openvas-client 2.0.5 (2009-08-13)

This is the fifth maintenance release of the openvas-client module
for the Open Vulnerability Assessment System (OpenVAS) 2.0-series.

It fixes some issues discovered after the release of openvas-client
2.0.4 and adds some requested features.

The main changes affect report conversion with the command line
version of the client. It now respects severity overrides
from the file ".openvas/severity_overrides.xml" which can be
edited through the graphical user interface or by hand.
At the same time, the severity filter now supports pattern
matching.

Main changes since 2.0.4:

* A global timeout for NVTs can be defined from within the
  "Plugins" section of the GUI.
* The Severity Overrides Manager allows simple pattern
  definitions (? and *) in the "port" and "host" fields of
  a severity override.
* When reports are converted using the command line version,
  e.g. with
  OpenVAS-Client --in-report report.nbe --out-report report.html
  the user-defined severity overrides can be applied by adding the
  --convert-filtered, or -F flag, except for pdf and nbe file formats.
  Information about applied overrides is then included in the report.
* Improved HTML report export, as a memory leak was fixed and the resulting
  document is now again valid HTML.
* A bug was fixed that caused XML reports generated from the CLI to
  not include the NVT and Scanner list as the GUI does
  (http:/bugs.openvas.org/1036).
* Report conversion to HTML format has been improved:
  - User-defined False Positives can be hidden with the
    --convert-drop-fp, or -D flag.
  - Otherwise empty sections of the report can be hidden with the
    --convert-drop-no-info, or -N flag.
* A bug in the LaTeX document generation that lead to invalid
  documents has been fixed.
* The openvas-ssh-client-rpm-generator.sh now gets installed in
  $(PREFIX)/share/openvas/.
  (closing bug http://bugs.openvas.org/1072).
* The German translation has been updated.

Many thanks to everyone who contributed to this release: Stephan Kleine,
Jan Wagner, Jan-Oliver Wagner, Michael Wiegand and Felix Wolfsteller.


openvas-client 2.0.4 (2009-06-05)

This is the fourth maintenance release of the openvas-client module for the
Open Vulnerability Assessment System (OpenVAS) 2.0-series.

It fixes some issues discovered after the release of openvas-client
2.0.3. Code audit continued and a number of obsolete, unused and/or
unnecessary functions were identified and removed.

Main changes since 2.0.3:

* The message display in the lower part of the GUI now includes timestamps for
  messages.
* The progress bar showing the scan progress now works correctly.
* The German translation has been updated.
* The Credentials Manager for Local Security Checks has been improved and is now
  able to create packages which add users to remote system (currently the
  following platforms are supported: RPM based distributions, Debian based
  distributions and Microsoft Windows).
* Debian packaging has been updated.

Many thanks to everyone who contributed to this release: Jan Wagner, Jan-Oliver
Wagner, Michael Wiegand and Felix Wolfsteller.


openvas-client 2.0.3 (2009-04-02)

This is the third maintenance release of the openvas-client module for the
Open Vulnerability Assessment System (OpenVAS) 2.0-series.

It fixes some issues discovered after the release of openvas-client
2.0.2 and introduces the new "Severity Override" Feature.
This feature allows for example to maintain a list of false positives
and apply it to subsequent scans. This works like a filter
and thus the actual scan results remain untouched and can at any
time be recovered.

Code audit continued and a number of obsolete, unused and/or
unnecessary functions were identified and removed.

Effects when installing this version:

* The version requirement for the GTK+ library has been raised from 2.4 to 2.6
  to make sure all GTK+ functions used by OpenVAS-Client are indeed available.
  GTK+ 2.6 was released in December 2004, so all modern distributions should
  include at least this version.

