|
|
 |
|
|
Changelog for openvas-scanner-3.4.0-1.8.i586.rpm :
Thu Apr 18 14:00:00 2013 johann.luceAATTwanadoo.fr - Update to 3.4.0 +2013-04-11 Michael Wiegand
* INSTALL: Note increased GnuTLS dependency.
2013-04-05 Matthew Mundell
* src/log.c (log_init): Print fail messages about log file to stderr, so
that tools wanting to parse \"openvassd -s\" output can separate out the
the actual settings.
2013-04-05 Jan-Oliver Wagner
Remove scanner preference \"silent_dependencies\".
This setting advised the scanner to hold back results of those NVTs
that were not explicitely selected but were only executed because they
appeared as dependencies of selected ones.
It is removed because it is actually task of the user or the
controlling unit of the scanner (OpenVAS Manager) to filter whatever
is of interest.
The actual scan result should better remain complete inside the
result databse. Dropping for example detection details makes a
report less clear.
Another aspect is, that use of this preference is too error-prone
because users too easily combine a selection of NVT with this
preference and accidently switch of results they actually would
have expected (leading to False Negatives).
So, for comprehensibility and consistency a scan result should
always be complete. It is not the task of a scanner to drop any
information.
This patch may require some adjustments or improved ways of handling
results in the Scanner clients. This change will change default
behaviour of scan configurations that were setting
silent_dependencies to yes.
* src/pluginscheduler.c (enable_plugin_and_dependencies): Removed
parameter \"silent\" and its handling.
(plugins_scheduler_init): Call enable_plugin_and_dependencies without
\"silent\" parameter. Also remove parameter \"silent_dependencies\".
* src/pluginscheduler.h: Adjust proto accordingly.
* src/attack.c (attack_network): Adjust call of plugins_scheduler_init
accordingly.
* src/preferences.c (openvassd_defaults): Removed \"silent_dependencies\".
(preferences_silent_dependencies): Removed.
(preferences_reset_cache): Removed handling of silent_dependencies.
* src/preferences.h: Removed proto accordingly.
* src/pluginlaunch.c (process_internal_msg): Don\'t consider LAUNCH_SILENT anymore.
* src/pluginscheduler.h: Remove LAUNCH_SILENT.
2013-03-28 Hani Benhabiles
* src/attack.c (attack_host): Adjust setproctitle call argument to start
with \"openvassd:\".
* src/openvassd.c (scanner_thread, main_loop): Adjust setproctitle call
argument to start with \"openvassd:\".
* src/nasl_plugins.c (nasl_thread): Adjust setproctitle call argument to
start with \"openvassd:\".
* src/oval_plugins.c (oval_thread): Adjust setproctitle call argument to
start with \"openvassd:\".
2013-03-24 Hani Benhabiles
* src/utils.c (version_check, is_symlink, check_symlink)
(is_socket_connected, set_linger): Remove unused functions.
* src/utils.h: Remove unused headers and declarations accordingly.
2013-03-21 Jan-Oliver Wagner
Removing the shell scripts to add and to remove a user.
This is the first part of moving the user management into
OpenVAS Manager module. The Scanner should eventually only
be accessed with certificates. For the time being,
OpenVAS Administrator can manager traditional user accounts
for the Scanner.
* tools/openvas-adduser.in, tools/openvas-rmuser.in: Removed.
* doc/openvas-adduser.8, doc/openvas-rmuser.8: Removed.
* COPYING: Removed entries accordingly.
* CMakeLists.txt: Removed handling of the two scritps.
* doc/openvassd.8.in: Removed references to the documentation
for the two scripts.
* tools/openvas-mkcert-client.in: Removed reference to
openvas-adduser documentation.
2013-03-20 Jan-Oliver Wagner
* po/openvas-scripts-de.po, po/Makefile, po/README, po/: Removed.
The i18n support for scripts has not proven and the scripts
will undergo a major change anyway.
2013-03-20 Jan-Oliver Wagner
* INSTALL: Removed notes on OpenVAS-Client which is not
compatible anymore with the OTP changes.
