github.com/future-architect/vuls

Full Changelog

Implemented enhancements:

• Output changelog in report, TUI and JSON for RHEL #367
• Output changelog in report, TUI and JSON for Amazon Linux #366
• Improve scanning accuracy by checking package versions #256
• Improve SSH #415
• Enable to scan even if target server can not connect to the Internet #258
• SSH Hostkey check #417 (kotakanbe)
• v0.4.0 #449 (kotakanbe)
• Change default ssh method from go library to external command #416 (kotakanbe)
• Add containers-only option to configtest #411 (knqyf263)

Fixed bugs:

• Running Vuls tui before vuls report does not show vulnerabilities checked by CPE #396
• With a long package name, Local shell mode (stty dont' work) #444
• Improve SSH #415
• Report that a vulnerability exists in the wrong package #408
• With a long package name, a parse error occurs. #391
• Ubuntu failed to scan vulnerable packages #205
• CVE-ID in changelog can't be picked up. #154
• v0.4.0 #449 (kotakanbe)
• Fix SSH dial error #413 (kotakanbe)
• Update deps, Change deps tool from glide to dep #412 (kotakanbe)
• fix report option Loaded error-info #406 (hogehogehugahuga)
• Add --user root to docker exec command #389 (PaulFurtado)

Closed issues:

• README.md.ja not include "Oracle Linux, FreeBSD" #465
• Can't scan remote server - (centos 7 - updated) #451
• An abnormality in the result of vuls tui #439
• compile faild #436
• Can't install vuls on CentOS 7 #432
• Vuls scan doesn't show severity score in any of the vulnerable packages #430
• Load config failedtoml: cannot load TOML value of type string into a Go slice #429
• vuls scan not running check-update with sudo for Centos 7 #428
• options for configtest not being activated #422
• "could not find project Gopkg.toml, use dep init to initiate a manifest" when installing vuls #420
• go get not get #407
• Failed to scan via docker. err: Unknown format #404
• Failed to scan - kernel-xxx is an installed security update #403
• 169.254.169.254 port 80: Connection refused #402
• vuls scan --debug cause invalid memory address error #397
• Provide a command line flag that will automatically install aptitude on debian? #390

Merged pull requests:

• export fill cve info #467 (sadayuki-matsuno)
• add oval docker #466 (sadayuki-matsuno)
• fix typos in commands. #464 (ymomoi)
• Update README #463 (kotakanbe)
• export FillWithOval #462 (sadayuki-matsuno)
• add serveruuid field #458 (sadayuki-matsuno)
• add s3 dirctory option #457 (sadayuki-matsuno)
• Extract Advisory.Description on RHEL, Amazon, Oracle #450 (kotakanbe)
• nosudo on CentOS and Fetch Changelogs on Amazon, RHEL #448 (kotakanbe)
• change logrus package to lowercase and update other packages #446 (sadayuki-matsuno)
• add db backend redis #445 (sadayuki-matsuno)
• fast test #435 (sadayuki-matsuno)
• fix typo #433 (sadayuki-matsuno)
• Add support for PostgreSQL as a DB storage back-end #431 (sadayuki-matsuno)
• typo README.js.md #426 (ryurock)
• Add TOC to README #425 (kotakanbe)
• Fixing #420 where lock and manifest have moved to TOML #421 (elfgoh)
• Define timeout for vulnerabilities scan and platform detection #414 (s7anley)
• Enable -timeout option when detecting OS #410 (knqyf263)
• Remove duplicate command in README #401 (knqyf263)
• Fix to read config.toml at tui #441 (usiusi360)
• Change NVD URL to new one #419 (kotakanbe)
• Add some testcases #418 (kotakanbe)

Full Changelog

Implemented enhancements:

• Changelog parsing fails when package maintainers aren't consistent regarding versions #327
• Docker scan doesn't report image name #325
• vuls report -to-email only one E-Mail #295
• Support RHEL5 #286
• Continue scanning even when some hosts have tech issues? #264
• Normalization of JSON output #259
• Add report subcommand, change scan subcommand options #239
• scan localhost? #210
• Can Vuls show details about updateable packages #341
• Scan all containers except #285
• Notify the difference from the previous scan result #255
• EC2RoleCreds support? #250
• Output confidence score of detection accuracy and detection method to JSON or Reporting #350 (kotakanbe)
• Avoid null slice being null in JSON #345 (kotakanbe)
• Add -format-one-email option #331 (knqyf263)
• Support Raspbian #330 (knqyf263)
• Add leniancy to the version matching for debian to account for versio… #328 (jsulinski)
• Add image information for docker containers #326 (jsulinski)
• Continue scanning even when some hosts have tech issues #309 (kotakanbe)
• Add -log-dir option #301 (knqyf263)
• Use --assumeno option #300 (knqyf263)
• Add local scan mode(Scan without SSH when target server is localhost) #291 (kotakanbe)
• Support RHEL5 #289 (kotakanbe)
• Add LXD support #288 (jiazio)
• Add timeout option to configtest #400 (kotakanbe)
• Notify the difference from the previous scan result #392 (knqyf263)
• Add Oracle Linux support #386 (Djelibeybi)
• Change container scan format in config.toml #381 (kotakanbe)
• Obsolete CentOS5 support #378 (kotakanbe)
• Deprecate prepare subcommand to minimize the root authority defined by /etc/sudoers #375 (kotakanbe)
• Support IAM role for report to S3. #370 (ohsawa0515)
• Add .travis.yml #363 (knqyf263)
• Output changelog in report, TUI and JSON for Ubuntu/Debian/CentOS #356 (kotakanbe)

Fixed bugs:

• Debian scans failing in docker #323
• Local CVE DB is still checked, even if a CVE Dictionary URL is defined #316
• vuls needs gmake. #313
• patch request for FreeBSD #312
• Report: failed to read from json (Docker) #294
• -report-mail option does not output required mail header #282
• PackInfo not found error when vuls scan. #281
• Normalize character set #279
• The number of Updatable Packages is different from the number of yum check-update #373
• sudo is needed when exec yum check-update on RHEL7 #371
• 123-3ubuntu4 should be marked as ChangelogLenientMatch #362
• CentOS multi package invalid result #360
• Parse error after check-update. (Unknown format) #359
• Fix candidate to confidence. #354 (kotakanbe)
• Bug fix: not send e-mail to cc address #346 (knqyf263)
• Change the command used for os detection from uname to freebsd-version #340 (kotakanbe)
• Fix error handling of detectOS #337 (kotakanbe)
• Fix infinite retry at size overrun error in Slack report #329 (kotakanbe)
• aptitude changelog defaults to using more, which is not interactive a… #324 (jsulinski)
• Do not use sudo when echo #322 (knqyf263)
• Reduce privilege requirements for commands that don't need sudo on Ubuntu/Debian #319 (jsulinski)
• Don't check for a CVE DB when CVE Dictionary URL is defined #317 (jsulinski)
• Fix typo contianer -> container #314 (justyns)
• Fix the changelog cache logic for ubuntu/debian #305 (kotakanbe)
• Fix yum updateinfo options #304 (kotakanbe)
• Update glide.lock to fix create-log-dir error. #303 (kotakanbe)
• Fix a bug in logging (file output) at scan command #302 (kotakanbe)
• Add -pipe flag #294 #299 (kotakanbe)
• Fix RHEL5 scan stopped halfway #293 (kotakanbe)
• Fix amazon linux scan stopped halfway #292 (kotakanbe)
• Fix nil-ponter in TUI #388 (kotakanbe)
• Fix Bug of Mysql Backend #384 (kotakanbe)
• Fix scan confidence on Ubuntu/Debian/Raspbian #362 #379 (kotakanbe)
• Fix updatalbe packages count #373 #374 (kotakanbe)
• sudo yum check-update on RHEL #372 (kotakanbe)
• Change ssh option from -t to -tt #369 (knqyf263)
• Increase the width of RequestPty #364 (knqyf263)

Closed issues:

• vuls configtest --debugがsudoのチェックで止まってしまう #395
• Add support for Oracle Linux #385
• error on install - Ubuntu 16.04 #376
• Unknown OS Type #335
• mac os 10.12.3 make install error #334
• assumeYes doesn't work because there is no else condition #320
• Debian scan uses sudo where unnecessary #318
• Add FreeBSD 11 to supported OS on documents. #311
• docker fetchnvd failing #274
• Latest version of labstack echo breaks installation #268
• fetchnvd Fails using example loop #267

Merged pull requests:

• fix typo in README.ja.md #394 (lv7777)
• Update Tutorial in README #387 (kotakanbe)
• Fix README #383 (usiusi360)
• s/dictinary/dictionary typo #382 (beuno)
• Fix Japanese typo #377 (IMAI-Yuji)
• Improve kanji character #351 (hasegawa-tomoki)
• Add PULL_REQUEST_TEMPLATE.md #348 (knqyf263)
• Update README #347 (knqyf263)
• Fix test case #344 (kotakanbe)
• Fix typo #343 (knqyf263)
• