Skip to content

Releases: greenbone/gvmd

Greenbone Vulnerability Manager v21.4.0

16 Apr 07:49
d8d82b4
Compare
Choose a tag to compare

Added

Changed

  • Move EXE credential generation to a Python script #1260 #1262
  • Clarify documentation for --scan-host parameter #1277
  • In result iterator access severity directly if possible #1321
  • Change SCAP and CERT data to use "severity" consistently #1333 #1357 #1365 #1457 #1476
  • Expect report format scripts to exit with code 0 #1383
  • Send entire families to ospd-openvas using VT_GROUP #1384
  • Limit "whole-only" config families to "growing" and "every nvt" #1386
  • Access current user with an SQL function #1399
  • Refactor modify_config, allowing multiple simultaneous changes #1404
  • Add retry on a deadlock within sql#sql #1460
  • Don't require report format plugin for XML report #1466
  • Wording of Rebuilding NVTs because integrity check failed 1475

Fixed

  • Use GMP version with leading zero for feed dirs #1287
  • Check db version before creating SQL functions #1304
  • Fix severity_in_level SQL function #1312
  • Fix and simplify SecInfo migration #1331
  • Prevent CPE/NVD_ID from being "(null)" #1369
  • Check DB versions before CERT severity updates #1376
  • Add owner checks to report_count queries #1397

Removed

  • Remove solution element from VT tags #886
  • Drop GMP scanners #1269
  • Reduce Severity Classes #1285
  • Removed Severity Classes #1288
  • Remove remaining use of "Severity Class" in where_levels_auto #1311
  • Remove the functionality "autofp" (Auto False Positives) #1300
  • Remove severity type "debug" #1316
  • Remove element "threat" of element "notes" #1324

Greenbone Vulnerability Manager v20.8.1

02 Feb 15:13
Compare
Choose a tag to compare

Added

  • Added ability to enter Subject Alternative Names (SAN) when generating a CSR #1246
  • Add filter term 'predefined' #1263
  • Add missing elements in get_nvts and get_preferences GMP doc #1307
  • Add command line options db-host and db-port #1308
  • Add missing config and target to modify_task GMP doc #1310
  • Add version for NVTs and CVEs in make_osp_result #1335
  • Add check if gvmd data feed dir exists #1360 #1362

Changed

  • Extended the output of invalid / missing --feed parameter given to greenbone-feed-sync #1255
  • The xsltproc binary is now marked as mandatory #1259
  • Check feed status without acquiring lock #1266
  • Use timestamp in automatic sensor task names #1390
  • Replace g_file_test with gvm-libs file tests #1391

Fixed

  • Add dummy functions to allow restoring old dumps #1251
  • Fix delta sorting for unusual filter sort terms #1249
  • Fix SCP alert authentication and logging #1264
  • Set file mode creation mask for feed lock handling #1265
  • Ignore min_qod when getting single results by UUID #1276
  • Fix alternative options for radio type preferences when exporting a scan_config #1278
  • Replace deprecated sys_siglist with strsignal #1280
  • Copy instead of moving when migrating predefined report formats #1286
  • Skip DB check in helpers when main process is running #1291
  • Recreate vulns after sync #1292
  • Add SecInfo case to alert check in MODIFY_FILTER #1293
  • For radio prefs in GMP exclude value and include default #1296
  • Add permission check on host in OS host count #1301
  • Auto delete at the start of scheduling so it always runs #1302
  • Fix create_credential for snmpv3. #1305
  • Remove extra spaces when parsing report format param type #1309
  • Correct arg to alert_uuid #1313
  • Switch result filter column 'task' from task ID to name task name #1317
  • Correct check of get_certificate_info return #1318
  • Fix GMP doc text of active elem for notes and overrides #1323
  • Account for -1 of orphans when deleting permission #1345
  • Move feed object in trash checks to startup #1325
  • Always check for 'All' when deleting selectors #1342
  • Do not inherit settings from deleted users #1328
  • Delete TLS certificate sources when deleting users #1334
  • Fix SQL errors in SCAP and CERT update #1343
  • Check private key when modifying credential #1351
  • Clean up hosts strings before using them #1352
  • Improve SCP username and destination path handling #1350
  • Fix response memory handling in handle_osp_scan #1364
  • Allow config to sync even if NVT family is not available #1366
  • Delete report format dirs last when deleting a user #1368
  • Fix sorting in get_aggregates and its documentation #1375
  • Improve "Failed to find..." messages #1395

