|
|
|
|
Changelog for libopenvas_omp6-6.0.0-1.1.i586.rpm :
Thu Apr 18 14:00:00 2013 johann.luceAATTwanadoo.fr - Update to 6.0.0 version +2013-04-11 Henri Doreau * misc/kb.c: Fixed typo. 2013-04-10 Werner Koch * nasl/nasl_cert.c: Include gcrypt.h. (make_hexstring): New. (tohex): New macro. (get_fingerprint): New. (get_name): New. (nasl_cert_query): Replace some code by the new functions. (nasl_cert_query): Add commands \"image\", \"fpr-sha-256\", and \"fpr-sha-1\". 2013-04-09 Hani Benhabiles * base/cvss.c (__get_cvss_score): Add 0.0 to result to fix cases where result equals -0.0. (get_cvss_score_from_base): Return -1.0 instead of 0.0 when passed a null pointer to indicate an error as documented. 2013-04-09 Hani Benhabiles * base/cvss.c (impact_map): Fix Authentication Single Instance value from \"C\" to \"S\". 2013-04-09 Werner Koch * nasl/nasl_ssh.c (nasl_ssh_get_auth_methods): Fix length of returned string. A garbage byte at the end was returned. 2013-04-04 Hani Benhabiles * misc/openvas_auth.c (openvas_auth_init): Test for authentication configuration\'s existence before trying to load it. Log key file loading error as warning. 2013-04-04 Jan-Oliver Wagner This patch forces the scanner to only consider the CVSS of the NVT to decide about the severity class (HOLE, WARNING, NOTE, also known as Hight, Medium, Low) sent with the result. The scanner relies here on presence of a CVSS assigned to each NVT which was established in March 2013 for the regular feed. This change has significant impact on reporting behaviour because many (mostly older and various generic/sepcial ones) used either a mixture of security_note, _hole, _warning or are not in line with the assigned CVSS. For the latter case, these NVTs need to be fixed. Either the CVSS assignment was wrong, or the severity type. In some cases this will require to break up the NVT into multiple ones, separating log activity out into a NVT of its own. Splitting up into multiple NVTs is also relevant for those NVTs where severity message mixture was used. The hardest case to resolve will be NVTs that use the severity class as user preference. The analysis for mismatches can be done on NASL source code level of NVTs, simply comparing security_ * calls with CVSS tag. At the end of the day any such mismatch must be resolved in the regular feed. * nasl/nasl_init.c (libfuncs): Replace call of security_hole, security_warning and security_note by call of security_message. Also left a comment on when the API functions can be ultimately eliminated. * nasl/nasl_scanner_glue.c (security_hole, security_warning, security_note): Removed. * nasl/nasl_scanner_glue.h: Removed protos accordingly. 2013-04-03 Werner Koch * misc/openvas_server.c (server_attach_internal): Fix doc buglet. (openvas_server_attach): Ditto. 2013-04-02 Werner Koch * misc/openvas_server.c (server_attach): Factor all code out to .. (server_attach_internal): new function. Add and use args HOST and PORT. Return -2 on handshake failure. (openvas_server_new): Factor all code out to .. (server_new_internal): new function. Add optional arg PRIORITY. (openvas_server_open): Replace duplicate code by calls to server_new_internal and server_attach_internal. (openvas_server_connect): Replace handshake code by a call to openvas_server_attach. (openvas_server_free): Add backward compatibility change to allow use by openvas_server_close. (openvas_server_close): Replace by call to openvas_server_free. 2013-03-28 Hani Benhabiles * misc/proctitle.c (setproctitle): Remove \"openvassd:\" from new process name as the library call may be used by other daemons. 2013-03-26 Werner Koch * INSTALL: State that gnutls 2.8 is required. * misc/openvas_server.c (openvas_server_new): Change type of the END_TYPE arg to unsigned int. On most platforms this is compatible to the enum used by gnutls 2.x. * misc/openvas_server.h (openvas_server_new): Ditto. 2013-03-14 Jan-Oliver Wagner * CMakeLists.txt: Increased dependency to gnutls from 2.2 to 2.8. 2013-03-07 Hani Benhabiles * misc/plugutils.c (plugin_is_newstyle): Change tag name detection to vuldetect. 2013-03-06 Henri Doreau * nasl/nasl_builtin_nmap.c: Changed license from GPLv2 to GPLv2+ copyrighted by Greenbone. 