openvas-libraries 2.0.3 (2009-06-10)

This is the third maintenance release of the openvas-libraries module for the
Open Vulnerability Assessment System (OpenVAS) 2.0 series.

It fixes a small number of issues discovered after the release of
openvas-libraries 2.0.2 and introduces new functionality designed to enable
improvements in other OpenVAS modules.

Main changes since 2.0.2:

* Support for localized security messages (e.g. umlauts) has been re-enabled.
* New functions for GnuTLS-based communication were added.
* New functions for authentication were added.
* An improved caching framework has been added ("NVT Info objects").

Many thanks to everyone who has contributed to this release: Matthew Mundell,
Jan Wagner, Jan-Oliver Wagner, Michael Wiegand and Felix Wolfsteller.


openvas-libraries 2.0.2 (2009-03-06)

This is the second maintenance release of the openvas-libraries module for the
Open Vulnerability Assessment System (OpenVAS) 2.0 series.

It fixes a number of issues discovered after the release of openvas-libraries
2.0.1.

Main changes since 2.0.1:
* A bug which caused plugins to hang or freeze under certain circumstances due
  to a blocking pcap device has been fixed.
* A bug which caused openvas-libraries to send a truncated HTTP version
  identifier when constructing HTTP requests has been fixed.
* A bug which broke the linking process under certain circumstances has been
  fixed.

Many thanks to everyone who has contributed to this release: Tim Brown, Vlatko
Kosturjak, Michael Meyer, Jan-Oliver Wagner, Michael Wiegand and Felix Wolfsteller.


openvas-libraries 2.0.1 (2009-02-06)

This is the first maintenance release of the openvas-libraries module for the
Open Vulnerability Assessment System (OpenVAS) 2.0 series.

It fixes a number of issues discovered after the release of openvas-libraries
2.0.0 and introduces support for upcoming features. Thanks to the continuing
audit of the code, a number of obsolete, unused and/or unnecessary functions
were identified and removed. The amount and the quality of the source code
documentation has been improved as well.

Effect when installing this version: The cache of NVT descriptions (located in
plugin_folder/.desc/) will be rebuild at next start of openvasd.
The cache files used to have the suffix ".desc" instead of ".nasl", e.g.
"x.desc" corrsponds to "x.nasl".  Now, the suffix ".desc" is appended, e.g.
"x.nasl.desc" corresponds to "x.nasl".  This also prevents that e.g. "x.nasl"
and "x.nes" (or "x.oval") will overwrite each others' cache file.
Recommendation: Clean the entire cache directory before restarting openvasd. If
you don't do this, the .desc/ directory will contain all cache files twice.
Other than unnecessary disk space consumption this has no bad effect.


Main changes since 2.0.0:
* Renamed caching files to conflict-free scheme
* Prepared support for sub-directories in plugins_folder in accordance with
  Change Request #24 (http://www.openvas.org/openvas-cr-24.html)
* Support for improved management of SSH credentials has been added in
  accordance with Change Request #20 (http://www.openvas.org/openvas-cr-20.html)
* Established automated source code documentation. HTML-Version is available
  under http://www.openvas.org/src-doc/openvas-libraries/2.0.1/index.html

Bugfixes:
* A configuration issue which caused the build process to fail on Mac OS X has
  been fixed. (Solves: #761)
* Missing includes which caused the build process to fail on Darwin and NetBSD
  have been added. (Solves: #860, #862)

Many thanks to everyone who has contributed to this release: Tim Brown,
Stjepan Gros, Jan-Oliver Wagner, Felix Wolfsteller and Michael Wiegand.


openvas-libraries 2.0.0 (2008-12-17)

This is the 2.0.0 release of OpenVAS.

If you have used the 2.0-beta1, -beta2 or -rc1 release, we recommend that you
update all your OpenVAS modules (openvas-libraries, openvas-libnasl,
openvas-server and openvas-client) to 2.0.0.