Removed

  • Remove DROP from vulns creation #1281

Greenbone Vulnerability Manager v20.8.0

11 Aug 15:22
ac4498c
Compare
Choose a tag to compare

Added

  • Add setting "BPM Dashboard Configuration" #764
  • Faster SecInfo REF retrieval for GET_REPORTS #793
  • Improve performance of GET_REPORTS #801 #811 #817
  • Speed up the HELP 'brief' case #807
  • Faster startup #826
  • Add option --optimize migrate-relay-sensors #827
  • Add host_id filter for tls_certificates #835
  • Allow use of public key auth in SCP alert #845
  • Refuse to import config with missing NVT preference ID #853 #860
  • Add "Base" scan config #862
  • Add setting "BPM Data" #915
  • Automatically load predefined configs from the feed #931 #933 #934
  • Automatically load predefined port lists from the feed #950 #952
  • Automatically load predefined report formats from the feed #968 #970
  • Print UUIDs in --get-users when --verbose given #991
  • Add --get-roles #992
  • Add --rebuild #998
  • Lock a file around the NVT sync #1002
  • Add a delay for re-requesting scan information via osp #1012
  • Add --optimize option cleanup-result-encoding #1013
  • Perform integrity check of VTs after updates #1024 #1035
  • Ensure path of listening UNIX socket exists #1040
  • Add --rebuild-scap option #1051
  • Stop current scheduling of task when permission denied #1058
  • Trim malloc heap after updating cache #1085
  • Handle QUEUED osp scan status. #1113
  • Add time placeholders for SCP path #1164
  • Expand detection information of results #1182
  • Add filter columns for special NVT tags #1199
  • Add currently_syncing for NVTs in GMP get_feeds #1210
  • Add logging for ANALYZE at end of migration #1211
  • Basic systemd, logrotate and config files have been added #1240

Changed

  • Update SCAP and CERT feed info in sync scripts #810
  • Extend command line options for managing scanners #815
  • Try authentication when verifying GMP scanners #837
  • Try importing private keys with libssh if GnuTLS fails #841
  • Extend GMP API for nvt object to carry a explicit solution element #849 #1143
  • Allow resuming OSPd-based OpenVAS tasks #869
  • Require PostgreSQL 9.6 as a minimum #872
  • Speed up the SCAP sync #875 #877 #879 #881 #883 #887 #889 #890 #891 #901
  • Change rows of built-in default filters to -2 (use "Rows Per Page" setting) #896
  • Force NVT update in migrate_219_to_220 #895
  • Use temp tables to speed up migrate_213_to_214 #911
  • Allow "Start Task" alert method for SecInfo events #960
  • New Community Feed download URL in sync tools #982
  • Change setting UUID to correct length #1018
  • Change licence to AGPL-3.0-or-later #1026
  • Count only best OS matches for OS asset hosts #1029
  • Clean up NVTs set to name in cleanup-result-nvts #1039
  • Improve validation of note and override ports #1045
  • The internal list of current Local Security Checks for the Auto-FP feature was updated #1054
  • Simplify sync lockfile handling #1059
  • Do not ignore empty hosts_allow and ifaces_allow #1064
  • Reduce the memory cache of NVTs #1076
  • Sync SCAP using a second schema #1111
  • Use error variable in osp_get_vts_version(). #1159
  • Include unknown preferences when uploading or syncing configs #1005
  • Set the default OSPD unix socket path to /var/run/ospd/ospd.sock #1238
  • The default OSPD unix path is now configurable #1244

Fixed

  • Add NULL check in nvts_feed_version_epoch #768
  • Faster counting in GET_REPORTS when ignoring pagination #795
  • Improve performance of GET_REPORTS #797
  • Consider results_trash when deleting users #800
  • Update to gvm-portnames-update to use new nomenclature #802
  • Escaping correctly the percent sign in sql statements #818
  • Try to get NVT preferences by id in create_config #821
  • Remove incorrect duplicates from config preference migrator #830
  • Update config preferences after updating NVTs #832
  • Fix order of fingerprints in get_tls_certificates #833
  • Fix notes XML for lean reports #836
  • Fix asset host details insertion SQL #839
  • MODIFY_USER saves comment when COMMENT is empty #838
  • Prevent HOSTS_ORDERING from being '(null)' #859
  • Fix result diff generation to ignore white space in delta reports #861
  • Fix resource type checks for permissions #863
  • Fix result_nvt for new OSP and slave results #865
  • Fix preference ID in "Host Discovery" config #867
  • Fix SQL for tickets with overrides #871
  • Fix result_nvt for new OSP and slave results #873
  • Use right format specifier for merge_ovaldef version #874
  • Fix creation of "Super" permissions #892
  • Add tags used for result NVTs to update_nvti_cache #916
  • Apply usage_type of tasks in get_aggregates (9.0) #912
  • Add target's alive test method before starting a scan. #947
  • Set run status only after getting OSP-OpenVAS scan #948 #951
  • Fix get_system_reports for GMP scanners #949
  • Fix QoD handling in nvti cache and test_alert #954
  • Use stop_osp_task for SCANNER_TYPE_OSP_SENSOR #955
  • Add target's reverse_lookup_* options #959
  • Fix "Start Task" alerts by using alert owner #957
  • Fix Verinice ISM report format and update version [#962](htt...
Read more

Greenbone Vulnerability Manager v9.0.1

12 May 17:01
e250176
Compare
Choose a tag to compare

Added

  • Add option --optimize migrate-relay-sensors #827
  • Add host_id filter for tls_certificates #835
  • Allow use of public key auth in SCP alert #845
  • Refuse to import config with missing NVT preference ID #856 #860
  • Add "Base" scan config #862
  • Add setting "BPM Data" #914
  • Add --optimize option cleanup-result-encoding #1014 #1031
  • Add --rebuild #1016
  • Lock a file around the NVT sync #1017
  • Add --rebuild-scap option #1050

Changed

  • Extend command line options for managing scanners #815
  • Update SCAP and CERT feed info in sync scripts #809
  • Try authentication when verifying GMP scanners #837
  • Try importing private keys with libssh if GnuTLS fails #841
  • Allow resuming OSPd-based OpenVAS tasks #869
  • Require PostgreSQL 9.6 as a minimum #872
  • Speed up the SCAP sync #875 #877 #879 #881 #883 #887 #889 #890 #891 #901
  • Change rows of built-in default filters to -2 (use "Rows Per Page" setting) #896
  • Force NVT update in migrate_219_to_220 #895
  • Use temp tables to speed up migrate_213_to_214 #911
  • Add a delay for re-requesting scan information via osp #1009
  • Count only best OS matches for OS asset hosts #1028
  • Clean up NVTs set to name in cleanup-result-nvts #1038
  • New Community Feed download URL in sync tools #1042
  • Do not ignore empty hosts_allow and ifaces_allow #1063