2013-03-05 Hani Benhabiles * misc/plugutils.c (plugin_is_newstyle): New function. (proto_post_wrapped): Don\'t append nvt description to action when plugin has new style tags. * misc/plugutils.h: Add plugin_is_newstyle header. 2013-03-01 Jan-Oliver Wagner Removing handling of services list from libraries/scanner. Basically this is about the statice services list that is used to return a service identifier for port numbers. In case of a ssh running at port 80, the result so far would still be \"http (80/tcp)\" which is pretty misleading. The scanner should not at all use some static services list and match the ports to it. It should rather try to identify a service and report this (which is actually done via NVTs). In fact it should be the task of the Manager to attach IANA definition for informational purposes. Ideally the detected service is also shown. * misc/services1.c, misc/services1.h, misc/services.c, misc/services.h: Removed. * misc/scanners_utils.c: Removed unused include of \"services.h\". * misc/plugutils.c (proto_post_wrapped, scanner_add_port): Removed sending of the service name via OTP. For example \"80/tcp\" is now sent instead of \"http (80/tcp)\" * misc/CMakeLists.txt: Removed handling of modules services1.c and services.c. * nasl/nasl_builtin_openvas_tcp_scanner.c (std_port): Reduced to always return false. The code used the services list to determine whether it was a standard port. Now any port is judged to be a non-standard port. A todo about this to be resolved is left in the code. * CMakeLists.txt: Removed installtion of file \"openvas-services\". * COPYING: Removed modules services1 and services. * openvas-services: Removed. 2013-03-01 Jan-Oliver Wagner Remove handling of \"default\" as a option for the port range. It is a arbitrary and intransparent option for the users. Scanner clients should always send an explicit port range. * nasl/nasl_builtin_nmap.c (get_default_portrange): Removed. (add_portrange): Removed handling of case where port range is \"default\". (cmp): Removed. * nasl/nasl_builtin_openvas_tcp_scanner.c (banner_grab): Removed code to try to get default ports for services list. Exit with error when port_list is empty. * nasl/nasl_builtin_synscan.c (scan): Don\'t apply \"default\" as a fallback when port list is empty. * misc/scanners_utils.c (getpts): Remove handling for port lists of type \"default\". 2013-03-01 Jan-Oliver Wagner Post branch version bump. * CMakeLists.txt: Set version to 7.0.0 and status to beta. 2013-02-27 Timo Pollmeier * omp.c (omp_delete_task_ext, omp_delete_target_ext) (omp_delete_config_ext, omp_delete_lsc_credential_ext): New functions to delete tasks, targets, configs and lsc_credentials with options. * omp.h (omp_delete_opts_t): New typedef for omp_delete_... options. (omp_delete_opts_defaults, omp_delete_opts_ultimate_defaults): New constants for omp_delete_opts_t default values. (omp_delete_task_ext, omp_delete_target_ext) (omp_delete_config_ext, omp_delete_lsc_credential_ext): New function prototypes. 2013-02-25 Michael Wiegand * base/CMakeLists.txt: Add GPGME_CFLAGS to compiler flags. Patch suggested by Hanno Boeck. 2013-02-22 Michael Wiegand Post release version bump. * CMakeLists.txt: Set version to 6.0+beta6. 2013-02-22 Michael Wiegand * nasl/nasl.c (main): Update year in copyright notice. 2013-02-22 Michael Wiegand Preparing the openvas-libraries 6.0+beta5 release. * CHANGES: Updated. 2013-02-21 Werner Koch * misc/network.c (load_file, unload_file, load_cert_and_key): Replace gnutls_datum by gnutls_datum_t. 2013-02-21 Hani Benhabiles * base/nvticache.c (get_plugin_preference): Check prefs is not null before using it. Style update to remove mixed declarations and code. 2013-02-21 Werner Koch * base/nvticache.c (nvticache_get_by_oid): Take care of a NULL used for CACHE. * base/pwpolicy.c (policy_checking_failed): New. (parse_pattern_line): Split error messages into a log message and a shorter version for the user. (openvas_validate_password): Ditto. 2013-02-21 Jan-Oliver Wagner * COPYING: Added module pwpolicy. 