September 27, 2022
Welcome to Lucent Sky AVM version 2209 MR. This release includes major improvements for binary analysis for JDK applications, general improvements for other analysis engines, and support for the latest technology stacks and security standards such as iOS 16, Android API Level 32, and CWE 4.8. In addition, remediation support for static webpages has been expanded, enabling Instant Fixes for more vulnerability categories in ECMAScript. To learn more about this release, visit Lucent Sky AVM version 2209 release notes.
A new implementation of the third-generation binary analysis engine provides better support for JDK applications, automatic recognition for security libraries following OWASP ESAPI conventions, and incremental improvements on analysis performance. In addition, built-in runtimes targeting Java SE 5, 6, 7, and 8 are now also available without Tomcat, providing more streamlined build process with up to 60% shorter build time for non-servlet and non-web JDK applications.
Mobile applications targeting iOS 16 and Android API Level 32 are now supported. In addition, vulnerability categorization and information have been updated to CWE 4.8.
If you are using Lucent Sky AVM Enterprise or Standard Edition (either on-premise or cloud) and have an active subscription, you can update to 2209 MR immediately. Our support team will reach out to you shortly to schedule an update. If you are using Lucent Sky AVM On-Demand, your server will be updated to 2209 MR in the next few days.