- ok'ed frueauf
- Add MESSAGE about local state dir
Local security checks over SSH : Nessus can now log into the remote hosts
to determine their patch levels and missing updates
A rewritten internal knowledge base API : the new knowledge base API makes
KB access faster and lets the plugins store any amount of data
An improved internal communication between the various nessusd processes, thus
reducing the overhead it takes to handle the results of the plugins and pass
them to the client
An improved plugin scheduler which reduces the time Nessus needs to organize
the order in which plugins should be launched
Sensitive scripts (which can execute commands over SSH) are cryptographically
signed
Version 3.2.1 is a maintenance release and contains bugfixes to v3.2.0 only.
BUGFIX: PGP Messages cause pop3filter to hang
BUGFIX: Invalid read of free()'d memory caused by parsing multi-line headers
BUGFIX: SQLite driver fails to call PRAMA specified in dspam.conf
BUGFIX: MySQL generates DUPLICATE KEY errors on simultaneous inserts
BUGFIX: Memory leaks in dspam_clean
BUGFIX: dspam_clean crashes with SQLite driver
BUGFIX: Signatures include leading whitespace when in loose match
BUGFIX: Some versions of PostgreSQL don't support PQfreemem()
BUGFIX: Memory mishandling in PostgreSQL driver
BUGFIX: Message delimiters mangled when processing a PGP signed message
BUGFIX: --with-delivery-agent configure option no longer present
BUGFIX: Default log directory /var/log not writable by some installs
BUGFIX: Man page installation doesn't prefix with $(DESTDIR)
BUGFIX: Emails ending with http:// cause invalid memory read
Changes:
- Added CLIENT and SERVER variables to VirusAction script environment.
- Even better logging for network errors.
- Print out clamsmtp version in debug logs
- Allow configuration of server keep alives (NOOPs). Default to none
Bugs fixed in 1.9.3:
* Bug introduced by 1.9:
- Dependency tracking using mode "dashmstdout" or "dashXmstdout" did
not work for libtool objects compiled with --tag (i.e., compiled
with Libtool 1.5 or later). The compilation would succeed, but
`depcomp' would emit a warning and not output any dependency
information.
* Long standing bugs:
- Ignore comments from augmented variables, so that
FOO = foo # bar
FOO += baz
no longer results in `FOO = foo # bar baz'.
- `install-sh -d a/b/' failed to create `a/b/' because of the trailing `/'.
- _PROGRAMS now always create programs. Before 1.9 it would
mistakenly create a libtool library if the name of the program
ended in `.la'. Between 1.9 and 1.9.2 a program with such a name
would fail to build because half the code was assuming a program
was being built, while the other half was considering a library...
- `compile' now handles `*.obj' objects.
- `aclocal' recognizes AC_DEFUN_ONCE.
* Noteworthy manual updates:
- LIBOBJS: more documentation and an example setup.
- Libtool Convenience Libraries: show how to force the linker selection.
- Extending: more comments about install-data-hook vs install-exec-hook.
- Clean: document -local targets.
to ${PREFIX}/libexec/cgi-bin; install also couple more files same way
as PHP4
Of particular note is that CLI ignores setting of register_argc_argv
(treats as if it would be On), so it's no longer necessary to do anything
special for Pear packages to work. g/c MESSAGE warning about the Pear issue.