Main changes since 2.0.2:

* A Severity Override Manager has been added, including right-mouse-button actions
  in the report to specific severity overrides easily. The original scan results
  will never be changed, so it is safe to test the severity overrides.
* A new "Extras" menu has been added and collects all "managers":
  The LSC Credentials Manager, the Severity Override Manager and
  the SLAD Install Manager.
* A bug which caused the client complain about missing files when starting a
  scan on a fresh installation has been fixed.
* A bug which caused OpenVAS-Client not to be placed in the correct menu on
  certain distributions has been fixed (relevant for packagers).
* OpenVAS-Client is now able to remember more than one server certificate.

Many thanks to everyone who contributed to this release: Tim Brown, Laban
Mwangi, Vlatko Kosturjak, Jan-Oliver Wagner, Michael Wiegand and Felix
Wolfsteller.


openvas-client 2.0.2 (2009-03-05)

This is the second maintenance release of the openvas-client module for the
Open Vulnerability Assessment System (OpenVAS) 2.0-series.

It fixes some issues discovered after the release of openvas-client
2.0.1 and especially offers the further matured "OpenVAS LSC
Credentials Manager" that can be used in conjunction with a new
ssh_authorization.nasl which is available via the OpenVAS NVT Feed.
If you are doing a lot of local security checks this might make your
life easier.
Thanks to the continuing audit of the code, a number of obsolete, unused and/or
unnecessary functions were identified and removed.

Effects when installing this version:

* New default port of the server: Please be aware that openvas-server
  now listens on port 9390 by default since this port has recently been
  allocated by IANA for the Openvas Transport Protocol (OTP). This release
  of the client now uses the same default.

* Option "Silent dependencies" is now "off" by default. Previously it was
  set to "on". If you didn't pay attention to this option in the past
  you might experience larger reports now.

Main changes since 2.0.1:

* The timeout-setting functionality has been made more robust. It has been moved
  to the plugin info dialog to make accessing this functionality easier.
* A counter column for log messages has been added.
* XML exports: A bug (http://bugs.openvas.org/867) which caused a corrupted
  protocol attribute during XML export when service names contained slashes has
  been fixed. This also fixes another bug which caused service names to show up
  in the protocol attribute.
* A bug which prevented the display of signatures due to sometimes different
  "fingerprint" lengths has been fixed.
* A bug which prevented the client from correctly determining certain server
  preference settings has been fixed.
* Established automated source code documentation. HTML-Version is available
  under http://www.openvas.org/src-doc/openvas-client/current/index.html
* Openvas-client now uses the IANA-assigned port 9390 for communication
  with the server.
* A bug (http://bugs.openvas.org/858) which cause a segmentation fault when
  trying to list preferences or plugins on the command line without enabling
  batch mode has been fixed. 
* Support for improved management of SSH credentials has been added in
  accordance with Change Request #20 (http://www.openvas.org/openvas-cr-20.html)
* The "Silent Dependencies" option now defaults to "no". Setting this option to
  "yes" causes possible error messages from NVTs executed as dependencies to not
  show up in client which is not desirable from a security viewpoint.

Many thanks to everyone who has contributed to this release: Joey Schulze,
Michael Wiegand and Felix Wolfsteller.
 

openvas-client 2.0.1 (2008-12-19)

This is the 2.0.1 release of OpenVAS-Client, a small maintenance release to fix
an issue which caused the building of localized message files to fail.

If you are using OpenVAS-Client 2.0.0 and would like to use OpenVAS-Client in a
language other than English, we recommend that you update to 2.0.1.

Many thanks to Stephan Kleine for spotting this issue.


openvas-client 2.0.0 (2008-12-17)

This is the 2.0.0 release of OpenVAS.

If you have used the 2.0-beta1, -beta2 or -rc1 release, we recommend that you
update all your OpenVAS modules (openvas-libraries, openvas-libnasl,
openvas-server and openvas-client) to 2.0.0.

If you are currently using the 1.0.x branch and want to evaluate OpenVAS
2.0.0, we recommend that you install 2.0.0 separately from your OpenVAS 1.0
installation. Instructions on how to do this are available from the OpenVAS
website.

