All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog.
20.04 - unreleased
- Added translation using babel-plugin-i18next-extract #1808
- Multistep dialog feature, implemented on scanner dialog #1725
- Update react-beautiful-dnd to version 12.2.0 and fix dragging into empty row #1837
- Deleting a single entity now removes its ID from store #1839
9.0.1 - unreleased
- Added base config to create scanconfig dialog, make it new default base for scanconfigs and new base for policies #1789
- Display timezone for session timeout in user menu #1764
- Changed default port to 22 for scanner dialog #1768
- Improved Delta Report Details #1748
- Updated node dependencies to latest releases #1735
- If details not defined, then choose first OS from identifiers #1719
- Sorting of SecInfo items #1717)
- Disabled edit PowerFilter icon if isLoading #1714
- Don't show empty menu section #1711
- Increased clickable area for Logout #1711
- Fixed TLS certificate filtering #1830
- Fixed resetting to default filter at list pages #1828
- Fixed error when parsing invalid hosts for overrides and notes #1810
- Fixed displaying icon titles #1809
- Fixed svg icon cursor is always a pointer #1800
- Fixed defaultfilter is not always applied #1783
- Fixed checkboxes in scanconfig editdialog reset after every rerender #1773
- Pass scanner port number to scanner dialog from component #1772
- Fixed allowed range for auto delete keep value #1729
- Fix Created column on Results listpage #1726
- Get delta report needs to send details=1 #1724
- Improve filter handling in report details #1708
- Fix TLS certificate download #1704
- Import additional polyfills for IE11 #1702
- Handle authentication errors in gsad more carefully #1700
- Removed auto delete field from container task dialog #1784
- Removed obsolete DefaultFilter component and withDefaultFilter HOC #1709
9.0.0 - 2019-10-14
- Add statereducer function to Select component: Scrolls to last selected item #1715
- Add loading indicator to select #1716
- Add loading indicator to svg icon #1701
- Update German Translation #1689
- List NVT of the found CVEs at the report details page #1673
- Added links for GOS 6 manual for audits, policies and TLS certificates #1657
- Added OSP Sensor type to GSA #1646
- Added TLS certificate filter type #1630
- Added change method to Field and TextArea component, removed withChangeHandler #1625
- Added custom page title to all pages #1623
- Allow to disable reload timers #1619
- Added missing withRouter to withEntitiesContainer #1614
- Added parseTrend() function to ScanConfig model #1583
- Added DetailsPage and more functionalities to TLS Certificate assets #1578
- Added Explicit Compliance #1495, #1655
- Added tasktrendgroup component for tasks filter dialog #1511
- Added HorizontalSep component for horizontal lists. #1494
- Added BooleanFilterGroup and changed notes filter dialog #1493
- Added grow option to multiselect component #1485
- Add LogoutIcon #1481
- Added a component "SeverityValuesGroup" enabling user choose the relation they want #1477
- Added filter keywords owner, host, cvss base score, vulnerability and location to filter dialog on results page #1472
- Add storybook #1272
- Added TLS certificates to the asset management. #1455, #1461, #1600, #1681
- Add usage type to task and scanconfig commands #1460 #1466 #1467
- Tweaked LDAP and RADIUS pages to be more consistent #1718
- Decide whether to default to full and fast scan config (task dialog)#1671
- Determine the to be applied filter of a list page in GSA and don't rely on the backend #1631, #1653, #1677
- Change gmpname for vulnerability and secinfo pages #1652
- Use "lean" reports by default when requesting a single report #1635
- Use uuid to get greenbone compliance report format #1643
- Add details=1 to report download command #1642
- Adjust gsa to send details=1 for get_report and change gsad to forward details to gvmd 1640
- Switch tooltips for fold and unfold icon, change task trend options in filter dialog to make them easier to understand #1627
- Improve edit scanconfig dialogs to open immediately and show loading indicators #1624
- Reuse permissions, reloadInterval and compareAlerts from task details and detailspage for audit details and detailspage #1607
- Replaced savedialogcontent class with hooks #1602
- TicketStatusGroup updated with new filter strings #1594
