CPE_NAME in /etc/os-release has lost the minor version

Solution Verified - Updated -

Environment

  • Red Hat Enterprise Linux (RHEL) 8.5

Issue

The format of CPE_NAME variable in /etc/os-release has changed in RHEL 8.5.

PRE- RHEL 8.5

CPE_NAME="cpe:/o:redhat:enterprise_linux:8.4:GA" 

RHEL 8.5

CPE_NAME="cpe:/o:redhat:enterprise_linux:8::baseos"

Resolution

If the minor version of the RHEL release is required then other variables in /etc/os-release such as VERSION_ID and VERSION are available.

Root Cause

Red Hat Product Security team requested the CPE_NAME variable formatting to be adjusted to match internal tooling and to better identify the running OS, for the purpose of assisting 3rd party scanners with that detection.

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

Comments