2013-03-15 Jan-Oliver Wagner
* CMakeLists.txt: Increased dependency to gnutls from 2.2 to 2.8.
2013-03-14 Hani Benhabiles
* src/comm.c (is_valid_feed_version): New function.
(nvt_feed_version): Test fgets() return value correctly.
(comm_send_nvt_info): Validate feed version before sending it.
2013-03-14 Hani Benhabiles
* src/comm.c (nvt_feed_version): New function.
(comm_send_nvt_info): Send nvt feed version instead of DUMMY value.
2013-03-06 Jan-Oliver Wagner
Reverting parts of the previous patch because under certain
conditions (network_scan_status == busy) the kb_saving
is still needed.
* src/save_kb.c: Removed unneeded include.
(save_kb): Re-added a simplified version.
* src/save_kb.h: Re-added proto accordingly.
* src/piic.c (kb_parse): Re-added handling for case \"save_kb\".
* src/attack.c (attack_network, launch_plugin, init_host_kb):
Re-adding, partly simplified, handling for case \"save_kb\", in
other words for network scan situations.
2013-03-05 Jan-Oliver Wagner
Third part of removing kb-saving feature. This completes
the removal of the user-driven kb saving.
* src/preferences.c (openvassd_defaults): Removed \"kb_max_age\".
* src/save_kb.c (save_kb_max_age): Removed.
(save_kb_load_kb): Apply the default 864000 for max_age
directly (the old default, 10 days).
* src/save_kb.h: Removed proto accordingly.
2013-03-05 Jan-Oliver Wagner
Second part of removing kb-saving feature.
This removes the scanner configs for advising to save kb.
Thus no kb files are stored anymore under users/$user/kbs/
during a non-network scan. Network scans will still save
KBs.
* src/preferences.c (openvassd_defaults): Removed
\"save_knowledge_base\", \"kb_restore\",
\"only_test_hosts_whose_kb_we_dont_have\" and
\"only_test_hosts_whose_kb_we_have\".
* src/save_kb.c (save_kb, save_kb_pref_untested_hosts_only,
save_kb_pref_tested_hosts_only, save_kb_pref_restore): Removed.
* src/save_kb.h: Removed protos accordingly.
* src/attack.c (attack_network, launch_plugin, init_host_kb):
Removed handling for case \"save_kb\".
* src/piic.c (kb_parse): Removed handling for case \"save_kb\".
2013-03-05 Hani Benhabiles
* src/comm.c (plugin_is_newstyle): Remove function. Now part of
plugutils.c in libraries.
2013-04-05 Matthew Mundell
* src/nasl_plugins.c (plugin_is_newstyle): Check tag in case it is NULL.
Also move &&\'s to front of line for consistency.
2013-03-04 Jan-Oliver Wagner
First part of removing kb-saving feature.
This removes the scanner configs for selecting which NVT categories
should be replayed. Now all will be replayed regardless of the
category. However, this is temporary.
* src/preferences.c (openvassd_defaults): Removed
\"kb_dont_replay_scanners\", \"kb_dont_replay_denials\",
\"kb_dont_replay_info_gathering\", \"kb_dont_replay_attacks\".
* src/save_kb.c (save_kb_replay_check): Removed.
* src/save_kb.h: Removed proto accordingly.
* src/attack.c (launch_plugin): In case of using save_kb,
any NVT will be replayed now.
2013-03-03 Hani Benhabiles
* src/comm.c (send_plug_info): Send NOSUMMARY instead of whole summary
when script tag summary is present.
(plug_is_newstyle): Rename to plugin_is_newstyle.
2013-03-02 Hani Benhabiles
* src/comm.c (plug_is_newstyle): New function to check if plugin has all
newly added tags (summary, affected, insight, detection, impact,
solution).
(send_plug_info): Send NODESC instead of whole description when plugin
has all new style tags.
2013-03-01 Jan-Oliver Wagner
* src/openvassd.c (main): Don\'t initialize services
(openvas_init_svc) anymore. It is not needed anymore because removed
from openvas-libraries (see there for rationale).