If you are currently using the 1.0.x branch and want to evaluate OpenVAS 2.0.0,
we recommend that you install 2.0.0 separately from your OpenVAS 1.0
installation. Instructions on how to do this are available from the OpenVAS
website.

Main changes since 2.0-rc1:
* A bug causing segmentation faults on server startup has been fixed.
* The build environment has been updated.

Main changes since 1.0.2:
* Support for the new script_tag command in NASL scripts has been added.
* 64-bit compatibility has been considerably improved.
* Support for transferring NVT signature information to the client has been added.
* Switch from Nessus plugin IDs to OIDs.
* Switch from Nessus Transfer Protocol 1.2 to OpenVAS Transfer Protocol 1.0.

Many thanks to everyone who has contributed to this release: Tim Brown, Stjepan
Gros, Matthew Mundell, Vlatko Kosturjak, Jan Wagner, Jan-Oliver Wagner, Felix
Wolfsteller and Michael Wiegand.


openvas-libraries 2.0-rc1 (2008-12-05)

This release is the first release candidate for the upcoming 2.0 release of OpenVAS.

Unless serious bugs are discovered, this release candidate will become the final
OpenVAS 2.0 release. Users are encouraged to test this release and to report
bugs to the OpenVAS bug tracker located at http://bugs.openvas.org/ .

If you have used the 2.0-beta2 release, we recommend that you update all your
OpenVAS modules (openvas-libraries, openvas-libnasl, openvas-server and
openvas-client) to 2.0-rc1.

If you are currently using the stable 1.0.x branch and want to take part in
testing this release candidate, we recommend that you install 2.0-rc1 separately
from your OpenVAS 1.0 installation. Instructions on how to do this are available
from the OpenVAS website.

Main changes since 2.0-beta2:
* Support for the new script_tag command in NASL scripts has been added.
* Code quality has been improved; a number of potential buffer overflows have been fixed.
* Minor bugfixes.

Many thanks to everyone who has contributed to this release: Tim Brown, Matthew
Mundell, Felix Wolfsteller and Michael Wiegand.


openvas-libraries 2.0-beta2 (2008-11-14)

This release is the second beta version of the upcoming 2.0 release of OpenVAS.
It contains improved 64-bit compatibility, support for transferring NVT
signature information to the client and various improvements.

This release is intended to contain all features intended for the final OpenVAS
2.0 release. Users are encouraged to test this release and to report bugs to the
OpenVAS bug tracker located at http://bugs.openvas.org/ .

If you have used the 2.0-beta1 release, we recommend that you update all your
OpenVAS modules (openvas-libraries, openvas-libnasl, openvas-server and
openvas-client) to 2.0-beta2.

If you are currently using the stable 1.0.x branch and want to take part in the
beta phase for 2.0, we recommend that you install 2.0-beta2 separately from your
OpenVAS 1.0 installation. Instructions on how to do this are available from the
OpenVAS website.

Main changes since 2.0-beta1:
* 64-bit compatibility has been considerably improved.
* Debian packaging files have been updated.
* Support for transferring NVT signature information to the client has been added.
* Bugfixes.
* Various code cleanups.

Many thanks to everyone who has contributed to this release: Tim Brown, Stjepan
Gros, Jan-Oliver Wagner, Michael Wiegand and Felix Wolfsteller.


openvas-libraries 2.0-beta1 (2008-09-23)

This release is a first beta version of the upcoming 2.0 release of OpenVAS.
This is the first release of openvas-libraries to fully implement OID support
and marks the switch from the Nessus Transport Protocol (NTP) to the improved
and cleaned up OpenVAS Transport Protocol (OTP). In addition, this release
contains minor bug fixes and updates to distribution files.