Main changes since 2.0-rc1:
* Code documentation has been improved.
* Support for improved SSH credentials management has been added.
* The build environment has been harmonized with the other OpenVAS components.

Main changes since 1.0.4:
* Support for the new script_tag command in NASL scripts has been added.
* Support for displaying NVT signature information client in the GUI and in
  various reports has been added.
* Report generation for PDF and HTML reports has been improved.
* The German translation has been updated.
* Command line parsing has been improved.
* 64-bit compatibility has been considerably improved.
* Initial Croatian language support has been added.
* French language support has been added.
* The Spanish translation has been updated.
* Switch from Nessus plugin IDs to NVT OIDs
* Switch from Nessus Transfer Protocol 1.2 to OpenVAS Transfer Protocol (OTP) 1.0.
* A migration script to convert user data from IDs to OIDs has been added.
* Support for new LOG and DEBUG messages has been added.
* The automatic enabling of new NVTs can now be disabled.

Many thanks to everyone who has contributed to this release: Tim Brown, Javier
Fernandez-Sanguino, Stjepan Gros, Vlatko Kosturjak, Joey Schulze, Jan Wagner,
Jan-Oliver Wagner, Michael Wiegand and Felix Wolfsteller.


openvas-client 2.0-rc1 (2008-12-05)

This release is the first release candidate for the upcoming 2.0 release of OpenVAS.

Unless serious bugs are discovered, this release candidate will become the final
OpenVAS 2.0 release. Users are encouraged to test this release and to report
bugs to the OpenVAS bug tracker located at http://bugs.openvas.org/ .

If you have used the 2.0-beta2 release, we recommend that you update all your
OpenVAS modules (openvas-libraries, openvas-libnasl, openvas-server and
openvas-client) to 2.0-rc1.

If you are currently using the stable 1.0.x branch and want to take part in
testing this release candidate, we recommend that you install 2.0-rc1 separately
from your OpenVAS 1.0 installation. Instructions on how to do this are available
from the OpenVAS website.

Main changes since 2.0-beta2:
* Support for the new script_tag command in NASL scripts has been added.
* Support for displaying NVT signature information client in the GUI and in
  various reports has been considerably improved.
* Report generation for PDF and HTML reports has been improved.
* The German translation has been updated.
* Code quality has been improved, a potential buffer overflow due to
  insufficient memory allocation has been fixed.
* Debian packaging files have been updated.
* Code documentation has been improved.
* Command line parsing has been improved.
* Minor bugfixes.
* Code cleanups.

Many thanks to everyone who has contributed to this release: Tim Brown, Joey
Schulze, Felix Wolfsteller and Michael Wiegand.


openvas-client 2.0-beta2 (2008-11-14)

This release is the second beta version of the upcoming 2.0 release of OpenVAS.
It contains improved 64-bit compatibility, support for displaying NVT
signature information and various improvements.

This release is intended to contain all features intended for the final OpenVAS
2.0 release. Users are encouraged to test this release and to report bugs to the
OpenVAS bug tracker located at http://bugs.openvas.org/ .

If you have used the 2.0-beta1 release, we recommend that you update all your
OpenVAS modules (openvas-libraries, openvas-libnasl, openvas-server and
openvas-client) to 2.0-beta2.

If you are currently using the stable 1.0.x branch and want to take part in the
beta phase for 2.0, we recommend that you install 2.0-beta2 separately from your
OpenVAS 1.0 installation. Instructions on how to do this are available from the
OpenVAS website.

Main changes since 2.0-beta1:
* 64-bit compatibility has been considerably improved.
* Debian packaging files have been updated.
* Support for displaying NVT signature information has been added.
* The automatic enabling of new NVTs can now be disabled.
* The obsolete openvas-check-signature tool has been removed.
* Bugfixes.
* Various code cleanups.

Many thanks to everyone who has contributed to this release: Tim Brown, Stjepan
Gros, Jan-Oliver Wagner, Michael Wiegand and Felix Wolfsteller.