2013-03-01 Jan-Oliver Wagner
The port_range \"default\" is not allowed anymore. It is now
mandatory that the client sends an explicit one.
Ratonale: \"default\" is an intransparent behaviour from user
perspective.
* src/preferences.c (openvassd_option openvassd_defaults): Removed
port_range from the default settings.
* src/attack.c (attack_network): Check port_range directly as found in
preferences. Don\'t assume \"1-15000\" in absense of port_range and don\'t
consider port_range == \"-1\" as something valid.
2013-03-01 Timo Pollmeier
* tools/greenbone-nvt-sync (RSYNC_DELETE): Remove quotes causing
exclude of private directory to be ignored.
2013-02-28 Jan-Oliver Wagner
* src/comm.c (comm_send_nvti_info): Renamed OTP command
\"PLUGINS_MD5\" to \"NVT_INFO\" which is more apropriate as
no MD5 is handled at all anymore. The parameter is kept
as static text \"DUMMY\".
2013-02-28 Jan-Oliver Wagner
* src/comm.c (comm_send_md5_plugins): Renamed to comm_send_nvt_info.
* src/comm.h: Updated proto accordingly.
* src/openvassd.c (scanner_thread): Renamed call accordingly.
2013-02-28 Jan-Oliver Wagner
Remove handling of MD5 for NVTs from OTP. Those checksums have
no meaning to the client because the client can not verify
them as it has no access to the actual NVT files.
So, the MD5 could serve as version/change indicator at best, but
that is already redundant with the revisioning in the tags.
The MD5 checksums could be used to determine which plugins
are changed since last contact (provided the client stores them)
in order to use PLUGIN_INFO for getting the changed ones
instead of downloading all. In practice it has shown that
it is simpler to just download all always.
This removes the command SEND_PLUGINS_MD5 from OTP.
* src/comm.c (comm_send_md5_plugins): Remove md5 computations
and rather just send \"DUMMY\" as md5 value for command PLUGINS_MD5
for the time being. Removed answering on SEND_PLUGINS_MD5.
* src/plugs_hash.c, src/plugs_hash.h: Removed.
* COPYING: Removed module plugs_hash.
* src/CMakeLists.txt: Removed handling of plugs_hash.
* src/nasl_plugins.c: Removed include of plugs_hash.h,
2013-02-27 Timo Pollmeier
* tools/greenbone-nvt-sync: Update version number.
2013-02-27 Timo Pollmeier
* tools/greenbone-nvt-sync: Add PRIVATE_SUBDIR and private directory
functionality to RSYNC_DELETE.
2013-02-27 Jan-Oliver Wagner
Post branch version bump.
* CMakeLists.txt: Set to version to 4.0.0 and beta status.
2013-02-22 Michael Wiegand
* src/openvassd.c (main): Update year in copyright notice.
2013-02-20 Michael Wiegand
Post release version bump.
* CMakeLists.txt: Set version to 3.4+beta3.
2013-02-20 Michael Wiegand
Move \"-Werror\" flag to the \"Debug\" build type.
* CMakeLists.txt: Move \"-Werror\" from CMAKE_C_FLAGS to
CMAKE_C_FLAGS_DEBUG to keep it out of the \"Release\" build type.
2013-02-20 Michael Wiegand
* CHANGES: Updated.
2013-02-18 Jan-Oliver Wagner
Preparing the openvas-scanner 3.4+beta2 release.
* CHANGES: Updated.
2013-02-11 Hani Benhabiles
* src/comm.c (send_plug_info): Refactor code to remove fixed size of
string regrouping nvt elements and calculate size dynamically.
Rename variables to be more readable.
2013-02-11 Hani Benhabiles
* src/comm.c (send_plug_info): Escape new lines in script tags when
sending plugin information.
2013-02-07 Timo Pollmeier
* tools/openvas-nvt-sync.in: Will now delete scripts not part of the
feed like greenbone-nvt-sync when using rsync, except for a private
directory. These scripts should be migrated by calling the sync script
with option --migrate-to-private.
(): Add new command line option --migrate-to-private.