- Reuse NvtFamilies, NvtPreferences and ScannerPreferences from scanconfig detailspage for policy detailspage #1593
- Fix sensor icon not visible in audit row and reuse renderReport from tasks for audits #1577
- Reuse scanconfig edit dialogs for policies #1573
- Use styled-components to render global styles #1557
- Use fast xml parser by default #1556
- Updated dependencies #1555
- Changed schedule dialog (added Now button) to help users jump to current time ASAP #1519
- Changed the filter dialogues for tasks and overrides #1511
- modified filterdialogs for reports and vulnerabilities #1503
- Changed filterdialog for tickets page #1489
- Restructured menu categories #1481
- Logout and usersettings link got a menu #1481
- Modified the BarChart's y-domain to avoid range [0,0]. #1447
- Changed FilterTerm to convert all filter keywords to lower case #1444
- Use Reacts new ref API (no innerRef anymore #1441)
- Allow dynamic ref types in NVT model and adjust CertLink to it #1434
- Use new ref structure in NVTs #1424
- Use HTTPS for documentation links
- Cleanup and improve handling of http parameters and arguments for gmp requests in gsad #1355
- Fixed displaying negative days on the override and note active dashboard #1727 #1728
- Fixed inability to change to/from LDAP and RADIUS settings #1723
- Fixed filter dialog duplicating filter terms [#1705] (greenbone#1705)
- Fixed parsing report details data #1673
- Fixed scanconfig clone icon tooltip does not show if permission is denied #1664
- Fixed feed status page does not render #1628
- fixed secinfo severitybars not displaying severity.#1530
- Fixed outer click issues for multi select and select boxes #1504
- Removed UserLink component #1481
- Remove edit_config command from gsad #1439
- Remove copyright from gsad version output #1379
8.0.2 - unreleased
- Added parseText to model.js to parse single space summary #1829
- Added new setting to enable and disable debug logging for the redux store #1684
- Added text notification when old password is entered but new password isn't #1636
- Added a loading timer for empty trash button #1604
- Added details to alert details page #1591
- Added loading indicator for edit config dialog #1579
- Added tooltip for settings in task edit dialog that can't be changed once the task has been run #1568
- Added success dialog to report formats listpage #1566
- Added an explicit get_capabilities command to gsad #1538
- Highlight result diffs at delta reports #1513
- Added HorizontalSep component for horizontal lists #1506, #1507
- Limit the length of result description with a div #1834
- New permission dialog: radio button for groups disabled if no groups available #1836
- Changed new override dialog defaults #1833
- Refactored cvsscalculatorpage to function and parse vector from url #1824
- New override and note dialog: Make host/port/task fields editable even when fixed, and display oid when no name is defined #1814 #1817
- Use consistent setting naming #1774
- Consider visibility status of page for calculating the reload interval #1761
- Do not simplify filterString in content composer for report download #1733
- Use single component for reloading data #1722
- Use last chars of a label string in BarChart #1713
- Next Scheduled Tasks displays timezone #1712
- Load "small" report before full report #1697
- Removed Clone and Verify functionalities for report formats #1650
- Use new React context API #1637
- Update response data parsing in Model classes #1633, #1668
- Fix statusbar content can be more than 100% and add progressbar colors to theme 1621
- Allow to overwrite details=1 for command results.get() #1618
- Ensure not to request the report details when loading a list of reports #1617
- Adjust ProtList manual links #1599
- Word-wrap in pre component #1586
- Disable EditIcon for My Settings if permission denied #1588
- Don't allow to clone hosts #1581
- Trigger alert button disabled in report details page when no permission #1574
- Update default filter for report details page #1552
- Adjust HelpIcons to use GOS 5 manual #1549 #1550
- Adjust clickable areas for Select and MultiSelect #1545
- Redirect to main page when visiting the login page and the user is already logged in #1508
- Use correct link for ManualIcon #1835
- Fixed getting InvalidStateError with IE 11 on XHR creation #1769
- Fixed filtering general command permissions in roles #1734
- Fix getting details in delta report #1732
- Include results (details=1) in report download #1731
- Fixed High column in hosts table fo reports #1730
- Fix setting the user default filter in report results #1699
- Use new model construction in some commands #1665
- Fixed auth_method preselection for user dialog #1661
- Fixed userId, roleId and groupId not rendering in create entity permissions dialog #1658
- Don't crash Schedule details and list pages if invalid ical data is loaded #1656
- Fix showing loading indicator in content composers #1613
- Enable downloading csv in table dashboard #1611
- Fixed 404 URL handling in gsad which caused a XSS vulnerability #1603
- Fixed status of Tickets for task.isInTrash() and isOrphan #1592
- Fix and improve editing of roles #1587
- Fix showing ScanConfig trends #1582 #1554
- Show HostsCount at SectionTitle #1576
- Fixed creating target from hosts #1575
- Fixed CVSSBaseCalculatorv2 #1572
- Fix title in Operating Systems table of Reports #1567
- Fix displaying only usable report formats at report download #1565
- Fix handling schedule_periods ("once" option) in TaskDialog #1563
- Fix showing inactive VerifyIcon at ReportFormats detailspage #1554
- Fix showing SensorIcon for tasks #1548
- Always show an identifier for results #1543
- Don't crash Alerts listpage and trashcan when Alert data is missing #1541
- Fix calculating the next date of schedules #1539
- Fix linking to best OS in host details #1528
- Redirect to root URL by default #1517
- Fix showing details for tasks #1515
- Allow to use additional options for starting gsad via systemd #1514
- Fix using filename templates from usersettings #1512
- Update manpage #1616
8.0.1 - 2019-07-17
- Added systemd service file and logrotate config to gsad #1486
- Additional report-host information #1468
- New VerifyNoIcon #1468
- Add tests for filter groups #1419
- Add tests for severitylevelsgroup, radio button and task trend #1413
- Allow to show error details #1403
- Add test for solution type group #1402
- Add tests for loginpage and structure components #1390
- Add getAllEntities() and loadAllEntities() actions and reducers to entities store #1345
- Add missing tool tips to credential download icons #1335
- Add type column to scan configs to allow filter and sort by scan config type #1331
- Add some tests for bar components #1328
- Add new DefaultFilterSettings to UserSettings #1326
- Add warning for IE11 #1322
- Add tests for label and img #1313
- German translation #1311, #1323, #1403
- Add tests for comment and badge #1309
- Add error dialog to fix missing error messages in trashcan #1286
- Display current result, comparable result and diff between results for delta reports and their results in delta state "changed" #1284
- Add tooltips to deactivated text fields in AlertDialog #1269
- Brand the Loading indicator #1469
- Always load notes and overrides when getting results #1446
- Disable some FileFields when RadioButton is not checked #1430
- Change checkboxes for solution types to radio buttons #1398
- Link to search in the manual for vulnerabilities #1391
- Separate tasks using this scan config with commas #1384
- Don't allow to verify predefined report formats #1378
- Avoid storing config.js in browser cache #1372
- Display data loading errors at list pages #1349
- Improve login page #1347
- Remove options for not implemented languages #1344
- Render all dates in the current configured timezone of the user #1327, #1329, #1332
- Change default PortList for NewTargetDialog #1321
- Update dependencies of react, react-dom, react-redux and create-react-app #1312
- Adjust clickable area of Select #1296
- Update dialog for Task Wizard, Advanced Task Wizard and Modify Task Wizard #1287
- Disable inputs for improper option selection in EmailMethodPart of AlertDialog #1266
- Cleanup get_report function in gsad #1263
- Displaying delta information at result details #1499
- Don't crash Alerts listpage and trashcan when Alert data is missing #1498
- Show full filter term in content composer #1496
- Fix finding python modules #1483 #1484
- Fix displaying schedules created during migration #1479
- Fix showing Loading indicator at entities pages #1469
- Show notes and overrides for results and their icon indicator in results rows #1446
