Version 6.4.0

Changes in this Release

• Increased timeout between downloads from the NVD to prevent rate limiting issues (see #3722).
  • cveStartYear is now configurable and can be set to any year from 2002 to present.
  • cveWaitTime is a new configuration option to define how many milliseconds to wait between NVD downloads; default is 4000 ms (see #3690).
  • The NVD CVE data files are now being cached for up to 4 hours in case a download fails, re-running ODC will use the cached version.
• Fixed NPE in the ODC maven plugin (see #3702.
• See the full listing of changes.

Version 6.3.2

Changes in this Release

• Reduced chance of rate limiting when download files from NVD (see #2670).
• Fixed bug causing some transitive dependencies being skipped in the odc-maven-plugin (see #3627).
• See the full listing of changes.

Version 6.3.1

Changes in this Release

• Fixed ConcurrentModificationException
• See the full listing of changes.

Version 6.3.0

Changes in this Release

• Many updates were made to improve performance on large scans, reduce false positives, and other bug fixes.
• Increased the width of four columns in the database; if you use a an external database you should also update the width (see upgrade_5.1.sql).
• See the full listing of changes.

Version 6.2.2

Changes in this Release

• Resolved issue with database connections introduced in 6.2.0 (see #3432).
• See the full listing of changes.

Version 6.2.1

Changes in this Release

• Resolved issue with database connections introduced in 6.2.0 (see #3416).
• See the full listing of changes.

Version 6.2.0

Changes in this Release

• Added an experimental Perl CPAN analyzer #3378
• Improved database performance #3206
• The archive analyzer now extracts files from RPM archives #3226
• Ensure ordered output in reports #3243
• Several minor bug fixes and updates to reduce false positives
• See the full listing of changes.

Version 6.1.6

Changes in this Release

• Resolved issue with Sarif report (#3243)
• Resolved issue with Ruby Bundle Audit (#3256)
• Several minor bug fixes and updates to reduce false positives
• See the full listing of changes.

Version 6.1.5

Changes in this Release

• Fixed a second NPE introduced in 6.1.3 (see #3246)
• See the full listing of changes.

Version 6.1.4

Changes in this Release

• Fixed an NPE introduced in 6.1.3 (see #3212)
• See the full listing of changes.