Security

With the release of QRadar 7.5 UP7, the new app base image v4 is now available. For upcoming QRadar releases, it is highly recommended to build apps using base image v4. This version includes updated Python versions, which reduces exposure to many vulnerabilities.

If you have existing apps using v2 or v3, it is recommended to update the base app image to v4. We have already released a technote with all the details on how to migrate the base image version for existing apps:

https://www.ibm.com/support/pages/qradar-how-migrate-applications-app-framework-v2-or-v3-v4

To understand the packages included in base image v4.0.6, check this link:
https://ibmsecuritydocs.github.io/qradar_appfw_v2/docs/documentation/qradar_app_base_image_4.0.6_packages.html

Another blog was released a few days ago where we explained the signing changes effective post-August 2024:

https://community.ibm.com/community/user/security/blogs/ashish-kothekar/2024/09/23/minimum-qradar-version-for-app-development-and-ass?CommunityKey=4b5d78c9-2135-48b2-9bbb-0825224461c1

To sum it up, if you are building a new app, ensure that:
a. You are using base image version 4.
b. You are building the app on QRadar version 7.5 UP9 to accommodate the signing changes.

If you have any further queries, feel free to contact the TAP team at IBMSecurityAlliances@wwpdl.vnet.ibm.com.