- Display text if gvm-libs is build without LDAP and/or Radius support #1437
- Fix sending related resources in permission.create() #1432
- Don't allow bulk tagging vulnerabilities #1429
- Fix "given type was invalid" error for saving filters #1428
- Fix parsing CVSS authentication SINGLE_INSTANCE #1427
- Fix loading data on login #1426
- Fix result undefined error on result details #1423
- Fix showing Scanner Preferences in EditScanConfigDialog #1420
- Don't crash if second result for delta is undefined #1418
- Fix xml decoding issues with fast-xml-parser #1414
- Fix translation for task status and task trend tooltip #1409
- Fix problems with German translation in Add Dashboard dialog, SolutionTypeGroup and SeverityClassLabel #1412
- Fix some translation bugs (statusbar, about page, table header tooltips)#1407
- Fix checking if an entity is in use #1406
- Fix "Invalid date" string for scan times #1405
- Fix missing "Applied filter" message for "NVTs by Family" chart #1404
- Load all filters and report formats at the report details page #1401
- Fix rendering reports list page if user has no report formats #1400
- Don't link to hosts not being added to the assets #1399
- Fix adding and removing host assets at the report details #1397
- Fix displaying the observer group name at tasks list page #1393
- Improve EditScanConfigDialog performance (delete styles from svg-Icons) #1388
- Fix race condition in EditUserSettingsDialog and loading all default filters #1383
- Fix scheduled task tooltip time format #1382
- Fix updating Titlebar after session timeout #1377
- Use German manual for DE locale #1372
- Load all container tasks for report import dialog from redux store #1370
- Don't render Invalid Date #1368
- Don't show error message after re-login #1366
- Fix creating permissions in Roles dialog #1365
- Fix cloning permission for Roles #1361
- Use correct loaded filter in entities container #1359
- Fix parsing a filter id of '0' #1358
- Parse report timestamp as date object #1357
- Don't crash topology chart if host has no severity #1356
- Fix loading time measurements for list pages #1352
- Fix rendering DateTime without dates being passed #1343
- Fix restarting reload timers #1341, #1351, #1389, #1396
- Fix list of excluded hosts formatting #1340
- Fix installation of locale files #1330
- Fix list of options of possible Filter types #1326
- Fix timezone handling at performance page #1325
- Fix creating and editing alerts without a result filter #1315
- Fix filter selection at report details page #1314
- Fix using default results filter at report details page #1314, #1333
- Fix loading filters at permission list page #1306
- Fix filter in Report Results view cannot be saved & Fix error for create filter with no available results #1303
- Fix creating permissions via the create multiple permissions dialog #1302
- Fix showing host in Scanner dialog #1301
- Fix detailslinks in AllSecInfo #1299
- Only run libmicrohttp in debug mode if gsad build type is debug #1295
- Fix dialog can be moved outside browser frame #1294
- Fix permission description #1292
- Fix port ranges from file radio button #1291
- Don't run more then one reload timer for a page #1289
- Set first=1 when starting delta report selection #1288
- Fix pagination with default filter (reset filter.id if filter is changed) #1288
- Fix setting filters at report details page with less and greater then relations and quotes in the value #1288
- Fix New Target dialog contains value from Edit Target #1281
- Fix opening alert report composer #1280 #1276
- Fix showing authentication methods in user dialog #1278
- Fix Result details page #1275
- Fix displaying reserved filter keywords in content composer #1268
- Fix GSA version at about page #1264
- Fix link to protocol documentation at about page #1264
- Fix testing alerts #1260
- Fix release build #1259, #1265
- Remove old tool tips from credential download icons because they are not visible and update new tool tips #1338
- Remove sort by credential from Target view 1300
- Remove fifth from schedule #1279
- Removed obsolete CLI arguments #1265
- --login-label
- --http-guest-chart-frame-opts
- --http-guest-chart-csp
- --guest-username
- --guest-password
8.0.0 - 2018-04-05
This is the first release of the gsa module 8.0 for the Greenbone Vulnerability Management (GVM) framework.
