Releases: greenbone/openvas-scanner
OpenVAS Scanner v6.0+beta1
This is the first beta release of the openvas-scanner module 6.0 for the
Greenbone Vulnerability Management (GVM) framework.
This version inherits all elements of the former openvas-libraries that were
used by OpenVAS Scanner only.
Apart from this, the module covers a number of significant advances
and clean-ups.
Many thanks to everyone who has contributed to this release:
Hani Benhabiles, Christian Fischer, Juan Jose Nicola, Bjoern Ricks,
Jan-Oliver Wagner and Michael Wiegand.
Main changes compared to 5.1:
- The required minimum version of new dependency GVM Libraries is 1.0.
- Many files which are only used for openvas-scaner have been moved to this
module from openvas-libraries. Therefore many include directives have been
adapted to the new source code. The dependency to module openvas-libraries
was removed. - OTP has been changed regarding the NVT category: It is now sent as integer
instead of as a string. - Plugin scheduler has been improved.
- NASL cryptography support has been updated.
- The use of winexe has been replaced with using wmiexec.py.
- Support for bigger numbers has been added to nasl_int function.
- The logging method has been completely re-arranged to follow the standard
logging methodology like all other GVM modules. Apart from unification,
essentially the scanner log now has timestamps.- openvassd.dump does not exist anymore: The log information are now handled
via central logging with respective log domain. - Log location has been moved to /var/log/gvm/.
- Support for using GLIB based logging has been added and logging messages
have been reviewed and improved. - It is now possible to configure the logging via /etc/openvas/openvassd_log.conf
- openvassd.dump does not exist anymore: The log information are now handled
- openvas-nasl-lint has been improved.
- Handling of vhost has been improved.
- The scanner inter-process communication has been simplified.
- The use of struct arglist has been reduced, among others global struct for scans
has been changed to struct global_scan. Other uses of arglist we transformed
into redis-based data handling. - Handling of non_simultaneous_ports_list has been improved.
- Handling of the plugin preferences and their communication to the client have
been improved. - Host/dead and Host/ping_failed are checked before attempting to launch the
plugin. - Greenbone NVT sync process has been improved: The scanner detects now on its own
when the feed was updated and automatically loads new and changed NVTs. - Location of access key is now configurable.
- The NASL command script_id has been removed.
- The NASL command script_summary has been removed.
- Command line option --gnupg-home has been removed.
- openvas_popen has been replaced with GLib routine.
- Error handling has been improved.
- Documentation has been updated.
- Several memory management aspects have been improved.
- Various code cleanups and improvements, partly derived from static code analysis.
- The CMake building process was improved.
- Compilation issue with gcc 7 due to a switch fallthrough has been addressed.
- Minimum required version of glib has been raised to 2.42.
- Minimum required version of cmake has been raised to 3.0.
- Minimum required version of libssh has been raised to 0.6.0.
OpenVAS Scanner v5.0.9
This is the ninth maintenance release of the openvas-scanner 5.0 module for
the Open Vulnerability Assessment System release 8 (OpenVAS-8).
Many thanks to everyone who contributed to this release:
Hani Benhabiles, Christian Fischer, Jan-Oliver Wagner and Juan Jose Nicola.
Main changes compared to 5.0.8:
- Redis performance has been improved reducing the number of queries during
a scan. - An issue related to the dependency cycle detection has been addressed.
OpenVAS Scanner v5.1.2
This is the second maintenance release of the openvas-scanner 5.1 module
for the Open Vulnerability Assessment System 9 (OpenVAS-9).
Many thanks to everyone who has contributed to this release:
Hani Benhabiles, Björn Ricks, Michael Wiegand, and Juan José Nicola.
Main changes compared to 5.1.1:
- Plugin scheduling has been improved.
- An issue which caused segmentation faults under certain circumstances when
openvas-scanner was built with GnuTLS < 3.3.0 has been addressed. - The use of hostname and IP while logging has been made more consistent.
- An issue which caused NVTs to be executed out of sequence has been addressed.
- An issue which caused the main scanner process to terminate prematurely when
receiving a SIGHUP signal under certain circumstances has been addressed. - Increased dependency for openvas-libraries from 9.0.0 to 9.0.2.
- A Redis error is considered fatal and all running scans are stopped. A
message is sent to the client and the NVTs are reloaded. - A new progress bar style in which dead host are not taken in account was
added, which makes more time realistic the progress bar. - An issue which caused low scan performance has been addressed.
- The preference log_whole_attack is now an scanner-only preference.
- Several memory management issues have been addressed.
- Load-up plugins process is now a forked child process, which prevent main
process memory footprint growth. - Plugin preferences are sent directly to the client.
- Full nvticache has been moved from .nvti files to Redis.
- An issue with dependency cycle detection has been addressed.
- An issue which cause complete deletion of nvticache before reloading has
been addressed.