(IFS0, NEWLINE, PRIVATE_SUBDIR, OPENVAS_KEY_ID, RSYNC_DELETE, CMD_GPG):
New variables.
(do_help): Add new option and variable PRIVATE_SUBDIR.
Change indentation.
(chk_system_tools): Add warning if GPG is not found.
(do_rsync): Add RSYNC_DELETE to delete files not part of the feed and
prompt for migration if no private directory is found.
(do_migrate_to_private): New function to migrate files without
an OpenVAS signature to a private subdirectory.
(check_signature): New helper function to check if a file has an
OpenVAS signature.
(move_file): New helper function to move files.
2013-02-06 Jan-Oliver Wagner
* tools/greenbone-nvt-sync: Extended license from GPLv2 to
GPLv2+. Removed special exception for .nes binaries. These will
from now on be deleted.
2013-01-25 Matthew Mundell
* src/nasl_plugins.c (nasl_plugin_add): Revert second plugin_args if
block that I wrongly merged with the first one, and that Jan
subsequently removed. plugin_args is assigned within the first if
block, so it is valid to recheck it for the second block.
2013-01-24 Jan-Oliver Wagner
* src/nasl_plugins.c (nasl_plugin_add): Removed (leftover?)
error message and too early exit. The error message and exit
was executed always when a new NVT (not in cache) is parsed.
2013-01-24 Werner Koch
Improve bug tracking by directing diagnostics to the log file.
* src/openvassd.c: Include openvas_logging.h.
(init_openvassd): Add arg DONT_FORK and call
setup_legacy_log_handler.
(main): Pass DONT_FORK to init_openvassd.
* src/log.c (log_write): Factor most code out to ..
(log_vwrite): new function.
* src/log.h: Add prototype for log_vwrite.
* src/pluginload.c (plugins_reload_from_dir): fflush stdout to not
mess up output to stderr.
2013-01-22 Matthew Mundell
* src/nasl_plugins.c (nasl_plugin_add): Remove NULL initialisation of
nvti which is actually initialised lower down, as this gives the wrong
impression of how the variable will be used. Remove free of nvti before
plugins_args block. Enable free of nvti after plugin_args block and
remove note about crash -- free\'ing twice leads to crashes. Free nvti
in plugin_arg block now that the free before plugin_arg block is gone.
Free nvti in plugin_arg block before reassigning to it, otherwise the
memory will leak. Remove free that follows this reassignment because
the nvti is freed after the plugin block. Merge duplicate plugin_args
block into first one, because having two is just confusing.
2013-01-11 Jan-Oliver Wagner
* src/ntp_11.c: Resolved some overlong lines.
2013-01-11 Jan-Oliver Wagner
* src/attack.c (launch_plugin): Retrieve src of nvti directly.
* src/plugs_hash.c (plugins_send_md5): Retrieve src of nvti directly.
2013-01-11 Jan-Oliver Wagner
* src/attack.c (launch_plugin): Fix wrong reference. name was
truncated in rare cases.
2013-01-07 Michael Wiegand
* tools/greenbone-nvt-sync: Add support for proxy authentication.
Patch submitted by Christian Schmidt.
2013-01-06 Jan-Oliver Wagner
Third part towards clean separation of NVTI into the NVTI Cache:
Copyies are returned, so these need to be free\'d.
* src/nasl_plugins.c (nasl_plugin_add, nasl_plugin_launch): Free the
nvti object once it is not needed anymore.
* src/ntp_11.c (_find_plugin): Free the nvti object once it is not
needed anymore.
(ntp_1x_send_dependencies): The filename needs to be free\'d because
it was strdup\'ed before. Free the nvti object once it is note
needed anymore.
* src/attack.c (launch_plugin): We need the oid later on and have
many exits, so better store it locally without need to free it.
Free the nvti.
* src/plugs_hash.c (plugins_send_md5): Free the nvti object.
* src/oval_plugins.c (oval_plugin_add): Free the nvti object.
* src/comm.c (send_plug_info): Free the nvti object.
* src/pluginscheduler.c (hash_add): Free the nvti object.
(plugins_scheduler_init): Added safety heck for missing OID.