This release introduces an entirely re-written version of GSA with an overhauled new user interface technology, switching from XSLT-generated web pages per request to a single page JavaScript application. The XSLT got removed completely and was replaced by a modern JS application allowing to add features and usability improvements faster and easier in future.
The web server daemon (gsad) got a big code cleanup and improvements. Due to changing to a JS application it doesn't generate any HTML code anymore. Now gsad only ships static files and acts as some kind of http proxy between the JS based GSA and gvmd.
Apart from this, the module covers a number of significant advances and clean-ups compared to the previous gsa module.
- Display error message if an entity couldn't be loaded #1252
- Support old secinfo URLs and redirect to replacement pages #1247
- Add guest user login support #1246
- Allow to set default host and operating system filters #1243
- Add confirmation dialog when creating a user without a role #1224
- Use dialogs to edit LDAP and RADIUS authentication #1212, #1213
- Add link referencing the performance during scan time to the report details
- Allow to pass start time, end time and sensor/slave id as URL parameters to performance page.
- New feature: Remediation Tickets #1126
- Allow to sort the nvts table at the edit scan config families dialog by name, oid, severity, timeout and selected #1210
- Add feature: Scan Report Content Composer #1073, #1084, #1086, #1090
- Add solution type to report details powerfilter #1091
- Add Alemba vFire alert to GUI #1100
- Add Sourcefire PKCS12 password support #1150
- Change order of options in target dialog #1233
- Don't limit the input field lengths anymore #1232
- Renamed "PGP Key" credential to "PGP Encryption Key" #1208
- Sort alerts at task details alphanumerically #1094
- Disable tag selection if no task should be added in create task dialog #1220
- Don't show add tag fields when editing a task #1220
- Use "Do not automatically delete reports" as default again in task dialog #1220
- Don't crash if start or end date for performance page are invalid #1237
- Convert first filter keyword values less then one to one #1228
- Always use equal relation for first and rows filter keywords #1228
- Fix issues with updating user authentication and logging out active sessions after changing the password of a user #1159
- Tags can now contain backslashes, forward slashes and percent signs in the value as well as hyphens in the name to allow using the special task tag "smb-alert:file_path" #1107, #1142, #1145
- Fix crash of Task dialog without user having get_config, get_scanner, get_tags and get_targets permissions #1220
- Ensure host ordering is valid in task dialog #1220
- Fix race condition resulting in not displaying scan config details at task dialog when opening the dialog for the first time #1220
- Fix saving run schedule once setting from Task dialog #1220
- Don't create a container task from the task dialog accidentally #1220
8.0+beta2 - 2018-12-04
- Allow rename main dashboards #1076
- Allow to encrypt alert emails via S/MIME and PGP #1070
- New credential types S/MIME and PGP for alert email encryption #1070
- Add cancel button to all dialogs #1048
- Allow to store dashboard chart specific data #1022
- Allow to toggle chart legend and 2D/3D view of pie charts #989
- Support for cmake and cmake3 executables #936
- Support for yarn offline mode #935
- Automatically logout user after session has timed out #908
- Adjusted auto reload interval automatically #917
- Allow to filter results by solution type via powerfilter dialog #906
- Extend the session timeout on user interaction #865, #902, #905
- Added indicators for notes and overrides applied to results #898
- Added comments to Target table #870
- Added remove filter button to powerfilters #863, #893
- Clear/Flush redux store on logout #797
- Allow to add multiple tags simultaneously #701, #723, #728, #748, #752, #768, #771, #786, #871, #887
- Added host name to result hosts #765
- Added delta reports to alerts #743, #754
- Extended Schedules based on ical data #720, #724, #729, #731, #739
- Allow to add Tags to scanners #702
- Refined appearance of the GUI #987, #991, #995, #998, #1004, #1021, #1025, #1026, #1030, #1037, #1043, #1053, #1058
- Don't close dialog on outer clicks #1074
- New reworked icon set #1053
- Don't show links to details pages for entities in Trashcan #1035
