Skip to content

Latest commit

 

History

History
621 lines (549 loc) · 52.4 KB

CHANGELOG.md

File metadata and controls

621 lines (549 loc) · 52.4 KB

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog.

[22.4] (unreleased)

Added

Changed

  • Use pg-gvm extension for C PostgreSQL functions #1400, #1453
  • Change report timestamp filter and iterator columns #1512
  • Rename the date column of reports to creation_time #1520
  • Send the script timeout to the scanner as script preferences #1670

Fixed

  • Improve VT version handling for CVE & OVAL results #1496
  • Fix migration to DB version 242 from gvmd 20.08 #1498
  • Update subject alternative name in certificate generation #1503

Removed

  • Remove Network Source Interface from gvmd #1511
  • Removed OVAL definitions from gvmd #1525
  • Removed OVAL definitions from GMP and gvmd documentation 1551
  • Removed the Business Process Map from gvmd 1627
  • Removed ifaces element from users #1676
  • Removed OSP scanners from gvmd #1689 #1691 #1694 #1701

[21.4.4] (unreleased)

Added

  • Add --rebuild-gvmd-data command line option #1680 #1683

Changed

Deprecated

Removed

Fixed

  • Ensure gvmd sends error messages if gvmcg fails #1682
  • Fix resume task. #1679 #1695
  • Added a dedicated error message for the create ticket dialogue when the create permission permission is missing #1686
  • Fix import of report results / errors without host #1687

21.4.3 - 2021-08-03

Fixed

  • Fix sending prefs for whole, growing VT families #1603
  • Add trash columns for target "elevate" credential #1636

21.4.2 - 2021-06-28

Fixed

  • Amended Test, if the ssh elevate credential is different from the ssh credential #1586
  • Added the missing GMP documentation for the ssh elevate credential #1591

21.4.1 - 2021-06-23

Added

  • Add NVT tag "deprecated" #1536
  • Extend GMP for new privilege escalation credential #1535
  • Include new ssh elevate (escalation) credential in OSP request #1539
  • Add test if the ssh elevate credential is different from the ssh credential #1582

Changed

  • Update default log config #1501

Fixed

  • Improve VT version handling for CVE & OVAL results #1496
  • Fix migration to DB version 242 from gvmd 20.08 #1498
  • Update subject alternative name in certificate generation #1503
  • Fix whole-only config family selection #1517
  • Migrate GMP Scanners to OSP Sensors #1533
  • Solved a peformance problem for tasks after scanning lots of hosts #1567

21.4.0 (2021-04-16)

Added

Changed

  • Move EXE credential generation to a Python script #1260 #1262
  • Clarify documentation for --scan-host parameter #1277
  • In result iterator access severity directly if possible #1321
  • Change SCAP and CERT data to use "severity" consistently #1333 #1357 #1365 #1457 #1476
  • Expect report format scripts to exit with code 0 #1383
  • Send entire families to ospd-openvas using VT_GROUP #1384
  • Limit "whole-only" config families to "growing" and "every nvt" #1386
  • Access current user with an SQL function #1399
  • Refactor modify_config, allowing multiple simultaneous changes #1404
  • Add retry on a deadlock within sql#sql #1460
  • Don't require report format plugin for XML report #1466
  • Wording of Rebuilding NVTs because integrity check failed 1475

Fixed

  • Use GMP version with leading zero for feed dirs #1287
  • Check db version before creating SQL functions #1304
  • Fix severity_in_level SQL function #1312
  • Fix and simplify SecInfo migration #1331
  • Prevent CPE/NVD_ID from being "(null)" #1369
  • Check DB versions before CERT severity updates #1376
  • Add owner checks to report_count queries #1397

Removed

  • Remove solution element from VT tags #886
  • Drop GMP scanners #1269
  • Reduce Severity Classes #1285
  • Removed Severity Classes #1288
  • Remove remaining use of "Severity Class" in where_levels_auto #1311
  • Remove the functionality "autofp" (Auto False Positives) #1300
  • Remove severity type "debug" #1316
  • Remove element "threat" of element "notes" #1324