2013-01-06 Jan-Oliver Wagner
Second part towards clean separation of NVTI into the NVTI Cache:
All remaining access to NVTI object via \"NVTI\" is replaced
by access via OID.
The only exception is the parsing code for the description
block where the OID is not necessarily known at the beginning
and therefore can not be relied on.
* src/nasl_plugins.c (nasl_plugin_add): Remove the NVTI object
after we added it for parsing the NASL file.
(nasl_plugin_add): Use OID instead of NVTI.
(nasl_plugin_launch): Use OID instead of NVTI. Fix setting of
\"name\" and \"preferences\".
* src/ntp_11.c (_find_plugin, ntp_1x_send_dependencies): Use OID
instead of NVTI.
* src/attack.c (launch_plugin): Use OID instead of NVTI.
* src/pluginlaunch.c (plugin_launch): Use OID instead of NVTI.
* src/plugs_hash.c (plugins_send_md5): Use OID instead of NVTI.
* src/comm.c (send_plug_info): Use OID instead of NVTI.
* src/pluginscheduler.c (hash_add, plugins_scheduler_init): Use OID
instead of NVTI.
2013-01-06 Jan-Oliver Wagner
First part towards clean separation of NVTI into the NVTI Cache:
Plugin arg_list are provided with explicit OID element.
And whereever only the OID is required, it is directly retrieved
instead via NVTI.
* src/pluginlaunch.c (update_running_processes): Use OID element
directly instead of NVTI.
* src/comm.c (plugin_send_infos, _get_plug_by_oid): Use OID element
directly instead of NVTI.
2013-01-04 Jan-Oliver Wagner
* src/pluginscheduler.c (plugins_scheduler_init): Fixed a
memleak.
2012-11-09 Michael Wiegand
* doc/CMakeLists.txt: Remove configuration no longer necessary for
out-of-source builds.
2012-10-26 Michael Wiegand
Post release version bump.
* CMakeLists.txt: Set version to 3.4+beta2.
2012-10-26 Michael Wiegand
Preparing the openvas-scanner 3.4+beta1 release.
* CHANGES: Updated.
2012-10-26 Michael Wiegand
* CMakeLists.txt: Update CPACK_SOURCE_IGNORE_FILES.
2012-10-26 Michael Wiegand
* INSTALL: Update instructions to use out-of-source building, remove
outdated information.
2012-10-26 Michael Wiegand
Update \"doc\" and \"doc-full\" targets for out-of-source builds.
* doc/CMakeLists.txt: Update commands and targets to work with
out-of-source builds.
* doc/Doxyfile.in: Updated to work with out-of-source builds.
* doc/Doxyfile_full.in: Harmonized with Doxyfile.in.
2012-10-25 Jan-Oliver Wagner
* src/pluginscheduler.c (hash_link_destroy): Closed memleak.
2012-10-25 Jan-Oliver Wagner
* src/pluginscheduler.c (hash_add): Closed memleak. Thanks to Felix
Wolfsteller for spotting.
2012-10-23 Jan-Oliver Wagner
* INSTALL: Updated for upcoming release.
2012-10-23 Jan-Oliver Wagner
* CHANGES: Prepared for soon release of first 3.4 beta.
2012-10-08 Jan-Oliver Wagner
* src/pluginscheduler.c (plugins_scheduler_init): Removed the
cleverness feature to enable ACT_SETTINGS that were explicitely
disabled. This behaviour is too clever for its own good.
This means that clients can not rely on this behaviour anymore
and must select the NVTs with corresponding care from now on.
2012-10-01 Michael Wiegand
* src/openvassd.c (main): Add command line switch to exit once the NVT
cache has been initialized or updated.
2012-09-10 Thomas reinke
* src/comm.c (send_plug_info): Fixed SIGSEGV coredump that would
occur if no family specified in a nasl script (would core dump
if client connected and requested complete nasl test list)
2012-09-07 Jan-Oliver Wagner
* src/ntp_11.c (ntp_1x_send_dependencies): Use str2arglist
directly instead of plug_get_deps.
