Binarly Analysis Engine
- New Platforms/Formats
- Added support for apk packages when processing Docker images.
- Vulnerability Database Service
- Added Debian as a vulnerability advisory data source.
- Added RockyLinux as a vulnerability advisory data source.
- New Context-Aware Rule Detection
- Added VulHunt detection for vulnerabilities in U-Boot.
- Added detection for SPI flash regions that are expected to be write-protected but remain writable by the host firmware (BIOS).
- Added detection for Secure Boot Setup Mode being enabled, which lets a local attacker enrol a Platform Key and take ownership of Secure Boot.
- Analysis Framework Enhancements
- Firmware unpacking now extracts flash descriptors from UEFI firmware.
- Package information now propagates across duplicate components, improving package identification accuracy.
Bug Fixes
Platform
- User settings: Fixed a routing error that caused the user settings page to return a “not found” error.