Fixed

  • Consider results_trash when deleting users #799
  • Try to get NVT preferences by id in create_config #821
  • Fix preference ID in "Host Discovery" config #828
  • Fix order of fingerprints in get_tls_certificates #833
  • Update config preferences after updating NVTs #832
  • Fix asset host details insertion SQL #839
  • Fix notes XML for lean reports #836
  • MODIFY_USER saves comment when COMMENT is empty #842
  • MODIFY_PERMISSION saves comment when COMMENT is empty #918
  • Fix result diff generation to ignore white space in delta reports #861
  • Fix resource type checks for permissions #863
  • Fix result_nvt for new OSP and slave results #865
  • Use right format specifier for merge_ovaldef version #874
  • Fix creation of "Super" permissions #892
  • Setup general task preferences to launch an osp openvas task. #898
  • Add tags used for result NVTs to update_nvti_cache #916
  • Apply usage_type of tasks in get_aggregates #912
  • Setup target's alive test setting to launch an osp openvas task #936
  • Remove incorrect duplicates from config preference migrator #940
  • Correct pref ID in migrate_219_to_220 #941
  • Fix alive test. Target's alive test setting has priority over scan config #943
  • Set run status only after getting OSP-OpenVAS scan #948 #951
  • Fix get_system_reports for GMP scanners #949
  • Use stop_osp_task for SCANNER_TYPE_OSP_SENSOR #955
  • Setup target's reverse_lookup_* settings to launch an osp openvas task #958
  • Always use details testing alerts with a report #964
  • Remove extra XML declaration in Anonymous XML #965
  • Fix Verinice ISM report format and update version #962
  • Fix SCP alert authentication and logging #972
  • Accept expanded scheme OIDs in parse_osp_report #983
  • Fix SCAP update not finishing when CPEs are older #985
  • Add user limits on hosts and ifaces to OSP prefs #1032
  • Fix scanner_options not inserted correctly when starting ospd task #1056
  • Fix QoD handling in NVTi cache and sensor scans #1060
  • Fix doc of get_tasks in GMP doc #1065
  • Fix deletion of OVAL definition data #1080

Removed

  • Remove 1.3.6.1.4.1.25623.1.0.90011 from Discovery config (9.0) #847

Greenbone Vulnerability Manager v8.0.2

12 May 16:59
b12d832
Compare
Choose a tag to compare

Added

  • Add setting 'GMP Slave Check Period' #628
  • Command cleanup-report-formats for --optimize option #651
  • Document container tasks in GMP doc #690
  • New columns Ports, Apps, Distance, and Auth in the CSV Hosts report format #734
  • Allow use of public key auth in SCP alert #846
  • Add --rebuild-scap option #1049

Changes

  • Use lower case for new style DELETE responses #664
  • Check and create default permissions individually #672
  • Add -f arg to sendmail call in email alert #677 #679
  • Change get_tickets to use the status text for filtering. #698
  • Also consider 0 of n NVTS as busy loading #706
  • Check whether hosts are alive and have results when adding them in slave scans. #718 #737
  • Change rows of built-in default filters to -2 (use "Rows Per Page" setting) #897
  • Update SCAP and CERT feed info in sync scripts #808
  • Count only best OS matches for OS asset hosts #1027
  • New Community Feed download URL in sync tools #1043
  • Do not ignore empty hosts_allow and ifaces_allow #1062

Fixed

  • A PostgreSQL statement order issue #611 has been addressed #691
  • Fix iCalendar recurrence and timezone handling #653
  • Fix issues with some scheduled tasks by using iCalendar more instead of old period fields #655
  • Fix an issue in getting the reports from GMP scanners #658 #666
  • Fix GET_SYSTEM_REPORTS using slave_id #667
  • Fix RAW_DATA when calling GET_INFO with type NVT without attributes name or info_id #682
  • Fix assignment of orphaned tickets to the current user #686
  • Fix ORPHAN calculations in GET_TICKETS #687 #700
  • Fix response from GET_VULNS when given vuln_id does not exist #699
  • Make bulk tagging with a filter work if the resources are already tagged #712
  • Fix columnless search phrase filter keywords with quotes #716
  • Fix issues importing results or getting them from slaves if they contain "%s" #724
  • A possible database migration issue from GVMd-7 to GVMd-8 has been addressed #742 #755
  • Fix escaping that was preventing start_task from running #758
  • Fix array index error when modifying roles and groups #763
  • Fix percent sign escaping in report_port_count #781
  • Consider results_trash when deleting users #804
  • Allow to migrate gvmd 8 sqlite3 database to postgres with gvm-migrate-to-postgres script
    #820
  • Fix asset host details insertion SQL #840
  • Fix creation of "Super" permissions #893
  • Init comment for MODIFY_USER/COMMENT, in case it's empty #894
  • Init comment for MODIFY_PERMISSION, in case it's empty #919
  • Fix Verinice ISM report format and update version #963
  • Fix SCP alert authentication and logging #973
  • Use right format specifier for merge_ovaldef version #1053
  • Fix deletion of OVAL definition data #1077

