Lucent Sky AVM version 2412 release notes

2024/12/17 |

Lucent Sky AVM version 2412 releases

Lucent Sky AVM version 2412 MR

New features in 2412 MR

Weakness policies

  • Support for CWE 4.16

Pre-analysis and build

  • Support for scanning from Subversion repositories

Source code analysis

  • Compatibility improvements on ASP and ASP.NET
  • General improvements on the source code analysis engines

Dependency analysis

  • General improvements on dependency analysis engines

Hybrid analysis

  • General improvements on the hybrid analysis engines

Remediation

  • General improvements on ML-augmented vulnerability remediation and explanations

Interfaces

  • General improvements on the Web UI
  • Support for recent versions of Eclipse IDE, InteliJ IDEA, and Visual Studio Code

Administration

  • Support for Windows Server 2025
  • General improvements of the CLEAR Engine installer

Issues fixed in 2412 MR

  • We fixed an issue where scan logs are not available when build failed with opportunistic analysis enabled
  • We fixed an issue where users are unable to change password on instances with certain versions of CryptoAPI
  • We fixed an issue where certain control characters in statements prevent HTML reports from being correctly generated
  • We fixed an issue where certain CWE-295 results in Ruby are incorrectly suppressed when automatic suppression is enabled
  • We fixed an issue where APL for ECMAScript is not included in the remediated source code archive

Breaking changes in 2412 MR

  • Build tools in custom .NET runtimes

    Potentially breaking change. The build tools in custom .NET runtimes will only allow latest and managed. Existing custom runtimes using legacy values such as framework and visualstudio will be migrated to their corresponding new values.