kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/security/libnasl/distinfo

8 lines
362 B
Text
Raw Normal View History

Update to version 2.2.9 ok <frueauf>, the MAINTAINER. changes: 2.2.9: ====== - nessus-mkcert-client: - Make sure that the user calling nessus-mkcert-client is root - nessus-libraries: - Fixed a bug in the PCAP handler which in turn should fix synscan.nes - nessus: - Fixed a possible memory corruption issue when creating a list of plugins to launch - Fixed a corruption of the .nessusrc files when receiving some plugin prefs ending by a space - nessus-fetch: - Make sure that every request (including the proxy CONNECT request) is done with the user-specified user-agent. - nessus-plugins: - Fixed a banner encoding problem in nessus_tcp_scanner and find_service - Fixed a possible deadlock in synscan - nessusd: - Avoid a deadlock when waiting for a sub process to die 2.2.8: ====== - nessusd: - Make sure that plugins of type ACT_INIT and ACT_SETTINGS are always enabled during a scan - Display more error verbose error messages when it's impossible to load a .nes plugin - Fixed a harmless memory reallocation problem which would truncate a very long preference name - nessus-libraries: - Fixed a possible memory corruption when forwarding data from a process to another - libnasl: - 'a = b + c ++' would not work as expected - fixed a memory allocation problem when split() is passed an argument of the wrong type
2006-12-17 22:06:22 +01:00
$NetBSD: distinfo,v 1.22 2006/12/17 21:06:23 salo Exp $
Initial import of libnasl, a Nessus Attack Scripting Language library. Based on work Hubert Feyrer did for some former version.
2000-07-30 13:11:25 +02:00
Update to version 2.2.9 ok <frueauf>, the MAINTAINER. changes: 2.2.9: ====== - nessus-mkcert-client: - Make sure that the user calling nessus-mkcert-client is root - nessus-libraries: - Fixed a bug in the PCAP handler which in turn should fix synscan.nes - nessus: - Fixed a possible memory corruption issue when creating a list of plugins to launch - Fixed a corruption of the .nessusrc files when receiving some plugin prefs ending by a space - nessus-fetch: - Make sure that every request (including the proxy CONNECT request) is done with the user-specified user-agent. - nessus-plugins: - Fixed a banner encoding problem in nessus_tcp_scanner and find_service - Fixed a possible deadlock in synscan - nessusd: - Avoid a deadlock when waiting for a sub process to die 2.2.8: ====== - nessusd: - Make sure that plugins of type ACT_INIT and ACT_SETTINGS are always enabled during a scan - Display more error verbose error messages when it's impossible to load a .nes plugin - Fixed a harmless memory reallocation problem which would truncate a very long preference name - nessus-libraries: - Fixed a possible memory corruption when forwarding data from a process to another - libnasl: - 'a = b + c ++' would not work as expected - fixed a memory allocation problem when split() is passed an argument of the wrong type
2006-12-17 22:06:22 +01:00
SHA1 (libnasl-2.2.9.tar.gz) = b3d9015a54317f6dd66e4148c51e1783534f3b61
RMD160 (libnasl-2.2.9.tar.gz) = c7f1d5ebd080ed60cb79838601ada8617ec4b9ec
Size (libnasl-2.2.9.tar.gz) = 366960 bytes
Update libnasl and nessus{-core,-libraries,-plugins} to 2.0.6a. This also includes changes offered in pr pkg/18734 and pr pkg/20796 submitted by Adrian Portelli. Thanks & Sorry that it took that long to pick them up. 2.0.6 : . changes by Renaud Deraison (deraison@cvs.nessus.org) - Support for the keyword 'default' as a port range in nmap_wrapper.nes - Fixed a zombie issue in nmap_wrapper.nes - Fixed various issues which could allow a NASL script to crash the NASL interpretor - Improved the process management in find_services.nes 2.0.5 : . changes by Renaud Deraison (deraison@cvs.nessus.org) - Fixed a rare race condition which may make the scan hang - Fixed SMB related issues - Entering "default" as the port range will make nessusd scan the ports listed in the Nessus services file. - Even more sigs in find_services.nes . changes by Julien Bordet (zejames@greyhats.org) - Added over 3,000 signatures to smtpscan.nasl (thanks to the data provided by the Nessus team) 2.0.4 : . changes by Renaud Deraison (deraison@cvs.nessus.org) - fixed the SIGCHLD handler which would not work properly and leave zombies on the system - fixed a race condition when testing a great number of hosts which would cause a testing process to slow down a whole audit or even hang it totally - When a great number of host names is passed to nessusd as a target, they are resolved by chunks of 64 instead of trying to resolve everything then starting the test - RedHat 9 support (in spite of their attempt to make their distro incompatible with everyone else) . changes by Gabriel L. Somlo <somlo@acns.colostate.edu> - The nessus can save the reports to stdout and read them from stdin 2.0.3 : - fixed a compilation error which