Greenbone Vulnerability Manager v9.0.0

14 Oct 11:12
a46996f
Compare
Choose a tag to compare

This is the first release of the gvmd module 9.0 for the Greenbone Vulnerability Management (GVM) framework.

Added

  • Added TLS certificates as a new resource type #585 #663 #673 #674 #689 #695 #703 #728 #732 #750 #752 #774 #792
  • Update NVTs via OSP #392 #609 #626 #753 #767
  • Handle addition of ID to NVT preferences. #413 #744
  • Add setting 'OMP Slave Check Period' #491
  • Document switching between releases when using Postgres. #563
  • Cgreen based unit tests for gvmd has been added. #579
  • New usage_type property to distinguish normal scan tasks and configs from compliance audits and policies #613 #625 #633
  • Command cleanup-report-formats for --optimize option #652
  • Enable SecInfo alert checks #670
  • Add an explicit solution column to NVTs #681 #702 #730
  • Document container tasks in GMP doc #688
  • Add explicit columns for the NVT tags "summary", "insight", "detection", "impact" and "affected" #719 #746
  • Add lean option to GET_REPORTS #745
  • Add scanner relays and OSP sensor scanner type #756 #759

Changed

  • Always convert iCalendar strings to use UTC. #777
  • Check if NVT preferences exist before inserting. #406
  • Raise minimum version for SQL functions. #420
  • Run OpenVAS scans via OSP instead of OTP. #422 #584 #623 #636 #704 #729
  • Request nvti_cache update only at very end of NVT update. #426
  • Consolidate NVT references into unified "refs" element. #427 #739
  • Update gvm-libs version requirements to v11.0. #480
  • Adjust to use new API for vt references. #526
  • Expect NVT sync script in bin directory. #546
  • Change internal handling of NVT XML to use nvti_t. #562
  • Change NVT references like CVEs and BID to general vt_refs. #570 #574 #582
  • Update Postgres to SQLite migration. #581 #601 #604 #605
  • Update result diff generation at delta reports #650
  • Check and create default permissions individually #671
  • Add -f arg to sendmail call in email alert #676 #678
  • Change get_tickets to use the status text for filtering. #697
  • Made checks to prevent duplicate user names stricter. #708 #722
  • Send delete command to ospd after stopping the task. #710
  • Check whether hosts are alive and have results when adding them in slave scans. #717 #726 #736 #771
  • Use explicit nvti timestamps #725
  • New columns Ports, Apps, Distance, and Auth in the CSV Hosts report format #733
  • The details attribute of GET_REPORTS now defaults to 0 #747
  • Incoming VT timestamps via OSP are now assumed to be seconds since epoch #754
  • Accelerate NVT feed update #757