20.8.4 - Unreleased

Added

Changed

  • Changed defaults for installation locations #1662 #1665
    • SYSCONFDIR is /etc by default now
    • LOCALSTATEDIR is /var by default now
    • GVM_RUN_DIR is /run/gvm by default now
    • OPENVAS_DEFAULT_SOCKET is /run/ospd/ospd-openvas.sock by default now
    • SYSTEMD_SERVICE_DIR is /lib/systemd/system by default now
    • Removed gvmd.default file and adjusted gvmd.service file accordingly
    • GVM_FEED_LOCK_PATH is /var/lib/gvm/feed-update.lock by default now

Deprecated

Removed

  • Remove BID from GMP documentation #1673

Fixed

  • Fixed the lack of the severities in the display of the applications #1666

20.8.3 - 2021-08-03

Added

  • Add --optimize add-/cleanup-feed-permissions #1612

Changed

  • Use less report cache SQL when adding results #1618

Fixed

  • Solved a performance problem when filtering results by tags #1579
  • Fix VTs hash check and add --dump-vt-verification #1611 #1629 #1641 #1643 #1655
  • Fix memory errors in modify_permission #1613
  • Fix sensor connection for performance reports on failure #1633
  • Sort the "host" column by IPv4 address if possible #1637
  • Fix for parse_iso_time_tz error with musl library #1644

20.8.2 - 2021-06-23

Added

  • Add standard info elem fields for NVTs in get_info #1426
  • Add --ldap-debug option #1439
  • Try to install PostgreSQL extensions automatically #1444 #1483
  • Add auto retry on scanner connection lost during a running task #1452
  • Add --feed-lock-timeout option #1472
  • datetime parser for %Y-%m-%dT%Hh%M for keywords 1518

Changed

  • Improve report counts performance #1438
  • Clean up log config, add gvm-libs log domains #1502
  • Sort missing severity as lowest value in GMP get #1508
  • Use passwordbasedauthentication of gvm-libs instead of auth_utils #1505
  • Set file permissions in greenbone-feed-sync #1575

Fixed

  • Also create owner WITH clause for single resources #1406
  • Fix SQL escaping when adding VT references #1429
  • Update report run status more consistently #1434
  • Improve modify_override errors, fix no NVT case #1435
  • Fix size calculation in --optimize vacuum #1447
  • Fix report host end time check in CVE scans #1462
  • Fix "not regexp ..." filters #1482
  • Escape TLS certificate DNs that are invalid UTF-8 #1486
  • Free alert get data in report_content_for_alert #1526
  • Fix erroneous freeing of ical timezone component #1530
  • Fixed the sorting / filter by username functionality for remediation tickets #1546
  • The alterable indicator is now copied when cloning a task #1553
  • Fix stop resume feature. #1568

Removed

20.8.1 (2021-02-02)

Added

  • Added ability to enter Subject Alternative Names (SAN) when generating a CSR #1246
  • Add filter term 'predefined' #1263
  • Add missing elements in get_nvts and get_preferences GMP doc #1307
  • Add command line options db-host and db-port #1308
  • Add missing config and target to modify_task GMP doc #1310
  • Add version for NVTs and CVEs in make_osp_result #1335
  • Add check if gvmd data feed dir exists #1360 #1362

Changed

  • Extended the output of invalid / missing --feed parameter given to greenbone-feed-sync #1255
  • The xsltproc binary is now marked as mandatory #1259
  • Check feed status without acquiring lock #1266
  • Use timestamp in automatic sensor task names #1390
  • Replace g_file_test with gvm-libs file tests #1391

