v2.1.0

• Replace NVD xml source with NVD JSON source

v2.0.9

• Added Debian Bullseye and bumped Debian version mappings (thanks @imlonghao)

v2.0.8

• Switched to a static TLS Cipher Suite that does not use 3DES, protecting clients from suffering from Sweet32
• Fixed debugging log lines that were being printed always
• Added exponential backoff for updater failures (thanks @reasonerjt)

v2.0.7

This release includes a fix for mapping Ubuntu Cosmic to the proper namespace.

v2.0.6

This release includes two fixes:

• NVD has moved onto AWS. We've updated to use that more scalable
  database.
• HTTP requests now have a useragent to allow internal and external
  networks to segment traffic. Thanks to Jean Michel MacKay (@MackJM)

v2.0.5

This release points Clair to Alpine Security DB to a GitHub repository because their servers were unable to handle the traffic from Clair users.

Thanks to Daniel Jiang (@reasonerjt)

v2.0.4

• Huge thanks to Jean Michel MacKay (@MackJM) who updated Clair to pull from Ubuntu's new git repository -- this removes the dependency on bzr, which has previously caused networking and performance problems.
• Thanks to Nick Johns (@ninjaMog) who updated Clair to use HTTPS for NVD metadata source and patched Clair to temporarily point to the new location for the archived Ubuntu bzr repository.

v2.0.3

This release contains two bug fixes:

• Upgrade to Go 1.10 to fix binding to "0.0.0.0" on IPv4-only systems
  • Thanks to @usr42 and @hhomar
• Add Ubuntu Bionic namespace detection
  • Thanks @qeqar

v2.0.2

This release contains two bug fixes:

• Updater: Sleep before continuing the lock loop.
• Correctly identify RHEL images.
  • Thanks @joerayme!

v2.0.1

This release contains two bug fixes:

• Upgrade Debian release mapping to newly released Debian versions
  • Thanks Renzo Toma
• Fix Ubuntu release mapping to properly strip extraneous data extracted from a layer
  • Thanks Alina Radu