Releases: greenbone/gvm-libs
OpenVAS Libraries v9.0.3
This is the third maintenance release of the openvas-libraries 9.0
module for the Open Vulnerability Assessment System 9 (OpenVAS-9).
Many thanks to everyone who contributed to this release:
Hani Benhabiles, Christian Fischer, Matt Mundell, Juan Jose Nicola,
Timo Pollmeier and Michael Wiegand.
Main changes compared to 9.0.2:
- Minimum required openvas-smb version to have WMI support has been raised
to 1.0.4. - An issue related to a value inserted in nvticache has been addressed.
- Support to specify a regex-based mandatory key has been added.
- Nvticache cleanup has been improved.
- Handling of duplicate nvt warning has been improved.
- An issue related to the support for radcli library has been addressed.
GVM Libraries v1.0+beta1
This is the first beta release of the gvm-libs module 1.0 for the Greenbone
Vulnerability Management (GVM) framework.
It derives from the former openvas-libraries module. Any elements of the
old module that were used by OpenVAS Scanner only, were moved into the
module openvas-scanner. Also the protocol OMP was renamed to GMP.
Apart from this, the module covers a number of significant advances
and clean-ups compared to the previous openvas-libraries module.
Many thanks to everyone who has contributed to this release:
Hani Benhabiles, Francesco Colista, Albrecht Dress, Christian Fischer, Matt
Mundell, Juan Jose Nicola, Timo Pollmeier, Bjoern Ricks, Jan-Oliver Wagner
and Michael Wiegand.
Main changes compared to openvas-libraries 9.0:
- Many files have been moved to this new module from openvas-libraries
and other files have been renamed to match the new terminology (libgvm_*).
Also the default installation paths switched from "openvas" to "gvm"
and thus any include directive needs to be adapted in depdending source codes. - Additionally OMP (OpenVAS Management Protocol) has been renamed to GMP
(Greenbone Management Protocol), including library names, include files
and data types. - Function to handle IP connections has been removed since the scanner does
only unix socket connections. - Handling of vhosts and multiple domain names to one single IP have
been added. - Handling of hostnames that resolve to multiple IPs has been added.
- Handling of Unix and unknown socket types have been added to
"sockaddr_as_str". - Several function to handle the kb content have been added.
- A function to ping gvm has been added.
- New compress function with support for gzip header has been added.
- Access to XML entity properties has been improved.
- Host, IP address and port in gvm_server_open_verify are verified for sane
values. - Large file support when building with GPGME has been enabled.
- The symbol separator in a log message is now configurable.
- As all modules use the same log functions, legacy log functions have
been removed. - Old TODOs have been resolved.
- Documentation has been updated.
- Code readability has been improved by completing coverage of doc-strings.
- The CMake building process was improved.
- An issue template has been added.
- Several memory management issues have been addressed.
- Cmake macro file for code indentation has been removed.
- Minimum required version of glib/gio have been raised to 2.42.
- Minimum required version of zlib has been raised to 1.2.8.
- Minimum required version of cmake has been raised to 3.0.
- Minimum required version of libssh has been raised to 0.6.0.
- Minimum required version of libldap has been raised to 2.4.44.
OpenVAS Libraries v8.0.10
For detailed code changes, please visit
https://github.com/greenbone/gvm-libs/commits/openvas-libraries-8.0
or get the entire source code repository and view log history:
$ git clone https://github.com/greenbone/gvm-libs.git
$ cd gvm-libs && git checkout openvas-libraries-8.0 && git log
This is the tenth maintenance release of the openvas-libraries 8.0 module for
the Open Vulnerability Assessment System 8 (OpenVAS-8).
Many thanks to everyone who has contributed to this release:
Hani Benhabiles, Michael Wiegand and Juan Jose Nicola.
Main changes compared to 8.0.9:
- An issue which caused a segmentation fault due to special characters in
passwords for SMB login has been addressed. - Redis performance has been improved reducing the number of queries during
a scan. - Handling of unknown or invalid signatures has been improved.
OpenVAS Libraries v9.0.2
This is the second maintenance release of the openvas-libraries 9.0
module for the Open Vulnerability Assessment System 9 (OpenVAS-9).
Many thanks to everyone who contributed to this release:
Hani Benhabiles, Francesco Colista, Juan José Nicola, Timo Pollmeier and Björn
Ricks, Michael Wiegand, Jan-Oliver Wagner, Matt Mundell and Albrecht Dreß.
Main changes compared to 9.0.1:
- Several memory management issues have been addressed.
- NASL cryptography support has been updated.
- Signature handling has been improved.
- Child process signal handling has been improved.
- Support for retrieving the prompt during keyboard-interactive SSH
authentication has been added. - An issue which caused a segmentation fault in the NASL command
'get_port_state' under certain circumstances has been addressed. - An issue which caused incorrect NTLMSSP hashes under certain circumstances has
been addressed. - Handling of connections closed by the client has been improved.
- The default connection timeout when detecting services has been increased.
- The handling of a number of frequently requested knowledge base keys has been
improved. - More context to NVT/NASL related log messages has been added.
- An issue which caused an error during close() call on UDP sockets from a NASL
script has been addressed. - Support for retrieving vendor version information through a NASL command has
been added. - Handling of SIGPIPE from hiredis in case of a socket disconnect has been added.
- Handling of Redis connection error has been improved.
- An issue which caused several running processes on scanned host under
certain circumstances has been addressed. - Support for ldap search during the authentication process has been added.
- Simplify scanner signatures verification. NVT's detached signatures were
replaced with a digitally signed file with the hash list of the NVTs. - Full nvticache has been moved from .nvti files to Redis
- Support for radcli library has been added.
- Cleanup and handle of the kb content has been improved.