Fixed

  • Add dummy functions to allow restoring old dumps #1251
  • Fix delta sorting for unusual filter sort terms #1249
  • Fix SCP alert authentication and logging #1264
  • Set file mode creation mask for feed lock handling #1265
  • Ignore min_qod when getting single results by UUID #1276
  • Fix alternative options for radio type preferences when exporting a scan_config #1278
  • Replace deprecated sys_siglist with strsignal #1280
  • Copy instead of moving when migrating predefined report formats #1286
  • Skip DB check in helpers when main process is running #1291
  • Recreate vulns after sync #1292
  • Add SecInfo case to alert check in MODIFY_FILTER #1293
  • For radio prefs in GMP exclude value and include default #1296
  • Add permission check on host in OS host count #1301
  • Auto delete at the start of scheduling so it always runs #1302
  • Fix create_credential for snmpv3. #1305
  • Remove extra spaces when parsing report format param type #1309
  • Correct arg to alert_uuid #1313
  • Switch result filter column 'task' from task ID to name task name #1317
  • Correct check of get_certificate_info return #1318
  • Fix GMP doc text of active elem for notes and overrides #1323
  • Move feed object in trash checks to startup #1325
  • Do not inherit settings from deleted users #1328
  • Delete TLS certificate sources when deleting users #1334
  • Fix SQL errors in SCAP and CERT update #1343
  • Always check for 'All' when deleting selectors #1342
  • Account for -1 of orphans when deleting permission #1345
  • Allow config to sync even if NVT family is not available #1347
  • Check private key when modifying credential #1351
  • Clean up hosts strings before using them #1352
  • Improve SCP username and destination path handling #1350
  • Fix response memory handling in handle_osp_scan #1364
  • Allow config to sync even if NVT family is not available #1366
  • Delete report format dirs last when deleting a user #1368
  • Fix sorting in get_aggregates and its documentation #1375
  • Improve "Failed to find..." messages #1395
  • Memory handling in various occasions #1417

Removed

  • Remove DROP from vulns creation #1281

20.8.0 (2020-08-11)

Added

  • Add setting "BPM Dashboard Configuration" #764
  • Faster SecInfo REF retrieval for GET_REPORTS #793
  • Improve performance of GET_REPORTS #801 #811 #817
  • Speed up the HELP 'brief' case #807
  • Faster startup #826
  • Add option --optimize migrate-relay-sensors #827
  • Add host_id filter for tls_certificates #835
  • Allow use of public key auth in SCP alert #845
  • Refuse to import config with missing NVT preference ID #853 #860
  • Add "Base" scan config #862
  • Add setting "BPM Data" #915
  • Automatically load predefined configs from the feed #931 #933 #934
  • Automatically load predefined port lists from the feed #950 #952
  • Automatically load predefined report formats from the feed #968 #970
  • Print UUIDs in --get-users when --verbose given #991
  • Add --get-roles #992
  • Add --rebuild #998
  • Lock a file around the NVT sync #1002
  • Add a delay for re-requesting scan information via osp #1012
  • Add --optimize option cleanup-result-encoding #1013
  • Perform integrity check of VTs after updates #1024 #1035
  • Ensure path of listening UNIX socket exists #1040
  • Add --rebuild-scap option #1051
  • Stop current scheduling of task when permission denied #1058
  • Trim malloc heap after updating cache #1085
  • Handle QUEUED osp scan status. #1113
  • Add time placeholders for SCP path #1164
  • Expand detection information of results #1182
  • Add filter columns for special NVT tags #1199
  • Add currently_syncing for NVTs in GMP get_feeds #1210
  • Add logging for ANALYZE at end of migration #1211
  • Basic systemd, logrotate and config files have been added #1240