would prevent find_services from working properly 2.0.2 : . changes by Michel Arboi (arboi@alussinan.org) - NASL port of smtpscan (original Perl program by Julien Bordet) - Nasty bug made loop stop prematurely on rare cases . changes by Renaud Deraison (deraison@cvs.nessus.org) - Re-wrote webmirror.nasl from scratch. The new version has a real parser built-in and is much faster - Added checks for older Microsoft Advisories - SMB plugins now use NTMLv1 authentication, ie: they don't send passwords in clear text over the network any more - Added new crypto functions, taken from samba, in libnasl/ - Repaired detached scans - Fixed IP ranges notation (10.1.1-9.1-254 did not work any more) - Minor bug fixes and enhancements : #234, #233, #230, #229, #228, #225, #222, #220, #218, #217, #216, #215, #213, #212, #211, #207, #206, #205 - nessus-update-plugins properly calls chown under FreeBSD, no matter how many plugins there are - find_services.nes recognizes even more protocols . changes by Xueyong Zhi <zhi@mail.eecis.udel.edu> - Added NTLMv2 authentication . changes by Frank Migge (frank.migge@oracle.com) - nessus-mkcert-client creates the auth/rules file properly 2.0.1 : . changes by Renaud Deraison (deraison@cvs.nessus.org) - Minor bugfixes (bugs #180, #183, #185, #188, #189, #195, #197, #202, #203, #204) - Fixed the "pink" graphical report issue - Added http keep-alive support in the CGI related plugins - Fixed a bug in the function get_kb_list() which would not always work properly - Fixed an issue where in some situations, some HTTP services would not be tested for flaws if they have not been port-scanned first - Added new signatures in find_services.nes . changes by Stephen Friedl (steve@unixwiz.net) - Fixed bugs and warnings in nessus-libraries 2.0.0 : . changes by Michel Arboi (arboi@alussinan.org) - NASL2 : Implement >!< "strings don't match" operator - NASL2 : fixed a vicious case of freed memory copy. . changes by Renaud Deraison (deraison@cvs.nessus.org) - Fixed a small bug in the plugin scheduler - Ported to IRIX - Several small bugfixes . changes by Xueyong Zhi <zhi@mail.eecis.udel.edu> - Added nmap_osfingerprint 1.3.4 : . changes by Renaud Deraison (deraison@cvs.nessus.org) - Re-written the process manager for the hosts - Lots of bugfixes in the plugins text store manager - New port scanner "synscan" which uses the RTT of the packets to do its job. - Fixed several small issues in nasl and nessusd (bug fixes, code cleanup) - Added cryptographic hashing functions in NASL - Added the function get_kb_list() which returns the content of a KB without forking the plugin - Updated the manpages of nessusd and nasl . changes by Michel Arboi (arboi@alussinan.org) - Fixed scanner_get_port() when running in standalone mode - Fixed possible uninitiliazed memory issues in libnasl - Started to write the NASL2 reference guide (to be found in libnasl/doc/) 1.3.3 : . changes by Michel Arboi (arboi@alussinan.org) - Implement bit xor, logical & aithmetic right shift, power - Fix operator precedence - Added new NASL functions . changes by Renaud Deraison (deraison@cvs.nessus.org) - The plugin texts are not loaded in memory any more, thus reducing the consumption of the nessus daemon of two megs. This also speeds up the loading of nessusd. - Fixed a bug in the plugins scheduler (if optimizations were enabled, the scan would sometime hang) - Added a new NASL function (int()) - Fixed strings substraction to handle null values properly - find_services.nes runs in parallel mode, for improved speed - new plugin (synscan) which should perform well against firewalled hosts (computes the RTT before the scan) 1.3.2 : . changes by Renaud Deraison (deraison@cvs.nessus.org) - Added fixes so that nessus-core/nessusd/pluginscheduler.c compiles with the latest version of GCC - Fixed a bug in nessus-libraries/libnessus/bpf_share.c : a timer would not be reset, causing plugins which call bpf_next() to sometimes crash - Set the timer of bpf_share.c to a much lower value, thus making it work much better - Improved tcp_ping() - Fixed two bugs in the plugins scheduler : - If the option "enable dependencies at runtime" is set, it would enable ALL the plugins which are depended on, instead of only those we use ; - In some cases, it may terminate too early, thus preventing a scan from being complete - DESTDIR support 1.3.1 : . changes by Renaud Deraison (deraison@cvs.nessus.org) - Rewrote the plugins scheduler (which determines the order in which the plugins are to be launched). The new one is much more efficient but as a result, it is not possible to accurately determine the order in which the plugins will be ran, so the 'plugin name' in the client is now totally bogus - Fixed various issues with NASL scripts so that they work better with NASL2 - Fixed bugs relative to the creation of icmp and udp packets in nasl - Fixed some fatal bugs in the bpf sharer - NASL scripts do not read /dev/urandom any more, and use time() as a random seed instead. As a result, the loading and execution of nasl scripts if faster on systems where /dev/urandom can be blocking - Fixed the tcp NIDS evasion techniques on BSD systems - Full support for Bugtraq IDs - The HTML reports add links for URLs, and show the ID number of the plugin that issues the report. - Speed up the calls to arg_get_value() by using a hash of the name being searched for. - Changed the licence of NASL2 to the GPLv2 (with the consent of Michel Arboi) . changes by Michel Arboi (arboi@alussinan.org) - Better handling of the arrays in NASL2 . changes by Erik Anderson (eanders@carmichaelsecurity.com) - CVE and bugtraq cross references . changes by Jay (jay@kinetic.org) - Fixed multiple typos in the plugins . changes by Javier Fernandez-Sanguino (jfernandez@germinus.com) - Nessus now ships Hydra 2.2 - Fixed various compilation scritps (see bug#63) 1.3.0 : . changes by Michel Arboi (arboi@alussinan.org) - Use our own nessus-services file (re-generated at first start to include /etc/services and nmap-services) - Added new families of plugins (ACT_KILL_HOST and ACT_END) - Rewrote libnasl . changes by Renaud Deraison (deraison@cvs.nessus.org) - The 'cancel' button of several file selection dialogs is now working - Optimized several plugins : - Web-related checks now use http_recv() instead of recv() - open_priv_sock_tcp() has a lower timeout - RPC related checks now use get_rpc_port(), a function equivalent to libc's getrpcport() but with a much smaller timeout - Decreased the default value of checks_read_timeout from 15 to 5 - Fixed a bug in the plugin selection GUI which would not refresh the list of plugins of a given family properly (bug#3) - Fixed memory leaks in NASL - Fixed a bug in nessusd which would make it leak memory when receiving a SIGHUP (bug#10) - Fixed a compatibility problem with Nmap 3.10ALPHA (bug#11) - Nessus now accepts nmap's U: and T: notation for the port range (bug#5) - Helped Michel Arboi to give the last touches to the new libnasl . changes by Erik Anderson (eanders@pobox.com) - Added CVE and BID links, added urls and removed dead links from the plugins . changes by Michel Scheidell (scheidell@secnap.net) - Improved several SMB-related checks . changes by Rodolfo Baader (rbaader@activesec.biz) - Quotes and apostrophes are properly escaped in the XML output report
2003-06-09 19:01:24 +02:00
SHA1 (patch-aa) = dd13fb7ddaf21f313e392e76138bbb66c7bdfbcb
Update to version 2.2.7 Approved by <frueauf> Changes: - make it work as binary packages, - remove useless MESSAGE files, - add nmap.nasl plugin, not included by default upstream, - make the installation a bit more sane and easier to configure. 2.2.7: ====== Nessus 2.2.7 contains several fixes for bugs which have been found during the 3.x developement process and have been backported to this branch. It also slightly extends the NASL language by adding support for arrays of arrays. We will use this feature in some key plugins (SMB in particular) within 6 months, so you should definitely upgrade to 2.2.7 or 3.0.x. nessus-libraries: - Fixed a NULL pointer dereferencement in the BPF server (this mostly affects OpenBSD and FreeBSD < 5) - The 'service' functions now only deal with the services file provided - with Nessus (instead of using a mix of /etc/services and others) libnasl: - Fixed off-by-one bugs in insstr() and str_replace() which would sometimes prevent these two functions from properly dealing with the last character of a string - Fixed tcp_ping() which was too aggressive and may therefore sometimes miss a live host - Fixed a bug in send() which would not properly validate the value of the 'length' variable - Now handle arrays of arrays - Fixed open_priv_sock_tcp() which would report a successful connection when timing out nessusd: - Properly install the file 'nessus-services' in $prefix/var/nessus/ - Bigger buffer when receiving preferences from the client (to avoid a possible truncation of the plugin list in the future) - Fixed a bug in the preferences parser which would cause nessusd to die on startup when processing a malformed preference file nessus client: - Fixed an unlikely but potential segmentation fault when viewing the report in the GUI - Erase the credentials from memory after having used them (thanks to Sumiut Siddhart for noticing this) plugins: - Fixed several bugs in find_services.c which would not properly set the key Transport/SSL or which may read some data beyond its buffer - Fixed a bad #if/#endif clause in nessus_tcp_scanner.c which prevented it from recomputing the RTT, hence negatively impacting the performance - nmap.nasl has been removed from the main distribution (to use nmap from within Nessus read http://www.nessus.org/documentation/?doc=nmap-usage)
2006-04-25 14:45:57 +02:00
SHA1 (patch-ab) = 8a8b99ce00f298eae8a18741d966a1ee70cbba1c
Reference in a new issue Copy permalink