OpenVAS 2.0 will introduce a full set of new modules for OpenVAS Server
(openvas-libraries, openvas-libnasl and openvas-server) and the a new
OpenVAS-Client. The only  module OpenVAS 1.0 and OpenVAS 2.0 will  share is
openvas-plugins. This means that the OpenVAS NVT Feed is compatible with both
generations of OpenVAS.

However, in case you plan to try out the new generation of OpenVAS, you should
install it separately from OpenVAS 1.0 installation. Instructions on how to do
this will be added to the OpenVAS homepage after all relevant modules are
released as 2.0-beta1. A separate announcement will officially start the beta
testing phase for OpenVAS 2.0.

Main changes in this release:
* Fix to incorrect library usage that prevented building RPM packages under
  certain circumstances.
* Updates of Debian packaging files.
* Switch from Nessus plugin IDs to OIDs.
* Switch from Nessus Transport Protocol 1.2 to OpenVAS Transport Protocol 1.0.
* Fix to incorrect usage of string functions that could have lead to buffer
  overflows under certain circumstances.

Many thanks to everyone who has contributed to this release: Tim Brown, Vlatko
Kosturjak, Jan Wagner, Jan-Oliver Wagner and Michael Wiegand

openvas-libraries 1.0.2 (2008-06-30)

This release contains improvements to plugin handling and to the packaging files
for various distributions as well as minor bug fixes and cleanups.
Apart from this, this release prepares OID support for OpenVAS.

It is recommended to update to this release, because future releases
of openvas-libnasl and openvas-libnasl will require openvas-libraries 1.0.2
as minimum version.

* Updates of the OpenSUSE, Fedora and Debian packaging files.
* Preparation for support for OpenVAS OIDs.
* Increased internal storage space for plugin preferences to allow for plugins
  with a large number of options.
* Fixed a bug that resulted in incorrect memory allocation on certain 64bit
  installations.
* Removed support for unencrypted communication with the client.
* Fixed a configuration issue that broke the build process on certain 64bit
  installations.
* Various code cleanups.

openvas-libraries 1.0.1 (2008-04-01)

Comprehensive code-reduction, include- and config-change release.

The changes might cause compile failures
or other defects for various operating systems.
Reports on problems are appreciated.

* Replaced inclusion of includes.h for many modules by respective
  separate include files.
* Configure checks for libresolv have been improved but still fail
  on some systems.
* File includes.h is not installed anymore.
* Compile option "--enable-bpf-sharing" and corresponding
  functionalityx has been removed.
* Added several include files which will be installed under include/openvas/
  These have been extracted from libopenvas.h which, for convenience,
  still includes all of the single new include files.
* Removed various unused modules and functions.
* Various fixes to reduce flawfinder warnings.
* Various fixes to reduce compiler warnings.
* Updates of the Debian packaging files.

openvas-libraries 1.0.0 (2007-10-12)

First stable release.

* Now installs header files hosts_gatherer.h and hg_utils.h.
* More code cleanups.

openvas-libraries 0.9.1 (2007-09-13)

Further cleanups release.

Changes since 0.9.0 (2007-09-13):

* Renamed libhosts_gatherer to libopenvas_hg to
  resolved the last remaining filename conflict
  with nessus-libraries.
* Introduced its own versioning (independent of
  the other OpenVAS modules).
* Internal package improvements for less conflicts
  with nessus-libraries and less conflicts with LFSH.
* Switched on all compile-time warnings.
* Fixed some code warnings.

openvas-libraries 0.9.0 (2007-07-27)

The first initial release of openvas-libraries
after the fork from Nessus 2.2.x.

Main changes are:

* Replace OpenSSL by GNU/TLS (therefore it is allowed now to distribute
  binary packages with SSL-support)
* SSL now mandatory.
* Removed libpcap-nessus entirely. Now the system one is to be used.
* Many cleanups of ancient remains (still many to come)
* Removed various W32-specific elements, because W32 isn't
  a taget system anyway.
* Lots of renaming to avoid conflicts with parallel
  Nessus installation