Changed

  • Update SCAP and CERT feed info in sync scripts #810
  • Extend command line options for managing scanners #815
  • Try authentication when verifying GMP scanners #837
  • Try importing private keys with libssh if GnuTLS fails #841
  • Extend GMP API for nvt object to carry a explicit solution element #849 #1143
  • Allow resuming OSPd-based OpenVAS tasks #869
  • Require PostgreSQL 9.6 as a minimum #872
  • Speed up the SCAP sync #875 #877 #879 #881 #883 #887 #889 #890 #891 #901
  • Change rows of built-in default filters to -2 (use "Rows Per Page" setting) #896
  • Force NVT update in migrate_219_to_220 #895
  • Use temp tables to speed up migrate_213_to_214 #911
  • Allow "Start Task" alert method for SecInfo events #960
  • New Community Feed download URL in sync tools #982
  • Change setting UUID to correct length #1018
  • Change licence to AGPL-3.0-or-later #1026
  • Count only best OS matches for OS asset hosts #1029
  • Clean up NVTs set to name in cleanup-result-nvts #1039
  • Improve validation of note and override ports #1045
  • The internal list of current Local Security Checks for the Auto-FP feature was updated #1054
  • Simplify sync lockfile handling #1059
  • Do not ignore empty hosts_allow and ifaces_allow #1064
  • Reduce the memory cache of NVTs #1076
  • Sync SCAP using a second schema #1111
  • Use error variable in osp_get_vts_version(). #1159
  • Include unknown preferences when uploading or syncing configs #1005
  • Set the default OSPD unix socket path to /var/run/ospd/ospd.sock #1238
  • The default OSPD unix path is now configurable #1244

Fixed

  • Add NULL check in nvts_feed_version_epoch #768
  • Faster counting in GET_REPORTS when ignoring pagination #795
  • Improve performance of GET_REPORTS #797
  • Consider results_trash when deleting users #800
  • Update to gvm-portnames-update to use new nomenclature #802
  • Escaping correctly the percent sign in sql statements #818
  • Try to get NVT preferences by id in create_config #821
  • Remove incorrect duplicates from config preference migrator #830
  • Update config preferences after updating NVTs #832
  • Fix order of fingerprints in get_tls_certificates #833
  • Fix notes XML for lean reports #836
  • Fix asset host details insertion SQL #839
  • MODIFY_USER saves comment when COMMENT is empty #838
  • Prevent HOSTS_ORDERING from being '(null)' #859
  • Fix result diff generation to ignore white space in delta reports #861
  • Fix resource type checks for permissions #863
  • Fix result_nvt for new OSP and slave results #865
  • Fix preference ID in "Host Discovery" config #867
  • Fix SQL for tickets with overrides #871
  • Fix result_nvt for new OSP and slave results #873
  • Use right format specifier for merge_ovaldef version #874
  • Fix creation of "Super" permissions #892
  • Add tags used for result NVTs to update_nvti_cache #916
  • Apply usage_type of tasks in get_aggregates (9.0) #912
  • Add target's alive test method before starting a scan. #947
  • Set run status only after getting OSP-OpenVAS scan #948 #951
  • Fix get_system_reports for GMP scanners #949
  • Fix QoD handling in nvti cache and test_alert #954
  • Use stop_osp_task for SCANNER_TYPE_OSP_SENSOR #955
  • Add target's reverse_lookup_* options #959
  • Fix "Start Task" alerts by using alert owner #957
  • Fix Verinice ISM report format and update version #962
  • Always use details testing alerts with a report #964
  • Remove extra XML declaration in Anonymous XML #965
  • Fix SecInfo alert filter conditions #971
  • Accept expanded scheme OIDs in parse_osp_report #984
  • Fix SCAP update not finishing when CPEs are older #986
  • Move report format dirs when inheriting user #989
  • Delete report format dirs when deleting user #993
  • Put 'lean' back to 0 for GET_RESULTS #1001
  • Improve handling of removed NVT prefs #1003
  • Ensure parent exists when moving report format dir #1019
  • Use nvti_qod instead of the old nvti_get_tag() #1022
  • Remove active clause when filtering resources by tag #1025
  • Add user limits on hosts and ifaces to OSP prefs #1033
  • Fix order of tar options in gvm-lsc-deb-creator.sh #1034
  • Fix handling of termination signals #1034
  • Remove db init warning that no longer makes sense #1044
  • Use correct elements to get task ID in wizards #1004 #1046
  • Use current row for iterator_null, instead of first row #1047
  • Setup general task preferences to launch an osp openvas task. #1055
  • Fix doc of get_tasks in GMP doc #1066
  • Improve refs and error handling in NVTs update #1067
  • Fix failure detection for xml_split command #1074
  • Fix deletion of OVAL definition data #1079
  • Fix feed lock in sync script #1088
  • Handle removed CPEs and CVEs in SCAP sync #1097
  • Fix NVTs list in CVE details #1100
  • Fix handling of duplicate settings #1106
  • Fix XML escaping in setting up GMP scans #1122
  • Fix and simplify parse_iso_time and add tests #1129
  • Fix gvm-manage-certs. #1140
  • Fix CVE scanner and results handling #1141
  • Remove user from tags when deleting user #1161
  • Handle INTERRUPTED scans #1146
  • Check hosts in MODIFY_OVERRIDE, as in CREATE_OVERRIDE #1162
  • Preserve task "once" value #1176
  • Check number of args to ensure period_offsets is 0 #1175
  • Fix name handling when creating host assets #1183 #1214
  • Outdated references to "openvassd" have been updated to "openvas" #1189
  • Quote identifiers in SQL functions using EXECUTE #1192
  • Fix handling of interrupted tasks #1207
  • Allow group access to lockfile and fix growing or empty timestamp #1213
  • Ignore whitespace when checking for changed delta results #1219
  • Check permissions when applying tag in filter #1222
  • Add missing min_qod to FILTERS in GET_VULNS response #1224
  • Improve EXE installer NSIS script generation #1226
  • Add qod as name in results columns, for sorting #1243

