Skip to content

Releases: greenbone/gvmd

gvmd 22.4.0

18 Jul 14:22
Compare
Choose a tag to compare

22.4.0 - 2022-07-22

Added

  • -optimize option "cleanup-sequences" 7e2be3138
  • Added the appliance_status response field to the get_license command c9affb52e
  • package_unreliable QOD type translation 85f16f208
  • package_unreliable QOD type translation 3f438ce22
  • Backtrace output when a sigsegv occurs. 8b30cd77f
  • Log failing xsltproc calls as warning #1756 ef9b4228d
  • -broker-address command line option ee6123207
  • -rebuild-gvmd-data to man page d7a779b8a
  • -optimize add-/cleanup-feed-permissions 9e97c38d4
  • -feed-lock-timeout option a932f70fb
  • -ldap-debug option b22171baf
  • Send the script timeout to the scanner as script preferences #1670
  • get_license and modify_license #1642, #1692, #1696
  • basic Sentry integration and logging #1550
  • new modification_time column for reports #1513, #1519, #1590

Changed

  • Allow overriding LOG_CMD for sync script 683b7e1a8
  • Don't create runtime directory with make install #1824 198c356e3
  • Automatically update pg-gvm in check_db_extensions 4fbc79395
  • Remove EnvironmentFile from gvmd.service file f2228a320
  • Use $TMPACCESSKEY when syncing enterprise feed b3f4c4bf4
  • Standardize rsync options f6c9b66d9
  • Disable table_driven_lsc in policies 9b15dc865
  • Get NVT feed info via OSP 692e21c2a
  • Update GVMD_FEED_DIR to /var/lib/gvm/data-objects/gvmd/22.04 6aa4b2e7a
  • Load data objects from new feed paths 51716c88f
  • Use new feed dir structure in sync scripts 0a769ec3c
  • Improve log message for getting the feed version 0fdb01814
  • Improve init_preference_iterator SQL query performance 5a5cbb945
  • Change some migration and OSP warnings to info b3cced2bc
  • Use GVMD_RUN_DIR instead of GVM_RUN_DIR e53ae5731
  • Use full path GVMD_PID_PATH for PID files 3fea5a9f4
  • Raise required gvm-libs version to 21.10 299946bdf
  • Replace blocking table locks with a non-blocking retry loop 44a054ad3
  • Rename the date column of reports to creation_time #1520
  • Change report timestamp filter and iterator columns #1512
  • Use pg-gvm extension for C PostgreSQL functions #1400, #1453

Bug Fixes

  • Return the correct error message, when wrong severity input is send to overrides (#1843) 1a96ac530
  • Fix logging in sync script if no syslog is available a726dfdf1
  • Use g_memdup2 instead of the deprecated g_memdup 4ad2491fd
  • Fix handling of SSH keys in modify_credential 7b16d2e6f
  • Trigger libtheia container build (#1817) 26bc13aa7
  • Fix iCal next time calculation, use new SQL func aa4f9a925
  • Fix GMP doc for get_assets command 006c130be
  • task status overwrite when a task is stopped and quickly restarted (not resumed) #1779 a34fa7050
  • Avoid closing manager socket FDs twice 12c700331
  • Initialize roles with NULL 705ce8a51
  • Test if location is null in cve_scan_host to prevent an assertion error d979e4580
  • -dump-vt-verification error message ca30e3856
  • Update subject alternative name in certificate generation #1503
  • Fix migration to DB version 242 from gvmd 20.08 #1498
  • Improve VT version handling for CVE & OVAL results #1496