Release 2.0-beta1 (2008-09-25):
---------------------------

This release is a first beta version of the upcoming 2.0 release of OpenVAS.
It introduces support for the cleaned up and improved OpenVAS Transport Protocol
(OTP, replacing NTP) and the new OpenVAS NVT OID scheme. In addition, this
release contains updated packaging files, improves Croatian, French and Spanish
language support and fixes a number of bugs.

OpenVAS 2.0 will introduce a full set of new modules for OpenVAS Server
(openvas-libraries, openvas-libnasl and openvas-server) and a new
OpenVAS-Client. The only  module OpenVAS 1.0 and OpenVAS 2.0 will  share is
openvas-plugins. This means that the OpenVAS NVT Feed is compatible with both
generations of OpenVAS.

However, in case you plan to try out the new generation of OpenVAS, you should
install it separately from OpenVAS 1.0 installation. Instructions on how to do
this will be added to the OpenVAS homepage after all relevant modules are
released as 2.0-beta1. A separate announcement will officially start the beta
testing phase for OpenVAS 2.0.

Main changes since 1.0.4:
* Improved SuSE support.
* A bug that prevented the client from running in quiet mode without the
  DISPLAY environment variable being set has been fixed.
* A bug that resulted in a crash during XML export has been fixed.
* Updated packaging files for Debian.
* Initial Croatian language support has been added.
* French language support has been added.
* The Spanish translation has been updated.
* Pie chart generation now uses (and needs) system libraries instead of outdated
  copies in the OpenVAS source code.
* Switch from Nessus plugin IDs to NVT OIDs (internal change, also applies to
  OTP)
* Switch from Nessus Transport Protocol 1.2 to OpenVAS Transport Protocol (OTP)
  1.0.
* A bug the resulted in a crash during scanning under certain circumstances has
  been fixed.
* A migration script to convert user data from IDs to OIDs has been added.
* Support for new LOG and DEBUG messages has been added.

Many thanks to everyone who has contributed to this release: Tim Brown, Javier
Fernandez-Sanguino, Vlatko Kosturjak, Jan Wagner, Jan-Oliver Wagner and Michael
Wiegand


Release 1.0.4 (2008-06-27):
---------------------------

Consolidation release. Various cleanups and bug fixes are included in this
release. Most obvious is the simplified connection dialog. Also, some changes to
be compatible with future Server updates are already integrated (OTP, OIDs).

Main changes since 1.0.3:

* new: Reports now show the name and OID of the NVT together with it's results.
* new: Support for the upcoming OpenVAS Transport Protocol (OTP) has been
  introduced into OpenVAS-Client.

* improved: Command line parsing has been completely reworked.

* fixed: Fixed issues with credential preferences showing up incorrectly in the
  preferences dialog.
* fixed: Fixed a bug that could result in filename corruption or segmentation
  faults when exporting a report from the OpenVAS-Client GUI.
* fixed: Fixed issues that prevented OpenVAS-Client from compiling without GTK
  support. It is now possible to compile OpenVAS-Client without GUI support if
  desired.
* fixed: Fixed a bug in report conversion that resulted in incorrect memory
  allocation on certain 64bit installations.
* fixed: Fixed a bug that resulted in a segmentation fault when connecting
  to the server while using an alternate configuration file.
* fixed: Fixed a bug that resulted in a segmentation fault when the user
  supplied an inconclusive filename for the results file in batch mode.
* fixed: Fixed a bug that resulted in a segmentation fault when running
  in batch mode with a non-existent targets file and the html_graph output type.

* removed: Support for unencrypted connections has been removed from
  OpenVAS-Client since unencrypted connections to the server were no longer
  possible since OpenVAS-Server 0.9.0.
* removed: Support for saving reports in the legacy XML format was removed as
  this format has already been superseded by a new XML format and was marked as
  deprecated.

Release 1.0.3 (2008-04-04):
---------------------------

Small improvements release.