2013-02-20 Werner Koch * base/pwpolicy.c: New. Taken from openvas-administrator. * base/pwpolicy.h: New. * base/CMakeLists.h: Add new files. * base/CMakeLists.txt: Change -D OPENVAS_SYSCONFDIR to OPENVAS_SYSCONF_DIR for consistency. * base/gpgme_util.c (determine_gpghome): Adjust for this change. * nasl/CMakeLists.txt: Change -D OPENVAS_SYSCONFDIR to OPENVAS_SYSCONF_DIR for consistency. It is not used anyway. * misc/openvas_server.c (openvas_server_open): Print host and port in debug and warning messages. 2013-02-19 Michael Wiegand Post release version bump. * CMakeLists.txt: Set version to 6.0+beta5. 2013-02-19 Michael Wiegand * CHANGES: Updated. 2013-02-19 Michael Wiegand Move \"-Werror\" flag to the \"Debug\" build type. * misc/CMakeLists.txt, omp/CMakeLists.txt, nasl/CMakeLists.txt, hg/CMakeLists.txt, base/CMakeLists.txt: Move \"-Werror\" from CMAKE_C_FLAGS to CMAKE_C_FLAGS_DEBUG to keep it out of the \"Release\" build type. * CMakeLists.txt: Do not set any flags as this is currently handled by the individual CMakeLists.txt in the subdirectories. 2013-02-18 Jan-Oliver Wagner Deperecating \"script_dependencie\" which is some very old work around for typos that happend when trying to spell \"script_dependencies\". * nasl/nasl_init.c (libfuncs): Removed \"script_dependencie\", renamed mapping to \"script_dependencies\". * nasl_scanner_glue.c (script_dependencie): Renamed to script_dependencies. * nasl_scanner_glue.h: Adjusted proto accordingly. 2013-02-17 Jan-Oliver Wagner Preparing the openvas-libraries 6.0+beta4 release. * CHANGES: Updated. 2013-02-14 Werner Koch * misc/openvas_auth.c (get_password_hashes): Remove partly hardwired use of MD5 to be future proof. Rename variable to avoid a Libgcrypt namespace clash. 2013-02-12 Hani Benhabiles * nasl/md5.c (MD5Final): memset with sizeof buffer, not pointer. Via Michal Ambroz. 2013-02-08 Matthew Mundell * omp/omp.h (omp_get_report_opts_t, omp_get_report_opts_defaults): Add levels. * omp/omp.c (omp_get_report_ext): Add levels. 2013-02-07 Michael Wiegand * doc/wmi-howto.txt: Fix cmake call, make example appropriate for out-of-source builds. 2013-02-07 Jan-Oliver Wagner * doc/wmi-howto.txt: Updated with hint on second wmi patch. 2013-02-07 Michael Wiegand Make sure openvas-libraries compiles as well without WMI support. * nasl/openvas_wmi_interface.h: Include stdint.h for use of uint32_t and uint64_t. * nasl/wmi_interface_stub.c (wmi_reg_set_dword_val) (wmi_reg_set_qword_val): Fix wrong types in function declaration. 2013-02-07 Veerendra G.G * nasl/nasl_wmi.c, nasl/nasl_wmi.h, nasl/nasl_init.c, nasl/wmi_interface_stub.c, nasl/openvas_wmi_interface.h: Added 6 new WMI Registry functions. 2013-02-06 Matthew Mundell * omp/omp.c (OMP_FMT_BOOL_ATTRIB): Add the attribute when it is 0 too, because the OMP default is sometimes 1. 2013-01-29 Werner Koch * nasl/nasl.c: Include libssh and nasl_signature.h. (main): Display library versions if --debug-tls is given. 2013-01-28 Michael Wiegand * misc/openvas_auth.c (openvas_auth_init): Downgrade log level for debug message. 2013-01-24 Werner Koch Change to allow printing of useful diagnostics even if stderr is redirected to the bit bucket. * misc/network.c: Include openvas_logging.h. Replace all fprintf to stderr calls by calls to log_legacy_write. (openvas_get_socket_from_connection): Repalce fflush by log_legacy_fflush. (verify_peer_certificate): Add messages for not yet valid and expired certifciates, print invalid status last, and pretty print those messages. * misc/openvas_logging.c: Include stdarg.h. (legacy_log_handler): New variable. (setup_legacy_log_handler, log_legacy_write, log_legacy_fflush): New. * misc/openvas_logging.h: Add prototypes for new functions. * misc/openvas_logging.c: Include gnutls.h. (log_func_for_gnutls): New. (setup_log_handlers): Enable GNUTLS logging if the evnvar OPENVAS_GNUTLS_DEBUG is set. 2013-01-24 Michael Wiegand * misc/openvas_auth.c (openvas_auth_write_config): Correct group for allow-plaintext entry. 2013-01-21 Chandrashekhar B * nasl/nasl_packet_forgery_v6.c (forge_udp_v6_packet): IPv6 packet length was set to 40 more than the size in UDP forging. (set_udp_v6_elements): IPv6 packet length was set to 40 more than the size in UDP forging. 2013-01-21 Felix Wolfsteller * misc/ldap_auth.c (ldap_auth_bind): Before giving up if StartTLS failed, try to establish ldaps connection. 