Removed

  • Remove support for "All SecInfo": removal of "allinfo" for type in get_info #790
  • Removed tag_value() by using nvti_get_tag() #825
  • Remove support for "MODIFY_REPORT" GMP command #823
  • Remove 1.3.6.1.4.1.25623.1.0.90011 from Discovery config (9.0) #847
  • Removed migration tool "gvm-migrate-to-postgres" including the man page #905
  • Remove agents #922
  • Remove GMP COMMANDS #923
  • Remove unused port names facility #1041
  • Add migrator to remove dead hosts #1071
  • Remove classic schedules elements from GMP #1116 #1121
  • Remove parallel from target options. #1119
  • Remove default port list from CREATE_TARGET #1151

9.0.0 (2019-10-11)

Added

  • Added TLS certificates as a new resource type #585 #663 #673 #674 #689 #695 #703 #728 #732 #750 #752 #775 #796
  • Update NVTs via OSP #392 #609 #626 #753 #766
  • Handle addition of ID to NVT preferences. #413 #744
  • Add setting 'OMP Slave Check Period' #491
  • Document switching between releases when using PostgreSQL. #563
  • Cgreen based unit tests for gvmd has been added. #579
  • New usage_type property to distinguish normal scan tasks and configs from compliance audits and policies #613 #625 #633
  • Command cleanup-report-formats for --optimize option #652
  • Enable SecInfo alert checks #670
  • Add an explicit solution column to NVTs #681 #702 #730
  • Document container tasks in GMP doc #688
  • Add explicit columns for the NVT tags "summary", "insight", "detection", "impact" and "affected" #719 #746
  • Add lean option to GET_REPORTS #745
  • Add scanner relays and OSP sensor scanner type #756 #759
  • Add setting "BPM Data" #914

Changed

  • Always convert iCalendar strings to use UTC. #778
  • Check if NVT preferences exist before inserting. #406
  • Raise minimum version for SQL functions. #420
  • Run OpenVAS scans via OSP instead of OTP. #422 #584 #623 #636 #704 #729
  • Request nvti_cache update only at very end of NVT update. #426
  • Consolidate NVT references into unified "refs" element. #427 #739
  • Update gvm-libs version requirements to v11.0. #480
  • Adjust to use new API for vt references. #526
  • Expect NVT sync script in bin directory. #546
  • Change internal handling of NVT XML to use nvti_t. #562
  • Change NVT references like CVEs and BID to general vt_refs. #570 #574 #582
  • Update SQLite to PostgreSQL migration script and documentation. #581 #601 #604 #605
  • Update result diff generation at delta reports #650
  • Check and create default permissions individually #671
  • Add -f arg to sendmail call in email alert #676 #678
  • Change get_tickets to use the status text for filtering. #697
  • Made checks to prevent duplicate user names stricter. #708 #722
  • Send delete command to ospd after stopping the task. #710
  • Check whether hosts are alive and have results when adding them in slave scans. #717 #726 #731 #736
  • Use explicit nvti timestamps #725
  • New columns Ports, Apps, Distance, and Auth in the CSV Hosts report format #733
  • The details attribute of GET_REPORTS now defaults to 0 #747
  • Incoming VT timestamps via OSP are now assumed to be seconds since epoch #754
  • Accelerate NVT feed update #757
  • Combine sync scripts and add GVMd data sync #1155 #1201