* src/pluginscheduler.c (hash_add, plugins_scheduler_init):
Use str2arglist directly instead of plug_get_
*.
2012-07-19 Michael Meyer
* src/openvassd.c:
store.h was deleted in r13728. So don\'t include it.
2012-07-19 Matthew Mundell
Add new OTP version 1.1 which is like 1.0 but sends less info to the
client initially. Patch by Jan-Oliver Wagner.
* src/comm.c (comm_init): Add OTP/1.1 case.
* src/openvassd.c (scanner_thread): Skip sending some of the init info for
OTP > 1.0.
2012-07-18 Jan-Oliver Wagner
* src/openvassd.c (deny_severity, allow_severity): Removed. Global
vars are never used.
2012-07-16 Jan-Oliver Wagner
Removed built-in logfile rotation. It is not a good idea to try
to circumvent system enviroment technology for logrotate.
* src/log.c (MAX_LOG_SIZE_MEGS, rotate_log_file): Removed.
(log_init): Removed call of rotate_log_file).
2012-07-13 Jan-Oliver Wagner
* src/comm.c (comm_send_preferences): Removed deprectated prefs sind 3.0.
2012-07-12 Jan-Oliver Wagner
* src/nasl_plugins.c, src/oval_plugins.c: Replace calls
of store_load_plugin by subsequent calls of nvticache_get
and plug_create_from_nvti_and_prefs.
2012-07-12 Jan-Oliver Wagner
Use nvticache API instead of store_
* API in a first step.
Now it is mandatory that a cache directory really exists.
* src/nasl_plugins.c (nasl_plugin_add): Replace use of store_
API by nvticache API.
* src/oval_plugins.c (oval_plugin_add): Replace use of store_
API by nvticache API.
* src/openvassd.c (init_openvassd): Replaced init via store_
by direct nvtichache calls. Make it mandatory that a
cache directory exists. Fallback of nvi directory not
used anymore.
* CMakeLists.txt: Increase dependency to openvas-libaries
to 6.0.0.
2012-07-10 Jan-Oliver Wagner
Post branch version bump.
* CMakeLists.txt: Set to version to 3.4.0 and beta status.
2012-04-24 Michael Wiegand
Post release version bump.
* CMakeLists.txt: Set version to 3.3.2.
2012-04-24 Michael Wiegand
Sat May 12 14:00:00 2012 bitshufflerAATTopensuse.org
- Updated to 3.3.1
* The CMake infrastructure has been cleaned up to ensure that compilation with
modern gccs works.
* The greenbone-nvt-sync script has been updated.
* OpenVAS Scanner now requires at least glib 2.16 and gnutls 2.2, matching the
requirements of OpenVAS Libraries.
* New scanner preference \"reverse_lookup\", defaulting to \"no\" (the previous
behaviour)
* For network wide scanning, mandatory keys are ignored.
* Don\'t start the second scan phase when network scan is enabled and
user requests \"stop\" during the first phase.
* Send an ERRMSG to the client when terminating a process.
* Furter improvements to the build system.
Sat Nov 12 13:00:00 2011 bitshufflerAATTopensuse.org
- Updated to 3.3+beta2
* NVT management code has been updated to reflect the updated openvas-libraries
API.
* The optional use of the external tool \"ovaldi\" has been made more secure.
* OpenVAS Scanner now uses UTC internally.
* The greenbone-nvt-sync script has been updated.
* Changed: Do not force execution of ACT_INIT category.
* Fixed: A number of potential resource leaks.
* Fixed: A number of compiler warnings when compiling with gcc 4.6.
* Fixed: Usage of the mktemp template in openvas-nvt-sync.
* Removed: Support for shared sockets.
* New: The scanner options \"network_scan\" and \"report_host_details\" have been
added to the default scanner options.
Fri Nov 4 13:00:00 2011 bitshufflerAATTopensuse.org
- Updated to 3.2.5
* The optional use of the external tool \"ovaldi\" has been made more secure.
Thu Aug 25 14:00:00 2011 crrodriguezAATTopensuse.org
- Fix build.
Wed Jun 8 14:00:00 2011 bitshufflerAATTopensuse.org
- Updated to 3.2.4
* Fixed: Two potential resource leaks.