2013-01-21 Felix Wolfsteller * misc/ldap_auth.c (ldap_auth_bind): Renamed parameter from force_starttls to force_encryption (upcoming: ldaps support). 2013-01-21 Hani Benhabiles * base/accessrules.c (accessrule_set_oid): Rename into accessrule_set_rule to match header. * base/credentials.h (credentials_t): Fix documentation. 2013-01-19 Matthew Mundell * omp/omp.c (check_response): Return OMP status if there is one. Reflect this in docs of callers. 2013-01-18 Hani Benhabiles Patch by Henri Doreau. * base/openvas_file.c: Include errno.h. (openvas_file_check_is_dir): Use g_lstat instead of stat. Code cleanup. (openvas_file_copy, openvas_file_move): Code deduplication and cleanup. 2013-01-18 Hani Benhabiles * base/openvas_file.c (openvas_file_rmdir_rf): Remove function as it duplicates with openvas_file_remove_recurse. (openvas_file_copy): Use g_file_copy and g_file_new_path functions from gio. (openvas_file_move): Use g_file_move and g_file_new_path functions from gio. * base/openvas_file.h: Remove openvas_file_rmdir_rf header. Include gio. * CMakeLists.txt: Add gio from glib to pkg-config command. 2013-01-17 Jan-Oliver Wagner Make module openvas_ssh_login independent of module system. * misc/openvas_ssh_login.c (openvas_ssh_login_new): Use g_malloc0 instead of emalloc. (openvas_ssh_login_free): Use g_free instead if efree. 2013-01-17 Jan-Oliver Wagner * COPYING: Added entry for new module base/gpgme_util. 2013-01-17 Jan-Oliver Wagner * base/README.txt: Improve text and extend mission to any mandatory library. 2013-01-17 Werner Koch * base/CMakeLists.txt (CMAKE_C_FLAGS): Add -D_FILE_OFFSETS_BITS=64. 2013-01-17 Werner Koch Move gpgme initialization from nasl/ to base/. This removes the script name from the error messages, but those errors are anyway not script specific. * nasl/nasl_signature.c (locale.h): Remove include. (determine_gpghome): Remove. (init_openvas_gpgme_ctx): Remove. * nasl/nasl_signature.h: Include gpgme_util.h. * base/gpgme_util.c, base/gpgme_util.c: New files with the removed functions. (init_openvas_gpgme_ctx): Rename to openvas_init_gpgme_ctx. Change all callers. * base/CMakeLists.txt: Add gpgme_utils.c and gpgme_util.h. (add_definition): Add OpenVAS_SYSCONFDIR. 2013-01-17 Hani Benhabiles * base/openvas_file.c (openvas_file_copy, openvas_file_move) (openvas_file_rmdir_rf): New functions. * base/openvas_file.h: Add headers accordingly. 2013-01-17 Felix Wolfsteller * misc/ldap_auth.c (ldap_auth_bind): If switching to StartTLS fails and allow-plaintext is true, close and re-establish connection, to overcome fact that ADS does not allow bind after StartTLS negotiation fail. Reuse ldapuri, thus free at other places. 2013-01-17 Felix Wolfsteller * misc/ldap_auth.c (ldap_auth_bind): Abort if password is of zero length. Default ADS behaviour allows binding with correct username but empty password. 2013-01-11 Jan-Oliver Wagner * base/nvticache.c (nvticache_get_src_by_oid): New. Returns the copy of the src string. This function is special because src is the only element that is directly stored in a shrinked nvti object. Using this function prevents the loading of the nvti object from filesystem when only src is needed. * base/nvticache.h: Added proto accordingly. 2013-01-06 Jan-Oliver Wagner Third part towards clean separation of NVTI into the NVTI Cache: The nvti objects in memory are shrinked to essential data and details are loaded from file when needed. This decreases memory consumption by around 30M per process in my test environment. * base/nvti.c (nvti_shrink): New. Free memory of all elements except src and oid. * base/nvti.h: Add proto for nvti_shrink. * base/nvticache.c (nvticache_get): Search the nvtis and return nvti if found. If new, shrink it and then add it to nvtis. In any case a cloned, shrinked nvti is returned. (nvticache_get_by_oid): Because the nvti is shrinked, load the full object from file, create a new object and return it. * nasl/nasl_scanner_glue.c (security_message): Free the nvti object because it is a clone now. * misc/plugutils.c (plug_create_from_nvti_and_prefs): Use a copy of the oid string for OID. (proto_post_wrapped, get_plugin_preference): Free the nvti object after use. 2013-01-06 Jan-Oliver Wagner Second part