpenSSL ecosystem CollectionOracle Database Server collectionPHP ecosystem collectionWordPress ecosystem collectionWindows applicaitons ecosystem collection @@ -16,0 +17 @@ Ecosystems | Applications +7-Zip | 7-Zip archiver (version 21.07 and higher) @@ -17,0 +19,2 @@ Apache | Apache httpd Apache tomcat +Curl | Curl Libcurl +Elasticsearch | Elasticsearch @@ -19,0 +23,2 @@ Java | JDK JRE Amazon Corretto +Jenkins | Jenkins (version 2.400.* and higher) +MariaDB and MySQL | MariaDB Server (10.6+, 11.x, 12.x) Oracle MySQL Server Server (8.0, 8.4, 9.4+) @@ -24,0 +30 @@ Oracle | Oracle Database Server +PHP | PHP (version 8.1 and higher) @@ -27 +33,49 @@ Node.JS | node -Windows applications | PowerShell NuGet CLI Visual Studio Code Microsoft Edge SharePoint Server Microsoft Defender Exchange Server Visual Studio .NET Runtime ASP.NET Core Runtime Outlook for Windows Microsoft Teams Outlook for Windows Microsoft Office Microsoft 365 +Windows applications | PowerShell NuGet CLI Visual Studio Code Microsoft Edge SharePoint Server Microsoft Defender Exchange Server Visual Studio .NET Runtime ASP.NET Core Runtime Microsoft Teams Outlook for Windows Microsoft Office Microsoft 365 + +## 7-Zip ecosystem collection + +###### Supported applications + + * 7 Zip archiver (version 21.07 or higher) + + + + +###### Key features + + * Examines 7-Zip binaries to extract the embedded version information. + + + + +###### Note + +Specifically, it searches for the product version value from the binary. + +###### Supported platforms – Windows + + * `C:/Program Files/7-Zip/7z.exe` + + * `C:/Program Files/7-Zip/7za.exe` + + * `C:/Program Files/7-Zip/7zz.exe` + + * `C:/Program Files/7-Zip/7zr.exe` + + * `C:/Program Files (x86)/7-Zip/7z.exe` + + * `C:/Program Files (x86)/7-Zip/7za.exe` + + * `C:/Program Files (x86)/7-Zip/7zz.exe` + + * `C:/Program Files (x86)/7-Zip/7zr.exe` + + + + +###### Example PURL + +The following is an example package URL for 7-Zip. + + + pkg:generic/7zip/[email protected] @@ -176,0 +231,149 @@ The following is an example package URL for an `Apache tomcat` application. +## Curl ecosystem collection + +This section provides details about Curl and Libcurl applicatons. + +### Curl + +###### Supported applications + + * Curl + + + + +###### Supported platforms + + * Unix – Linux and macOS + + * /usr/local/bin/curl + + + + +###### Key features – Curl + + * Examines curl binaries to extract the embedded version information. + + + + +###### Note + +Specifically, it searches for version strings in the binary executable `.rodata` section (for ELF binaries on Linux), `.rdata` section (for PE binaries on Windows), or __cstring section (for MachO binaries on macOS). + +###### Curl version string + +The following is an example of a version string embedded in a Curl binary: + + + curl/8.14.1 + +Version `8.14.1` is extracted from the string to identify the `Curl` version. + +###### Example PURL (Curl) + +The following is an example package URL for a `Curl` version file. + + + Sample PURL: pkg:generic/curl/[email protected] + +### Libcurl + +###### Supported applications + + * Libcurl + + + + +###### Supported platforms + + * Unix – Linux and macOS + + * /usr/local/bin/curl/curlver.h + + + + +###### Key features – Libcurl + + * Examines curlver.h to extract embedded version information for Libcurl. + + + + +###### Note + +Specifically, it extracts the version from the defined `LIBCURL_VERSION_MAJOR`, `LIBCURL_VERSION_MINOR`, and `LIBCURL_VERSION_PATCH` variables. + +###### Libcurl version string + +The following is an example of the version variables in a `curlver.h` file: + + + #define LIBCURL_VERSION_MAJOR 8 + #define LIBCURL_VERSION_MINOR 14 + #define LIBCURL_VERSION_PATCH 1 + +Version `8.14.1` is extracted from these lines to identify the `Libcurl` version. + +###### Example PURL (Libcurl) + +The following is an example package URL for a `Libcurl` version file. + + + Sample PURL: pkg:generic/curl/[email protected] + +## Elasticsearch ecosystem collection + +###### Supported applications + + * Elasticsearch + + + + +###### Note + +Vulnerability evaluation only applies to Elasticsearch version 7.17.0. + +###### Key features + + * **Version** – Unpacks the `elasticsearch-<specific.version>.jar` file to extract installation macros inside of `META-INF/MANIFEST.MF` files, which contain the Elasticsearch version string. + + + + +###### Supported platforms + + * **Linux** – `/etc/elasticsearch/lib`, `/opt/elasticsearch/lib/`, and `/usr/share/elasticsearch/lib/` + + * **macOS** – `/usr/local/var/lib/elasticsearch/lib/` + + * **Windows** – `/elasticsearch/`, `/Program Files (x86)/Elastic/elasticsearch/lib/`, and `/Program Files/Elastic/elasticsearch/lib/` + + + + +###### Example `elasticsearch-<specific.version>.jar/META-INF/MANIFEST.MF` file + +The following is an example of an `elasticsearch-<specific.version>.jar/META-INF/MANIFEST.MF` file. +