Main changes since 1.0.2:

* fixed: The default external links for HTML/PDF reports
  now not anymore link to nessus.org but to securityfocus.com (BID),
  mitre.org (CVE) and openvas.org (OpenVAS ID).
  You will also note that the OpenVAS Change Request #1
  http://www.openvas.org/openvas-cr-1.html
  has been considered in the OpenVAS ID default URL as it
  uses the convenience URL for the new OID concept.
  The URLs will get active in the near future.
* fixed: better localization of PDF reports.
* fixed: in case caching was switched off and connection to server
  established, seg-fault crashes occured with the previous version.
* new: Expands/Collapses tree-list widgets upon left/right arrow keys.
* fixed: various links in the reports now direct to OpenVAS, not Nessus.
* new: configurable sort order for reports (host/port/severity
  or port/host/severity).
* removed: any support for NSR (the old Nessus report format),
  according the OpenVAS Change Request #2:
  http://www.openvas.org/openvas-cr-2.html
* removed: any documentation about the Nessus Transfer Protocol
  as it was redundant with the documentation in openvas-server
  where it belongs to.
* update: of Debian packaging files.
* code-cleanups: various unused variables and compiler warnings resolved.

Release 1.0.2 (2007-12-18):
---------------------------

Only Debian packaging and license/copyright clearifications release.

These changes result from the Debian policy QA process
for uptake of OpenVAS-Client into Debian GNU/Linux.
They do not change the actual software at all.

Main changes since 1.0.1:

* Added debian packaging files under packagig/debian.
* Made copyright and licensing information more explicit.


Release 1.0.1 (2007-10-23):
---------------------------

Minor fixes release.

Main changes since 1.0.0:

* Removed non-free text files (README_SSL, doc/WARNING.En, doc/WARNING.Fr)
* Now temporary files are prefixed with "openvas" instead of "nessus"
  which should better avoid conflicts for parallel use of OpenVAS-Client
  and Nessus-Client.
* Minor code cleanups.

Release 1.0.0 (2007-09-18):
---------------------------

After some 0.9 releases this is finally the intial
1.0 release of OpenVAS-Client.

OpenVAS-Client is a successor of NessusClient 1.X.
The fork happened with NessusClient CVS HEAD 20070704.
The reason was that the original author of NessusClient
decided to stop active development for this (GTK-based)
NessusClient in favour of a newly written QT-based version
released as proprietary software.

Compared to the NessusClient 1.X release,
various new features have been added, especially
caching mechanisms to increase transparency and
increase plugin load speed.

Additionally some visual improvements have been
implemented. The following additional languages are supported:
german, spanish, swedish and hebrew.

Main changes since 0.9.1:

* New language: spanish.
* New language: hebrew.
* Various code cleanups.
* Various string fixes.
* Added some scripts to support W32 installer packaging.

Release 0.9.1 (2007-07-31):
---------------------------

This is a cleanup and minor improvements release.

Main changes since 0.9.0:

* Removed users manual which now forms a package
  of its own ("openvas-manual").
* Decreased memory consumption considerably for
  the case when looking into many different reports
  with more or less the same plugins.
* Added menu entry to execute "sladinstaller" GUI.
  SLAD is the Security Local Auditing Daemon which
  comes with some NASL scripts and thus can now be fully managed
  through OpenVAS-Client.
* Updated german translation.

Release 0.9.0 (2007-07-19):
---------------------------

This is the first release of OpenVAS-Client.

OpenVAS-Client is a successor of NessusClient 1.X.
The fork happened with NessusClient CVS HEAD 20070704.
The reason was that the original authors of NessusClient
decided to stop active development for this (GTK-based)
NessusClient in favour of a newly written QT-based version
released as proprietary software.

Compared to the NessusClient 1.X release,
various new features have been added, especially
caching mechanisms to increase transparency and
increase plugin load speed.

Additionally some visual improvements have been
implemented.