Refactor

Removed

  • Remove Network Source Interface from gvmd #1511
  • Removed OVAL definitions from gvmd #1525
  • Removed OVAL definitions from GMP and gvmd documentation 1551
  • Removed the Business Process Map from gvmd 1627
  • Removed ifaces element from users #1676
  • Removed OSP scanners from gvmd #1689 #1691 #1694 #1701

gvmd 21.4.5

22 Feb 10:52
Compare
Choose a tag to compare

21.4.5 - 2022-02-22

Added

Changed

  • Use GVMD_RUN_DIR instead of GVM_RUN_DIR 4ad3fa76a
  • Use full path GVMD_PID_PATH for PID files a9be3d718
  • Replace blocking table locks with a non-blocking retry loop 3dc4a94b5
  • Change some migration and OSP warnings to info 680b32659
  • Change failed call to xsltproc to a warning 712612d63

Bug Fixes

  • Test if location is null in cve_scan_host to prevent an assertion error 1a54ae4ee
  • Choose correct scan launch function for OSP scans (Fix for #1705) 3a978264d

gvmd 21.4.4

12 Oct 06:59
Compare
Choose a tag to compare

21.4.4 - 2021-10-12

Added

  • Add --rebuild-gvmd-data command line option #1680 #1683

Fixed

  • Ensure gvmd sends error messages if gvmcg fails #1682
  • Fix resume task.
    #1679
    #1695
  • Added a dedicated error message for the create ticket dialogue when the create permission permission is missing #1686
  • Fix import of report results / errors without host #1687

gvmd 20.8.4

12 Oct 06:51
Compare
Choose a tag to compare

20.8.4 - 2021-10-12

Changed

  • Changed defaults for installation locations #1662 #1665
    • SYSCONFDIR is /etc by default now
    • LOCALSTATEDIR is /var by default now
    • GVM_RUN_DIR is /run/gvm by default now
    • OPENVAS_DEFAULT_SOCKET is /run/ospd/ospd-openvas.sock by default now
    • SYSTEMD_SERVICE_DIR is /lib/systemd/system by default now
    • Removed gvmd.default file and adjusted gvmd.service file accordingly
    • GVM_FEED_LOCK_PATH is /var/lib/gvm/feed-update.lock by default now

Removed

  • Remove BID from GMP documentation #1673

gvmd 21.4.3

03 Aug 14:28
Compare
Choose a tag to compare

21.4.3 - 2021-08-03

Fixed

  • Fix sending prefs for whole, growing VT families #1603
  • Add trash columns for target "elevate" credential #1636

Added

  • Add --optimize add-/cleanup-feed-permissions #1612

Changed

  • Use less report cache SQL when adding results #1618

Fixed

  • Fix VTs hash check and add --dump-vt-verification #1611 #1629
  • Solved a performance problem when filtering results by tags #1579
  • Fix VTs hash check and add --dump-vt-verification
    #1611
    #1629
    #1641
    #1643
    #1655
  • Fix memory errors in modify_permission #1613
  • Fix sensor connection for performance reports on failure #1633
  • Sort the "host" column by IPv4 address if possible #1637
  • Fix for parse_iso_time_tz error with musl library #1644

gvmd 20.8.3

03 Aug 12:27
Compare
Choose a tag to compare

20.8.3 - 2021-08-03

Added

  • Add --optimize add-/cleanup-feed-permissions #1612

Changed

  • Use less report cache SQL when adding results #1618

Fixed

  • Solved a performance problem when filtering results by tags #1579
  • Fix VTs hash check and add --dump-vt-verification
    #1611
    #1629
    #1641
    #1643
    #1655
  • Fix memory errors in modify_permission #1613
  • Fix sensor connection for performance reports on failure #1633
  • Sort the "host" column by IPv4 address if possible #1637
  • Fix for parse_iso_time_tz error with musl library #1644

gvmd 21.4.2

28 Jun 13:33
Compare
Choose a tag to compare

21.4.2 - 2021-06-28

Fixed

  • Amended Test, if the ssh elevate credential is different from the ssh credential #1586
  • Added the missing GMP documentation for the ssh elevate credential #1591

gvmd 21.4.1

23 Jun 14:28
Compare
Choose a tag to compare

21.4.1 - 2021-06-23

Added

  • Add NVT tag "deprecated" #1536
  • Extend GMP for new privilege escalation credential #1535
  • Include new ssh elevate (escalation) credential in OSP request #1539
  • Add test if the ssh elevate credential is different from the ssh credential #1582

Changed

  • Update default log config #1501

Fixed

  • Improve VT version handling for CVE & OVAL results #1496
  • Fix migration to DB version 242 from gvmd 20.08 #1498
  • Update subject alternative name in certificate generation #1503
  • Fix whole-only config family selection #1517
  • Migrate GMP Scanners to OSP Sensors #1533
  • Solved a peformance problem for tasks after scanning lots of hosts #1567
  • Solved a performance problem when filtering results by tags #1579

gvmd 20.8.2

23 Jun 13:13
Compare
Choose a tag to compare

20.8.2 - 2021-06-23

Added

  • Add standard info elem fields for NVTs in get_info #1426
  • Add --ldap-debug option #1439
  • Try to install PostgreSQL extensions automatically #1444 #1483
  • Add auto retry on scanner connection lost during a running task #1452
  • Add --feed-lock-timeout option #1472
  • datetime parser for %Y-%m-%dT%Hh%M for keywords 1518

Changed

  • Improve report counts performance #1438
  • Clean up log config, add gvm-libs log domains #1502
  • Sort missing severity as lowest value in GMP get #1508
  • Use passwordbasedauthentication of gvm-libs instead of auth_utils #1505
  • Set file permissions in greenbone-feed-sync #1575

Fixed

  • Also create owner WITH clause for single resources #1406
  • Fix SQL escaping when adding VT references #1429
  • Update report run status more consistently #1434
  • Improve modify_override errors, fix no NVT case #1435
  • Fix size calculation in --optimize vacuum #1447
  • Fix report host end time check in CVE scans #1462
  • Fix "not regexp ..." filters #1482
  • Escape TLS certificate DNs that are invalid UTF-8 #1486
  • Free alert get data in report_content_for_alert #1526
  • Fix erroneous freeing of ical timezone component #1530
  • Fixed the sorting / filter by username functionality for remediation tickets #1546
  • The alterable indicator is now copied when cloning a task #1553
  • Fix stop resume feature. #1568

Removed

Greenbone Vulnerability Manager v21.4.0

16 Apr 07:49
d8d82b4
Compare
Choose a tag to compare

Added

Changed

  • Move EXE credential generation to a Python script #1260 #1262
  • Clarify documentation for --scan-host parameter #1277
  • In result iterator access severity directly if possible #1321
  • Change SCAP and CERT data to use "severity" consistently #1333 #1357 #1365 #1457 #1476
  • Expect report format scripts to exit with code 0 #1383
  • Send entire families to ospd-openvas using VT_GROUP #1384
  • Limit "whole-only" config families to "growing" and "every nvt" #1386
  • Access current user with an SQL function #1399
  • Refactor modify_config, allowing multiple simultaneous changes #1404
  • Add retry on a deadlock within sql#sql #1460
  • Don't require report format plugin for XML report #1466
  • Wording of Rebuilding NVTs because integrity check failed 1475

Fixed

  • Use GMP version with leading zero for feed dirs #1287
  • Check db version before creating SQL functions #1304
  • Fix severity_in_level SQL function #1312
  • Fix and simplify SecInfo migration #1331
  • Prevent CPE/NVD_ID from being "(null)" #1369
  • Check DB versions before CERT severity updates #1376
  • Add owner checks to report_count queries #1397

Removed

  • Remove solution element from VT tags #886
  • Drop GMP scanners #1269
  • Reduce Severity Classes #1285
  • Removed Severity Classes #1288
  • Remove remaining use of "Severity Class" in where_levels_auto #1311
  • Remove the functionality "autofp" (Auto False Positives) #1300
  • Remove severity type "debug" #1316
  • Remove element "threat" of element "notes" #1324