- Updated and improved Line Charts #1012, #1022
- Cleaned up wizards #1001
- Split Results Host column into IP and Name #999, #998
- Update to Create React App 2.0 #997
- Put NVT preferences into own tab on details page #991
- Change report summary table appearance #991
- Changed visual appearance of Tables #983
- Changed Donut Chart to a Pie Chart #982
- Improved visual appearance of Donut Charts while resizing #979
- Require NodeJS >= 8 #964
- Replaced glamorous with styled-components for settings styles #913, #919, #922, #924, #925, #929, #934, #938, #948, #949, #950
- Use Tabs for structuring data at User Settings #927
- Don't show external link dialog when clicking on Greenbone links #904
- Always load data into the redux store #748, #753, #776, #777, #828, #833, #836, #853, #861, #897, #923, #939
- Improved login page layout #859
- Refined the menu appearance #852, #869
- Reduced default max height for dialogs to 400px #843
- Show Report page header before report is loaded #825
- Renamed Task status "Internal Error" to "Interrupted" #718, #719
- Fixed displaying the Observer icon #1053
- Don't crash GSA completely if an unexpected error did occur #1046
- Fix saving nvt preferences in gsad #1045
- Fix "Current User" inheritance on "Delete User" #1038
- Set min size for Line Charts and reduce number of x-axis labels to not overlap #977
- Don't set an unknown locale #966
- Fixed sorting of tables at Report details #929
- Fixed saving the default severity #907
- Fixed displaying Nvt tags #880
- Update locales if they are changed at the User Settings #856
- Don't show default dashboard if settings haven't been loaded yet #714
- Remove max length of hosts for notes and overrides #1033
- Removed Scan, Asset, SecInfo Dashboards and added Dashboard "templates" to the main dashboard #974
- Removed Dashboard Display menus with an icon overlay #971, #972
- Removed sticky menu in header #857
- Removed support for severity class OpenVAS Classic #709
8.0+beta1 - 2018-05-25
This is the first beta release of the gsa module 8.0 for the Greenbone Vulnerability Management (GVM) framework.
This release introduces an entirely re-written version of GSA with an overhauled new user interface technology, switching from XSLT-generated web pages per request to a single page JavaScript application. The XSLT got removed completely and was replaced by a modern JS application allowing to add features and usability improvements faster and easier in future.
The web server daemon (gsad) got a big code cleanup and improvements. Due to changing to a JS application it doesn't generate any HTML code anymore. Now gsad only ships static files and acts as some kind of http proxy between the JS based GSA and gvmd.
Apart from this, the module covers a number of significant advances and clean-ups compared to the previous gsa module.
- The 'excluded' list option when a New Target is created has been added.
- New view on scan results by vulnerability has been added.
- A link to Scanconfigs from scanner details has been added.
- Multiple dashboards can be defined by the user at the main entry page.
- The web user interface has been transformed into a single page application which is loaded once and then only updates the in-browser data from the server.
- All data loading processes are asynchronous and don't block the GUI from reacting to user input.
- Refreshing of data is done in the background now. Therefore the user doesn't need to specify a refresh rate anymore.
- The extra help pages has been replaced by links to the documentation.
- The edit dialog for overrides and notes has been improved and is now more flexible.
- The report details view has been overhauled.
- nodejs >= 6 is required to generate the new JS based version of GSA.
- npm or yarn is required for installing the JavaScript dependencies.
- Minimum required version of glib has been raised to 2.42.
- Minimum required version of cmake has been raised to 3.0.
- The its "face" has been removed.
- The 'classic hosts' asset has been removed.
- The edit mode of the dashboards has been removed. Dashboards are always editable now.
- libxslt is no longer required because all XSLT has been removed.
- The required minimum version of new dependency GVM Libraries is 1.0 and the dependency to the openvas-libraries module has been removed. Therefore many include directives have been adapted to the new source code.