Release Notes - 2.0

  • 2.0.9-funcrel
    Updates internal JDT dependency to a more recent version.
    Fixes incorrect CastIL representation on Java for-loops over arrays.
    Standardizes SecurityForJava execution on a single, controlled JRE provided by com.castsoftware.java.runtime25
    Improves diagnostic logs to better analyze performance issues.
    Improves handling of Java lambdas for security analysis.
  • 2.0.8-funcrel
    Updates internal dependencies to recent versions.
  • 2.0.7-funrel
    Adds new support for javax.websocket and jakarta.websocket: the generated information will be used by the Security Analyzer
    Improves performance when writing CASTIL files to NFS paths
  • 2.0.6-funcrel
    Improves logs
    Improves the process when there is no java file provided
    Fixes an issue where the analysis would get stuck. 📝 54586
    Integrates additional files to enhance type inference and parsing capabilities.
  • 2.0.5-funcrel
    Updates internal dependencies to recent versions.
    Improves logs
    Computes the necessary memory information (Linux only)
    Adds new support for JAX-WS: the generated information will be used by the Security Analyzer
    Adds new support for org.springframework.cloud.stream: the generated information will be used by the Security Analyzer
    Adds support for auto-initialized fields
  • 2.0.4-funcrel
    Adds new support for ‘switch expressions’ (JEP 361)
  • 2.0.3-funcrel
    Improve stability of com.castsoftware.securityforjava by no longer relying on jar files provided by other extensions.
    Improved performance: execution time reduced by a factor of 2 to 3, and approximately 50% less RAM usage.
  • 2.0.2-funcrel
    This release features enhanced robustness when handling missing dependencies.
  • 2.0.1-funcrel
    Implemented an update to ensure that the extension will use Java correctly in a Linux environment.
  • 2.0.0-funcrel
    Promotion to funcrel. No functional changes have been implemented.
  • 2.0.0-beta3
    Fixes a bug (an exception “java.lang.NullPointerException”) which occurs in some rare conditions, introduced in the previous version 2.0.0-beta3. A consequence of this exception is an incomplete creation of CASTIL files, and so, some false negative violations.
  • 2.0.0-beta2
    Functionally equivalent to com.castsoftware.securityforjava 1.6.15-funcrel.
    This extension now provides the support of “sun.misc.BASE64*” types with their dependencies for applications that need them.
  • 2.0.0-beta1
    A new release of the Security for Java extension to support installation on Linux server with CAST Imaging Core ≥ 8.4. Functionally equivalent to com.castsoftware.securityforjava 1.6.14-funcrel.
    This release of the extension has been compiled with Java 21 LTS to take advantage of improvements in the Java runtime.