Patch Announcement

Why do we need Patch Announcement nodes?

It is important to know when there are updates or security patches for software that you use yourself and that has a vulnerability. This information does not always come exclusively from the vendors (security advisory), but can also come from third parties.

What properties does a Patch Announcement node have?

Property

Data type

Comment

summary

string

A short summary of the document.

product_vendor

string

The name of the product vendor whose products are concerned with the patch.

references

List of URLs

The URLs which are mentioned in the original source.

publishing_company

string

The name of the organisation which has published this patch announcement.

version_info

string

The information about the actual document version given in the source document.

classification

string

In this case it is always “Patch Announcement”

title

string

The title of the source document.

url

URL

The URL of the source document.

cves

list of strings

All mentioned CVE IDs from the source document.

solution

text

The solution given in the source document to close the vulnerability.

scraped_date

datetime string (ISO 8601 standard)

The date when the source document was scraped.

The data type is an standard for representing date and time in a machine-readable format. This format includes:

Date: 2024-06-29 (Year-Month-Day)

Time: T00:00:00 (Hour:Minute:Second)

Time Zone Offset: +00:00 (UTC offset)

Example: "2024-06-29T00:00:00+00:00"

vulnerable_products

list of strings

The names of the products which were mentioned as vulnerable in the source document. E.g. ["xhibiter NFT marketplace 1.10.2"]

last_updated_date

datetime string (ISO 8601 standard)

The date when the source document was last updated.

The data type is an standard for representing date and time in a machine-readable format. This format includes:

Date: 2024-06-29 (Year-Month-Day)

Time: T00:00:00 (Hour:Minute:Second)

Time Zone Offset: +00:00 (UTC offset)

Example: "2024-06-29T00:00:00+00:00"

published_date

datetime string (ISO 8601 standard)

The date when the source document was published.

The data type is an standard for representing date and time in a machine-readable format. This format includes:

Date: 2024-06-29 (Year-Month-Day)

Time: T00:00:00 (Hour:Minute:Second)

Time Zone Offset: +00:00 (UTC offset)

Example: "2024-06-29T00:00:00+00:00"

severities

list of objects

The objects in the list are stringified json objects:
[‘{

“severity”: “critical”,

“origin_name”: “CVSS”

}’,

‘{

“severity”: “medium”,

“origin_name”: “vendor”

}’]

The severity is a string and the origin_name is a string.

Which nodes could a Patch Announcement node be related to?

Patch Announcement nodes can have relations to:

Published with Nuclino