Subject: CVS commit: pkgsrc/security
To: None <pkgsrc-changes@netbsd.org>
From: Thorsten Frueauf <frueauf@netbsd.org>
List: pkgsrc-changes
Date: 10/13/2002 12:11:54
Module Name: pkgsrc
Committed By: frueauf
Date: Sun Oct 13 09:11:54 UTC 2002
Modified Files:
pkgsrc/security/libnasl: PLIST distinfo
pkgsrc/security/nessus: Makefile.common
pkgsrc/security/nessus-core: distinfo
pkgsrc/security/nessus-libraries: Makefile PLIST distinfo
pkgsrc/security/nessus-plugins: PLIST distinfo
Log Message:
Update nessus{-libraries,-core,-plugins} and libnasl to 1.2.6.
Changes since 1.2.0:
1.2.6 :
. changes by Michael Slifcak (Michael.Slifcak@guardent.com)
- Added Bugtraq cross reference in the plugins
- Added support for BID in nessusd (this has yet to be done on the
client side)
. changes by Axel Nennker (Axel.Nennker@t-systems.com)
- fixed the xml and html outputs
- fixed array issues in a couple of plugins
. changes by Michel Arboi (arboi@bigfoot.com)
- find_service now detects services protected by TCP wrappers or ACL
- find_service detects gnuserv
- ptyexecvp() replaced by nessus_popen() (*)
. changes by Renaud Deraison (deraison@cvs.nessus.org)
- Fixed a bug which may make nasl interpret backquoted strings
(\n and \r) received from the network (problem noted by Pavel Kankovsky)
- nmap_wrapper.nes calls _exit() instead of exit() (*)
- Solved the lack of bpf's on Free/Open/NetBSD and MacOSX by
sharing _one_ among all the Nessus processes. As a result, Nessus's
ping is much more effective on these platforms
- bugfix in plug_set_key() which would eventually make some scripts
take too long when writing in the KB
- Plugins of family ACT_SETTINGS are run *after* plugins of family
ACT_SCANNERS
- replaced the implementation of md5 which was used when OpenSSL is disabled
by the one from RSA (the old one would not work on a big-endian host)
- Fixed plugins build issues on MacOS X
- The nessus client compiles and links against GTK+-2.0. Of course, it will
be horrible and instable, as the GTK team does not care about backward
compatibility
(*) These two modifications solve the problems of nmap hanging under FreeBSD
1.2.5 :
. changes by Michel Arboi (arboi@bigfoot.com)
- find_service now displays unknown services that run on assigned ports
- read_stream_connection smarter (smaller timeout)
- find_service sometimes declared IDENT as "unknown"
. changes by Renaud Deraison (deraison@cvs.nessus.org)
- Fixed a deadlock that would prevent some plugins from completing
- Fixed a possible (although rare) corruption issue in the reports
(the script IDs could under some circumstances be random)
- Fixed a potential segfault in the execution of nasl scripts
1.2.4 :
. changes by Renaud Deraison (deraison@cvs.nessus.org)
- Reverted back to autoconf 2.13.
- Bug fix in nessus-core/nessusd/pluginlaunch.c - under some circumstances,
data might have be lost in the reports
- Fixed a bug in several plugins for web checks (under some circumstances,
a plugin would do N x N checks against the remote web servers (where
N equals to the number of web servers running on the remote host)
1.2.3 :
. changes by Isaac Dawson (idawson@securitymanagementpartners.com)
- New html output layout.
. changes by Pasi Eronen (pasi.eronen@nixu.com)
- fix in nmap_wrapper
. changes by Renaud Deraison (deraison@cvs.nessus.org)
- Fixed a bug which could make, under some circumstances, make nessusd
crash the host it is running on.
- If the option log_whole_attack is set to "no", then only the begining
and the end of the attack is logged (and not the time each plugin takes)
- Improved no404.nasl to further reduce false positives
- Bug fix in nessusd - under some rare circumstances, report data could
be lost (if many many plugins were enabled at the same time and were
sending data at the same time).
- UDP packets are resent while we wait for a reply (avoids to loose packets
en route)
- Fixed the option "auto_enable_dependencies" which would not always work
- Sending a SIGTERM to the nessus client during a command line scan
forces it to save its result to the current test file
- Non-printables characters are not shown in the report any more
1.2.2 :
. changes by Renaud Deraison (deraison@cvs.nessus.org)
- In the GUI, while running a scan, plugins names are only updated once
in a while (saves CPU)
- Bugfix in the client : some host names would make the client crash
- Repaired the '-P' switch in the client
1.2.1 :
. changes by Simon Law (sfllaw@engmail.uwaterloo.ca)
- Made a manpage for nessus-mkcert-client(1) and have it installed by
the Makefile
- Revised most other manpages for missing information and to increase
clarity
To generate a diff of this commit:
cvs rdiff -r1.3 -r1.4 pkgsrc/security/libnasl/PLIST
cvs rdiff -r1.6 -r1.7 pkgsrc/security/libnasl/distinfo
cvs rdiff -r1.13 -r1.14 pkgsrc/security/nessus/Makefile.common
cvs rdiff -r1.6 -r1.7 pkgsrc/security/nessus-core/distinfo
cvs rdiff -r1.6 -r1.7 pkgsrc/security/nessus-libraries/Makefile
cvs rdiff -r1.3 -r1.4 pkgsrc/security/nessus-libraries/PLIST
cvs rdiff -r1.8 -r1.9 pkgsrc/security/nessus-libraries/distinfo
cvs rdiff -r1.4 -r1.5 pkgsrc/security/nessus-plugins/PLIST
cvs rdiff -r1.6 -r1.7 pkgsrc/security/nessus-plugins/distinfo
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.