Release Notes for Engine Pack 9.5.3

Since the previous Checkmarx certificate used for application code signing has expired, the Checkmarx certificate has been updated. The updated certificate might cause error messages, depending on the environment settings.

Starting with this release only the new flow will be available. The old flow is completely disabled and blocked, with all parameters related to the old flow removed from the database configuration tables and user interface, so that users cannot configure it.

After several development iterations of the new flow process over the past several releases, the difference in scan results between the new flow and the old flow is currently minimal. For customers that did not use the New Flow previously, there can be differences between the previous results and the current results. For customer that already used the New Flow previously, there will usually be no differences between the previous results and the current results, except in rare case where there might be a slight difference in the results.

The following configuration parameters have been removed:

The Engine logs have been refactored as Structured Logs, so that they are compatible with Kibana and can be displayed in a dashboard view with information, such as statistics for monitoring, errors and warnings for troubleshooting, and general information about the scans, such as languages. The information that will be displayed depends on the user queries.

Structured Logs is an independent service and is highly beneficial for hosted customers. For more details, see Viewing Structured Logs Using Kibana.

Python language support has been improved to support version 3.10, including the relevant features for the SAST engine support:

In 9.5.3 we are adding new support for AWS Lambdas for Go.

Since the added support is based on CxQL queries only, there were no changes to the engine capabilities.

DynamoDB and S3 library services are supported through the AWS SDK for Go.

The following set of queries has been created under a group called Go_AWS_Lambda:

The list of all queries can be found at Vulnerability Queries for 9.5.3.

The Dart and Flutter support has been improved with the addition of new queries.

The following queries are available as part of this version:

The list of all queries can be found at Vulnerability Queries for 9.5.3.

The C/C++ language support has been improved.

Go language support has been improved with the following features:

Besides the improvements in the language support, the initiative started in the previous engine pack continued, with additional improvements made with the creation of new and editing of existing queries.

The list of all queries can be found at Vulnerability Queries for 9.5.3.

In this engine pack, the JavaScript support has been improved, by adding a new framework and updating an existing one.

The following presets were added:

There are new and updated vulnerability descriptions, queries, and queries according to presets for this version.

For details, see Vulnerability Queries for 9.5.3.