Fixed

  • A PostgreSQL statement order issue #611 has been addressed #642
  • Fix iCalendar recurrence and timezone handling #654
  • Fix issues with some scheduled tasks by using iCalendar more instead of old period fields #656
  • Fix an issue in getting the reports from GMP scanners #659 #665
  • Fix GET_SYSTEM_REPORTS using slave_id #668
  • Fix RAW_DATA when calling GET_INFO with type NVT without attributes name or info_id #682
  • Fix ORPHAN calculations in GET_TICKETS #684 #692
  • Fix assignment of orphaned tickets to the current user #685
  • Fix response from GET_VULNS when given vuln_id does not exists #696
  • Make bulk tagging with a filter work if the resources are already tagged #711
  • Check if the scan finished before deleting it and ensure that the task is set to done #714
  • Fix columnless search phrase filter keywords with quotes #715
  • Fix issues importing results or getting them from slaves if they contain "%s" #723
  • Fix sorting by numeric filter columns #751
  • Fix array index error when modifying roles and groups #762
  • Add NULL check in nvts_feed_version_epoch #768
  • Make get_settings return only one setting when setting_id is given #780
  • Fix percent sign escaping in report_port_count #783
  • If the nvt preference is "file" type, encode it into Base64 format #784

Removed

  • The handling of NVT updates via OTP has been removed. #575
  • Bid and xref have been removed from table nvts. #582
  • Database migration from revisions before 185 has been removed. #411 #622
  • Drop SQLite support #610 #612 #614
  • Remove create report task creation #616
  • Remove --backup command line option #615
  • Remove GET_REPORTS type "assets" #617 #620
  • Remove errors for unknown elements #619
  • Remove unused reports column nbefile #675
  • Eliminate get_tag() and parse_tags() #743
  • Remove helper functions and other code for handling OTP #705 #709 #713 #735 #748 #749
  • Remove stray prototype nvt_iterator_copyright #721

8.0.1 (2019-07-17)

Added

  • Special characters in credential login names are allowed. #475
  • Add type filter column to GET_CONFIGS. #486
  • Filter settings for groups, scanners, tickets, users and vulnerabilities have been added. #497
  • Multiple certificate formats for S/MIME are allowed. #551

Changed

  • Functions config_in_use, trash_config_in_use and port_list_in_use returned a count instead of the expected 1 or 0. #460
  • The cache is rebuild for each chunk in CREATE_REPORT. #469
  • Hosts without HOST_START are added in CREATE_REPORT. #479
  • Use host details for login failure in ticket check. #483
  • In create_target() and modify_target() exclude_hosts is cleaned up to be in a consistent format like the included hosts are. #488.
  • Check that roles exist earlier. #493
  • Anonymize more IPs and hostnames in Anonymous XML. #496 #535
  • Ensure that authentication always works for Start Task alerts. #515
  • Get content type when emailing an attached report. #517
  • Allow vuln_iterator_opts_from_filter filter to be NULL. #527
  • Wrap PostgreSQL exclusive table lock in function to prevent error messages in the PostgreSQL log if the lock is not available. #542
  • Trim whole report when resuming slave scans #549
  • Documentation has been improved. #569 #567 #588
  • Update command line options in gvmd man page #565
  • Clean special option keywords in filters. #571 #578 #576
  • If the schedule of a task is available, GET_TASKS will always return the long schedule XML, not just if only the schedules are requested. #500
  • References to OpenVAS have been replaced with GSM #529
  • Buffer inserts when adding results from a slave #641