Fixed

  • Make get_settings return only one setting when setting_id is given #779
  • A PostgreSQL statement order issue #611 has been addressed #642
  • Fix iCalendar recurrence and timezone handling #654
  • Fix issues with some scheduled tasks by using iCalendar more instead of old period fields #656
  • Fix an issue in getting the reports from GMP scanners #659 #665
  • Fix GET_SYSTEM_REPORTS using slave_id #668
  • Fix RAW_DATA when calling GET_INFO with type NVT without attributes name or info_id #682
  • Fix ORPHAN calculations in GET_TICKETS #684 #692
  • Fix assignment of orphaned tickets to the current user #685
  • Fix response from GET_VULNS when given vuln_id does not exists #696
  • Make bulk tagging with a filter work if the resources are already tagged #711
  • Check if the scan finished before deleting it and ensure that the task is set to done #714
  • Fix columnless search phrase filter keywords with quotes #715
  • Fix issues importing results or getting them from slaves if they contain "%s" #723
  • Fix sorting by numeric filter columns #751
  • Fix array index error when modifying roles and groups #762
  • Add NULL check in nvts_feed_version_epoch #773
  • Fix percent sign escaping in report_port_count #782
  • If the nvt preference is "file" type, encode it into Base64 format #785

Removed

  • The handling of NVT updates via OTP has been removed. #575
  • Bid and xref have been removed from table nvts. #582
  • Database migration from revisions before 185 has been removed. #411 #622
  • Drop SQLite support #610 #612 #614
  • Remove create report task creation #616
  • Remove --backup command line option #615
  • Remove GET_REPORTS type "assets" #617 #620
  • Remove errors for unknown elements #619
  • Remove unused reports column nbefile #675
  • Eliminate get_tag() and parse_tags() #743
  • Remove helper functions and other code for handling OTP #705 #709 #713 #735 #748 #749
  • Remove stray prototype nvt_iterator_copyright [#721](https://github....
Read more

Greenbone Vulnerability Manager v8.0.1

17 Jul 14:29
Compare
Choose a tag to compare

Added

  • Special characters in credential login names are allowed. #475
  • Add type filter column to GET_CONFIGS. #486
  • Filter settings for groups, scanners, tickets, users and vulnerabilities have been added. #497
  • Multiple certificate formats for S/MIME are allowed. #551

Changes

  • Functions config_in_use, trash_config_in_use and port_list_in_use
    returned a count instead of the expected 1 or 0. #460
  • The cache is rebuild for each chunk in CREATE_REPORT. #469
  • Hosts without HOST_START are added in CREATE_REPORT. #479
  • Use host details for login failure in ticket check. #483
  • In create_target() and modify_target() exclude_hosts is cleaned up to be in a consistent format like the included hosts are. #488.
  • Check that roles exist earlier. #493
  • Anonymize more IPs and hostnames in Anonymous XML. #496 #535
  • Ensure that authentication always works for Start Task alerts. #515
  • Get content type when emailing an attached report. #517
  • Allow vuln_iterator_opts_from_filter filter to be NULL. #527
  • Wrap PostgreSQL exclusive table lock in function to prevent error messages in the PostgreSQL log if the lock is not available. #542
  • Trim whole report when resuming slave scans #549
  • Documentation has been improved. #569 #567 #588
  • Update command line options in gvmd man page #565
  • Clean special option keywords in filters. #571 #578 #576
  • If the schedule of a task is available, GET_TASKS will always return the
    long schedule XML, not just if only the schedules are requested. #500
  • References to OpenVAS have been replaced with GSM #529
  • Buffer inserts when adding results from a slave #641

Fixed

  • Checks on 'type' in GET_FEEDS has been fixed. #462
  • An issue which caused a race condition using the WHERE NOT EXISTS SQL has been addressed. #472
  • A missing argument in check_tickets is added. #477
  • Add missing filter case to result_count. #548
  • Fix create_report cache update at end of results. #490
  • Fix permission checks for trash reports #503
  • Fix MODIFY_TAG and CREATE_TAG responses. #520
  • Fix MODIFY_TAG for all types when given a filter. #523
  • Fix email field validation in create_alert and modify_alert. #534 #545
  • Fix --slave-commit-size option. #555
  • Fix TippingPoint error handling #592
  • Apply ignore_pagination in delta reports #597
  • Fix getting single unowned resources #607
  • Fix the "Host Authentications" section in PDF / LaTeX reports. #640