towards clean separation of NVTI into the NVTI Cache: The nvti objects are stored in the cache object in memory and all remaining access to NVTI object via \"NVTI\" is replaced by access via OID. The only exception is the parsing code for the description block where the OID is not necessarily known at the beginning and therefore can not be relied on. * base/nvticache.h (struct nvticache): Added collection of NVTIs. (nvticache_get_by_oid): Added proto. * base/nvticache.c (nvticache_new): Initialize nvtis. (nvticache_free): Free the nvtis. (nvticache_get): Add the new nvti to the nvtis. (nvticache_get_by_oid): New. * misc/plugutils.c (plug_create_from_nvti_and_prefs): Don\'t set the NVTI anymore. Don\'t duplicate the oid string when setting the OID. (proto_post_wrapped, get_plugin_preference): Don\'t get the object via NVTI, get it via OID. * nasl/nasl_scanner_glue.c (get_script_oid): Create a copy of the OID when setting the str_val. (security_message): Get the nvti object via OID instead of via NVTI. 2013-01-06 Jan-Oliver Wagner First part towards clean separation of NVTI into the NVTI Cache: Plugin arg_list are provided with explicit OID element. And whereever only the OID is required, it is directly retrieved instead via NVTI. This increases memory consumption per process sligthly and makes processing more complicated. The latter is neglectable in terms of performance. The first adds about 3M per process. * misc/plugutils.c (plug_create_from_nvti_and_prefs): Set OID additional to NVTI as arg list element. (mark_successful_plugin, mark_post): Use OID element directly instead of NVTI. * nasl/nasl_scanner_glue.c (get_script_oid): Use OID element directly instead of NVTI. * nasl/nasl_misc_funcs.c (simple_register_host_detail): Use OID element directly instead of NVTI. 2013-01-04 Jan-Oliver Wagner * nasl/nasl_scanner_glue.c (security_message): Removed unneeded check. It was misplaced here. 2013-01-04 Felix Wolfsteller * hg/CMakeLists.txt: In commented hg-test executable target, also statically link against nasl (because of nasl *ssh_internal_close). 2012-12-28 Henri Doreau * base/cvss.c (get_cvss_score_from_base_metrics): Check for a valid toenum() return value. 2012-12-27 Henri Doreau Refactored code to match the project\'s coding standards. * base/cvss.c (toenum, get_impact_subscore) (get_exploitability_subscore, get_cvss_score_from_base_metrics): Reworked code to use the new struct cvss and impact_item table. Numerous style fixes. (set_impact_from_str, __get_cvss_score): New. * base/cvss.h: Updated headers accordingly. 2012-12-20 Jan-Oliver Wagner * nasl/nasl_scanner_glue.c (script_tag): Ignore tags setting a risk_factor. It will therefore not be stored in nvti files and not transferred via OTP. 2012-12-20 Jan-Oliver Wagner * nasl/nasl_scanner_glue.c (script_see_also): Removed. It was marked unused anyway and will not be used in the future. * nasl/nasl_scanner_glue.h: Remove proto accordingly. 2012-12-20 Jan-Oliver Wagner * base/nvti.c (nvti_free): Don\'t free risk factor anymore. (nvti_risk_factor): Compute the risk factor based on cvss. (nvti_set_risk_factor): Removed. (nvti_clone): Don\'t clone risk factor anymore. * base/nvti.h: Removed proto accordingly. (struct nvti): Removed element risk_factor. 2012-12-18 Jan-Oliver Wagner * COPYING: Added cvss module. * base/cvss.c (cvss_as_str): New. * base/cvss.h: Added proto accordingly. 2012-12-17 Jan-Oliver Wagner * nasl/nasl_scanner_glue.c (security_message): Directly retrieve the cvss value from the NVTI meta data when there is no parameter given. 2012-12-17 Jan-Oliver Wagner * nasl/exec.c: Replaced all calls of cvt_bool by cell2bool. (cvt_bool): Remove. It is a unused wrapper around cell2bool() since ages. 2012-12-17 Jan-Oliver Wagner * base/nvti.c (nvti_cvss): Add missing free\'ing. Convert cvss separately from stored base value as last resort. 2012-12-17 Jan-Oliver Wagner * base/nvti.c (nvti_cvss): Compute cvss from cvss_base_vector. 2012-12-16 Jan-Oliver Wagner * base/cvss.c, base/cvss.h: New. Implemented by Preeti Subramanian. * base/CMakeLists.txt: Add new module cvss to build routines. 2012-12-14 Michael Wiegand Post release version bump. * CMakeLists.txt: Set version to 6.0+beta4.
|
|
|