* Fixed: A number of compiler warning when compiling with gcc 4.6.
* Fixed: Usage of the mktemp template in openvas-nvt-sync.
Mon Apr 11 14:00:00 2011 bitshufflerAATTopensuse.org
- Updated to 3.2.3
* Fixed: Three potential resource leaks.
* Fixed: Generation of code documentation.
* Updated: Feed synchronization scripts.
* Changed: The openvas-nvt-sync script will now perform the initial feed
synchronization via HTTP instead of rsync.
* Changed: The openvas-nvt-sync script will now default to synchronize into the
NVT directory used by the OpenVAS Scanner instead of the one defined at
compile time.
Wed Feb 23 13:00:00 2011 bitshufflerAATTopensuse.org
- Updated to 3.2.2
* The last bashism has been removed from the openvas-nvt-sync synchronization
script.
* The greenbone-nvt-sync script now logs additional information during
synchronization.
* An unimplemented and superfluous function declaration has been removed.
* The openvassd man page has been updated.
* The build environment has been consolidated.
* The greenbone-nvt-sync script has been improved.
* OpenVAS Scanner now sets a default value for the \"unscanned_closed\"
preference.
Fri Feb 4 13:00:00 2011 bitshufflerAATTopensuse.org
- Updated to 3.2.0
* The sync scripts have been updated.
* OpenVAS Scanner now uses pkg-config to find libraries.
* Installation of the openvas-services file has been moved to openvas-libraries.
* Filesystem Hierarchy Standard (FHS 2.3) compliance has been improved.
Wed Jan 26 13:00:00 2011 bitshufflerAATTopensuse.org
- Updated to 3.1.99.2
* Improved output of --version
* Comprehensive code cleanup
* Binary (.nes) plugins we moved to libraries and turned into builtin
NASL methods.
* Removed handling of binary plugins as we don\'t want to have them ever
again.
* Added preferences for the vhost feature so that clients get them
and can offer them to the user. In other words: unhide the vhost feature.
* Default port is now 9391 where the OpenVAS Manager expects the
Scanner by default.
* Command line options \"--dump-cfg\" and \"--gen-config\" are removed.
* openvassd does not need anymore a \"openvassd.conf\" file. It uses
its defaults and a possibly present conf-file can overwrite settings.
* openvas-mkcert got a additional switch \"-f\" to force overwriting
certificates.
* openvas-mkcert does not create a openvassd.conf anymore as it shares
the defaults with openvassd.
Mon Dec 20 13:00:00 2010 bitshufflerAATTopensuse.org
- Updated to 3.1.99.1
* Debug messages during the use of shared sockets are no longer logged unless
requested during compile time.
* A number of compiler warnings from gcc 4.4 has been addressed.
* Hardening flags are now enabled during compile time to increase code quality.
* openvas-scanner now listens on an IPv4 socket by default, even when IPv6
support is present.
Mon Dec 6 13:00:00 2010 bitshufflerAATTopensuse.org
- Updated to 3.1.98.2
* A compiler warning regarding an incorrect function declaration in
openvas_tcp_scanner has been addressed.
* A compiler warning regarding incorrect pointer casts in find_service has been
addressed.
* A compiler warning regarding the type of a return value in openvassd has been
addressed.
* An issue which caused openvassd to refuse to scan certain hosts even when
permitted by rules has been fixed.
* An issue which caused openvassd to abort the scan process prematurely under
certain circumstances has been fixed.
Fri Dec 3 13:00:00 2010 bitshufflerAATTopensuse.org
- Updated to 3.1.98.1
* Network level scan support.
* Removed unnecessary log entries.
* Include paths have been updated to match with openvas-libraries 4.0.
Sun Oct 31 13:00:00 2010 bitshufflerAATTopensuse.org
- Updated to 3.1.1
* The code documentation infrastructure has been improved.
* The license situation of the individual source code files has been clarified.
* Obsolete support for systems without entropy generation has been removed.
* A bug which caused the client certificate generation to fail under certain
circumstances has been fixed.