Removed

  • Remove -m SMB3 for smbclient in SMB alert, which allows changing the maximum protocol version via the smbclient config instead of forcing a particular one in the alert script. #505
  • Remove "slave" from valid_db_resource_type. #558

Greenbone Vulnerability Manager v8.0.0

05 Apr 13:13
Compare
Choose a tag to compare

This is the first release of the gvmd module 8.0 for the Greenbone
Vulnerability Management (GVM) framework.

Please note that migration steps for the transition to gvmd are required for existing setups / installations.

Many thanks to everyone who has contributed to this release.

Main changes compared to gvm 8.0+beta2:

  • The new alert method "Alemba vFire" has been added.
  • GMP CREATE_ASSET, its GMP doc and usage by GSA are now more consistent.
  • The SMB alert will now try to create directories as needed.
  • The file path of SMB alerts can now be set to a directory, using the default
    report filename from the user's settings.
  • The file extension from the report format will now be added by SMB alerts.
  • The tag "smb-alert:file_path" on tasks will override the file path of
    SMB alerts.
  • Handling of SSH private keys has been improved, allowing use of EC keys.
  • An issue with deleting users has been fixed.
  • The option --optimize remove-open-port-results has been removed.
  • CREATE_TASK now requires a name.
  • The compile-time LOG option has been removed.
  • The --modify-scanner option now also accepts UNIX sockets.
  • Support for report content composition has been added.
  • TEST_ALERT now also works if NVTs are missing.
  • LSC errors are now logged as warnings.
  • Remediation support has been added (GMP CREATE_TICKET, GET_TICKETS, etc).
  • Missing data in credentials no longer prevents slave tasks from starting.
    Instead the scan will start without the credential.
  • An issue preventing "Start Task" alerts from running has been fixed.
  • Handling of failed/successful SNMP Authentication has been added to the
    HTML, LaTeX and PDF report formats.
  • A new password-only credential type has been added
  • The Sourcefire alert now accepts a password credential for PKCS12 decryption.
  • The source code and GMP documentation have been cleaned up.
  • A section about deprecated GMP elements has been added to the documentation.
  • Targets now use TCP-SYN without TCP-ACK when pinging hosts when configured
    to do so.
  • Performance of GET_REPORTS retrieving the results has been improved.
  • GET_REPORTS will only return Tags of results if requested with the new
    result_tags attribute.
  • Updates of the NVTs will now ignore duplicate preferences instead of failing.
  • An issue with alert emails missing a line break has been addressed.
  • MODIFY_SETTING now checks if text values can be decoded to valid UTF-8.
  • Users will automatically get read permission for themselves.
  • An issue with incomplete NVT info after feed updates has been addressed.
  • Issues with the predefined report formats not handling hosts and hostnames
    correctly have been addressed.
  • Settings "Hosts Filter" and "Operating Systems Filter" have been added.
  • The predefined "Discovery", "Host Discovery" and "System Discovery" now
    mark unreachable hosts as dead.
  • The GET_TASKS command now only returns the progress of individual hosts
    when details are requested.
  • The --slave-commit-size option has been added, which can help prevent large
    updates from GMP scanners blocking the database for a long time.
  • An issue with GET_FEEDS returning the wrong feed types has been addressed.
  • Various other code cleanups and improvements.

Greenbone Vulnerability Manager v8.0+beta2

05 Dec 11:39
3094bec
Compare
Choose a tag to compare

This is the second beta release of the gvmd module 8.0 for the Greenbone
Vulnerability Management (GVM) framework.

It was renamed from gvm to gvmd (Greenbone Vulnerability Manager daemon).

Apart from the new name, the module covers a number of significant advances
and clean-ups compared to the previous version.