Fixed

  • Checks on 'type' in GET_FEEDS has been fixed. #462
  • An issue which caused a race condition using the WHERE NOT EXISTS SQL has been addressed. #472
  • A missing argument in check_tickets is added. #477
  • Add missing filter case to result_count. #548
  • Fix create_report cache update at end of results. #490
  • Fix permission checks for trash reports #503
  • Fix MODIFY_TAG and CREATE_TAG responses. #520
  • Fix MODIFY_TAG for all types when given a filter. #523
  • Fix email field validation in create_alert and modify_alert. #534 #545
  • Fix --slave-commit-size option. #555
  • Fix TippingPoint error handling [#592] (greenbone#592)
  • Apply ignore_pagination in delta reports #597
  • Fix getting single unowned resources #607
  • Fix the "Host Authentications" section in PDF / LaTeX reports. #640

Removed

  • Remove -m SMB3 for smbclient in SMB alert, which allows changing the maximum protocol version via the smbclient config instead of forcing a particular one in the alert script. #505
  • Remove "slave" from valid_db_resource_type. #558

8.0.0 (2019-04-05)

Added

  • The new alert method "Alemba vFire" has been added.
  • The file extension from the report format will now be added by SMB alerts.
  • Handling of SSH private keys has been improved, allowing use of EC keys.
  • The --modify-scanner option now also accepts UNIX sockets.
  • Support for report content composition has been added.
  • Remediation support has been added (GMP CREATE_TICKET, GET_TICKETS, etc).
  • The --slave-commit-size option has been added, which can help prevent large updates from GMP scanners blocking the database for a long time.
  • Settings "Hosts Filter" and "Operating Systems Filter" have been added.
  • Performance of GET_REPORTS retrieving the results has been improved.
  • A section about deprecated GMP elements has been added to the documentation.
  • The Sourcefire alert now accepts a password credential for PKCS12 decryption.
  • A new password-only credential type has been added
  • Handling of failed/successful SNMP Authentication has been added to the HTML, LaTeX and PDF report formats.

Changed

  • GMP CREATE_ASSET, its GMP doc and usage by GSA are now more consistent.
  • The file path of SMB alerts can now be set to a directory, using the default report filename from the user's settings.
  • The tag "smb-alert:file_path" on tasks will override the file path of SMB alerts.
  • CREATE_TASK now requires a name.
  • TEST_ALERT now also works if NVTs are missing.
  • LSC errors are now logged as warnings.
  • Missing data in credentials no longer prevents slave tasks from starting. Instead the scan will start without the credential.
  • The GET_TASKS command now only returns the progress of individual hosts when details are requested.
  • The predefined "Discovery", "Host Discovery" and "System Discovery" now mark unreachable hosts as dead.
  • Users will automatically get read permission for themselves.
  • Updates of the NVTs will now ignore duplicate preferences instead of failing.
  • GET_REPORTS will only return Tags of results if requested with the new result_tags attribute.
  • Targets now use TCP-SYN without TCP-ACK when pinging hosts when configured to do so.
  • The source code and GMP documentation have been cleaned up.

Fixed

  • An issue with deleting users has been fixed.
  • An issue with GET_FEEDS returning the wrong feed types has been addressed.
  • Various other code cleanups and improvements.
  • Issues with the predefined report formats not handling hosts and hostnames correctly have been addressed.
  • An issue with incomplete NVT info after feed updates has been addressed.
  • MODIFY_SETTING now checks if text values can be decoded to valid UTF-8.
  • An issue with alert emails missing a line break has been addressed.
  • An issue preventing "Start Task" alerts from running has been fixed.

Removed

  • The option --optimize remove-open-port-results has been removed.
  • The compile-time LOG option has been removed.
  • Report format special case has been removed from send_get_common #456