Content Pack Version - CP.9.2.0.15052 (Java, Python)

Each Ruleset Content Pack includes improvements to queries, and optionally, also to presets. Technically, these changes are delivered through database upgrade scripts which affect the relevant tables.

As with any CxSAST product release, the Content Pack resets the Checkmarx built-in presets to the default query set.

This Content Pack uses a unified installer and it includes all the Content Packs published for version 9.2.0. It includes updates to Java and Python.

Installation order

  • This is a cumulative Content Pack, it can be installed over any of the version 9.2.0 Content Packs and does not require other Content Packs.

  • This Content Pack requires 9.2.0 Hotfix 15 or higher previously installed on the CxSAST Environment (Manager and Engines).

It includes all the changes provided by Content Pack 14 and the following improvements:

  • Added new Preset for SCA content.

    • Presets/SCA.xml

  • The above preset contains the following new queries for Java language:

Added the following queries:

  • Java_Exploitable_Path/Java_Find_Imports

  • Java_Exploitable_Path/Java_Find_Methods

  • The above preset contains the following new queries for Python language

Added the following queries:

  • Python_Exploitable_Path/Python_Find_Imports

  • Python_Exploitable_Path/Python_Find_Methods

Version Upgrade
It is mandatory to install at least the same Content Pack number for newer versions while upgrading (e.g. v9.2.0 CP15 → v9.3.0 CP15).
This step ensures the accuracy of the results is maintained while upgrading.

 

Which CxSAST version is this Content Pack for?
As stated in the release notes, this Content Pack is only compatible with CxSAST v9.2.0.

Which languages were targeted in this Content Pack?
This Content Pack provides improvements for Java and Python.

Can this Content Pack be installed on top of other Content Packs?
Yes, this Content Pack is a multi-language Content Pack. It inherits all the characteristics of previous Content Packs, i.e, it is cumulative.

Does this Content Pack depend on other Content Packs?
No, there are no dependencies on other Content Packs. All Content Packs are cumulative, meaning that when one Content Pack is installed it includes all the previous Content Packs.

Can this Content Pack be installed over other Content Packs?
Yes it can. It will override its content.

Is there any order of installation between this Content Pack and Content Pack 14?
Yes. But there is no need to install other Content Packs. This Content Pack includes all the previous.

Can this Content Pack be installed in further versions, like CxSAST 9.0?
No. Version 9.0 will not have a Content Pack 15 available. Version 9.3 has a dedicated Content Pack 15.

Does this Content Pack depend on any HotFix?
Yes, This Content Pack requires HotFix 15.