Skip to content

Releases: greenbone/openvas-scanner

OpenVAS Scanner v6.0+beta1

18 Apr 15:09
ccb21c3
Compare
Choose a tag to compare
Pre-release

This is the first beta release of the openvas-scanner module 6.0 for the
Greenbone Vulnerability Management (GVM) framework.

This version inherits all elements of the former openvas-libraries that were
used by OpenVAS Scanner only.

Apart from this, the module covers a number of significant advances
and clean-ups.

Many thanks to everyone who has contributed to this release:
Hani Benhabiles, Christian Fischer, Juan Jose Nicola, Bjoern Ricks,
Jan-Oliver Wagner and Michael Wiegand.

Main changes compared to 5.1:

  • The required minimum version of new dependency GVM Libraries is 1.0.
  • Many files which are only used for openvas-scaner have been moved to this
    module from openvas-libraries. Therefore many include directives have been
    adapted to the new source code. The dependency to module openvas-libraries
    was removed.
  • OTP has been changed regarding the NVT category: It is now sent as integer
    instead of as a string.
  • Plugin scheduler has been improved.
  • NASL cryptography support has been updated.
  • The use of winexe has been replaced with using wmiexec.py.
  • Support for bigger numbers has been added to nasl_int function.
  • The logging method has been completely re-arranged to follow the standard
    logging methodology like all other GVM modules. Apart from unification,
    essentially the scanner log now has timestamps.
    • openvassd.dump does not exist anymore: The log information are now handled
      via central logging with respective log domain.
    • Log location has been moved to /var/log/gvm/.
    • Support for using GLIB based logging has been added and logging messages
      have been reviewed and improved.
    • It is now possible to configure the logging via /etc/openvas/openvassd_log.conf
  • openvas-nasl-lint has been improved.
  • Handling of vhost has been improved.
  • The scanner inter-process communication has been simplified.
  • The use of struct arglist has been reduced, among others global struct for scans
    has been changed to struct global_scan. Other uses of arglist we transformed
    into redis-based data handling.
  • Handling of non_simultaneous_ports_list has been improved.
  • Handling of the plugin preferences and their communication to the client have
    been improved.
  • Host/dead and Host/ping_failed are checked before attempting to launch the
    plugin.
  • Greenbone NVT sync process has been improved: The scanner detects now on its own
    when the feed was updated and automatically loads new and changed NVTs.
  • Location of access key is now configurable.
  • The NASL command script_id has been removed.
  • The NASL command script_summary has been removed.
  • Command line option --gnupg-home has been removed.
  • openvas_popen has been replaced with GLib routine.
  • Error handling has been improved.
  • Documentation has been updated.
  • Several memory management aspects have been improved.
  • Various code cleanups and improvements, partly derived from static code analysis.
  • The CMake building process was improved.
  • Compilation issue with gcc 7 due to a switch fallthrough has been addressed.
  • Minimum required version of glib has been raised to 2.42.
  • Minimum required version of cmake has been raised to 3.0.
  • Minimum required version of libssh has been raised to 0.6.0.

OpenVAS Scanner v5.0.9

27 Mar 10:23
a184d49
Compare
Choose a tag to compare

This is the ninth maintenance release of the openvas-scanner 5.0 module for
the Open Vulnerability Assessment System release 8 (OpenVAS-8).

Many thanks to everyone who contributed to this release:
Hani Benhabiles, Christian Fischer, Jan-Oliver Wagner and Juan Jose Nicola.

Main changes compared to 5.0.8:

  • Redis performance has been improved reducing the number of queries during
    a scan.
  • An issue related to the dependency cycle detection has been addressed.

OpenVAS Scanner v5.1.2

07 Mar 12:01
90d04e3
Compare
Choose a tag to compare

This is the second maintenance release of the openvas-scanner 5.1 module
for the Open Vulnerability Assessment System 9 (OpenVAS-9).

Many thanks to everyone who has contributed to this release:
Hani Benhabiles, Björn Ricks, Michael Wiegand, and Juan José Nicola.

Main changes compared to 5.1.1:

  • Plugin scheduling has been improved.
  • An issue which caused segmentation faults under certain circumstances when
    openvas-scanner was built with GnuTLS < 3.3.0 has been addressed.
  • The use of hostname and IP while logging has been made more consistent.
  • An issue which caused NVTs to be executed out of sequence has been addressed.
  • An issue which caused the main scanner process to terminate prematurely when
    receiving a SIGHUP signal under certain circumstances has been addressed.
  • Increased dependency for openvas-libraries from 9.0.0 to 9.0.2.
  • A Redis error is considered fatal and all running scans are stopped. A
    message is sent to the client and the NVTs are reloaded.
  • A new progress bar style in which dead host are not taken in account was
    added, which makes more time realistic the progress bar.
  • An issue which caused low scan performance has been addressed.
  • The preference log_whole_attack is now an scanner-only preference.
  • Several memory management issues have been addressed.
  • Load-up plugins process is now a forked child process, which prevent main
    process memory footprint growth.
  • Plugin preferences are sent directly to the client.
  • Full nvticache has been moved from .nvti files to Redis.
  • An issue with dependency cycle detection has been addressed.
  • An issue which cause complete deletion of nvticache before reloading has
    been addressed.