Wed Jul 14 14:00:00 2010 bitshufflerAATTopensuse.org
- Updated to 3.1.0
* Support for storing scanner passwords in plaintext has been removed.
* Support for dropping privileges in NASL and NES NVTs had been added.
* Support for scanning virtual web hosts has been added.
* The handling of NVTs with an invalid timestamp has been improved.
* A bug in the openvas-nvt-sync script which prevented synchronization via http
under certain circumstances has been fixed.
* Support for retrieving the version of the NVT collection has been added to the
openvas-nvt-sync and greenbone-nvt-sync scripts.
* Support for soft pausing of scans has been added.
* Support for automatically installing generated certificate file has been added
to the openvas-mkcert-client script.
* The obsolete C based NVT \"ssl_cipher\" has been removed from the
openvas-scanner module. It has been replaced by the NASL implementation
\"secpod_ssl_ciphers.nasl\".
* Support for storing an uploaded preference file in memory instead of on disk
has been added.
Fri Jul 2 14:00:00 2010 bitshufflerAATTopensuse.org
- Updated to 3.1.0.rc3
* Support for storing scanner passwords in plaintext has been removed.
Mon Jun 28 14:00:00 2010 bitshufflerAATTopensuse.org
- Updated to 3.1.0.rc2
* The support scripts for feed synchronization have been updated.
* Support for dropping privileges in NASL and NES NVTs had been added.
* Support for scanning virtual web hosts has been added.
* The handling of NVTs with an invalid timestamp has been improved.
Wed May 19 14:00:00 2010 bitshufflerAATTopensuse.org
- Updated to 3.1.0.rc1
* A bug in the openvas-nvt-sync script which prevented synchronization via http
under certain circumstances has been fixed.
* The build environment for C based NVTs has been cleaned up.
* Code formatting has been improved in a number of files to match the coding
style.
* Support for retrieving the version of the NVT collection has been added to the
openvas-nvt-sync and greenbone-nvt-sync scripts.
* Support for soft pausing of scans has been added.
* Support for automatically installing generated certificate file has been added
to the openvas-mkcert-client script.
* The obsolete C based NVT \"ssl_cipher\" has been removed from the
openvas-scanner module. It has been replaced by the NASL implementation
\"secpod_ssl_ciphers.nasl\".
* Support for storing an uploaded preference file in memory instead of on disk
has been added.
Mon Mar 22 13:00:00 2010 bitshufflerAATTopensuse.org
- Updated to 3.0.2
Fri Mar 12 13:00:00 2010 felix.wolfstellerAATTintevation.de
- Added greenbone nvt sync script.
Fri Feb 5 13:00:00 2010 felix.wolfstellerAATTintevation.de
- Reenabled Scanner Certificate Creation with openvas-mkcert
at install time, if no certificate is present already.
Tue Jan 26 13:00:00 2010 bitshufflerAATTopensuse.org
- Updated to 3.0.1
Sun Jan 24 13:00:00 2010 bitshufflerAATTopensuse.org
- Added %ghost entries for log files.
- Added /etc/sysconfig/openvas-scanner for configuration
Fri Jan 8 13:00:00 2010 felix.wolfstellerAATTintevation.de
- Added patch from Vladimir Nadvornik fixing wrong NVT directory
in openvassd.conf on 64-Bit systems.
Mon Dec 21 13:00:00 2009 felix.wolfstellerAATTintevation.de
- Added logrotate- dependency.
Fri Dec 18 13:00:00 2009 felix.wolfstellerAATTintevation.de
- Updated to version 3.0.0
Sun Dec 6 13:00:00 2009 felix.wolfstellerAATTintevation.de
- Added sysconfdir/openvas/gnupg directory to files section.
- Install logrotate and init script to locations that match the package name (suse conditioned).
- Updated to 3.0.0.rc1
Wed Dec 2 13:00:00 2009 felix.wolfstellerAATTintevation.de
- Added and install configuration file, uncommented cache and log directories.
Tue Jun 2 14:00:00 2009 bitshufflerAATTopensuse.org
- Updated to 2.0.2
|
|
|
