False positives on RedHat images after Prisma Cloud Compute v34.02 upgrade

• Upon upgrade to PCCE v34.02 and greater, RedHat-based images may show false positive detections.

• Prisma Cloud Enterprise Edition (SaaS)
• Prisma Cloud Compute Edition (v34.02.XXX+)
• RedHat Linux - based images

Quinn Update 2 (PCCE v34.02) implemented a change in our scanning procedure at the request of RedHat. Instead of preferring rhelRepoRelativeURLS (from /etc/yum.repos.d/) to match CPEs, we instead match using contentSets / rhelRepos (from /root/buildinfo/content_manifests/). If there's no information in /root/buildinfo/content_manifests/, we will match against all available security advisories.

For example, the package will be evaluated against both RHSA-2019:0981 and RHSA-2019:0997, as without the content sets we cannot determine which one properly applies. The ultimate cause of the false positive issues is the lack of content set information within some older base images provided by RedHat.

1. If the latest version of the RedHat base image has been fixed to contain the appropriate content sets in /root/buildinfo/content_manifests/, you may update the base image accordingly to resolve the issue.