Many thanks to everyone who has contributed to this release:
Hani Benhabiles, Christian Fischer, Matthew Mundell, Timo Pollmeier,
Bjoern Ricks, Jan-Oliver Wagner and Michael Wiegand.

Main changes compared to gvm 8.0+beta1:

  • Classic report format HTML has been removed from predefined report formats.
  • External tool openvasmr has been renamed to gvmcg.
  • Size of result description and diff text in GMP has been limited.
  • Support for creating filters for vulnerabilities has been added.
  • .deb and .rpm LSC package generation has been improved.
  • SNMP and ESXi Authorization in the scan config have been hidden.
  • Support for using configurable GPG and S/MIME encryption keys for Email Alerts
    has been added.
  • Script copyright and script version have been removed.
  • Vhosts handling has been improved.
  • User tags can now refer to multiple resources for easier bulk tagging.
  • Elements host_start and host_end have been removed
    from the report element of response from get_reports.
  • The task status "Internal Error" has been replaced by "Interrupted", which
    can also occur in case of errors that previously set tasks to "Stopped".
  • "OpenVAS Classic" has been removed from the list of predefined severity
    classification schemes.
  • A results trashcan table has been added for performance reasons.
  • The prognostic type has been removed from GET_REPORTS and from the
    report element.
  • An issue related to credential creation and modification has been addressed.
  • Several improvements and fixes related to reports have been done.
  • Documentation has been updated.
  • Several memory management aspects have been improved.
  • Various code cleanups and improvements.

Greenbone Vulnerability Manager v8.0+beta1

30 Apr 07:15
0477036
Compare
Choose a tag to compare

This is the first beta release of the gvm module 8.0 for the Greenbone
Vulnerability Management (GVM) framework.

It was renamed from openvas-manager to gvm (greenbone vulnerability manager).

Apart from the new name, the module covers a number of significant advances
and clean-ups compared to the previous version 7.0.

Many thanks to everyone who has contributed to this release:
Hani Benhabiles, Antony Falegkos, Christian Fischer, Matthew Mundell, Juan
Nicola, Timo Pollmeier, Jan-Oliver Wagner and Michael Wiegand.

Main changes compared to the 7.0 series:

  • The central service component "OpenVAS-Manager" has been renamed to
    "Greenbone Vulnerability Manager". Subsequently, the central binary has been
    renamed from "openvasmd" to "gvmd". Also any other occurence of "OpenVAS
    Manager" or related terms has been renamed accordingly, including the API from
    "OMP" to "GMP".
  • The new GMP command GET_VULNS allows for a view on found vulnerabilities with
    quantities on results and hosts, across all reports.
  • The required minimum version of new dependency GVM Libraries is 1.0 and
    the dependency to the openvas-libraries module has been removed. Therefore
    many include directives have been adapted to the new source code.
  • The gmvd proctitle is set for each process to indicate what the process
    is doing.
  • The elements host_start and host_end has been removed from report element,
    which eliminate redundant information since there are already available in the
    host element.
  • iCal standard (RFC2445) support has been introduced for "schedule" objects.
  • The gvm daemon automatically detects new SCAP and CERT data as well as when new
    NVTs are available from the OpenVAS Scanner and will load/update the database
    accordingly. Therefore the --rebuild, --update and --progress options have
    been removed.
  • Transition from global objects to ownerless-predefined objects: The possibility
    to configure users, groups or roles to have arbitrary
    permissions over pre-defined objects has been added.
    For example, a role could be configured with only one specific Scan Config,
    Scanner or Port List to use. The default permissions, however, do not change.
  • The update of SCAP and CERT data has been changed from external scripts
    into internal routines of gvmd. This makes the process faster
    and consumes less resources.
  • Documentation has been updated.
  • Several memory management aspects have been improved.
  • Various code cleanups and improvements.
  • The CMake building process was improved.
  • The minimum required version of GLib has been raised to 2.42.
  • The minimum required version of CMake has been raised to 3.0.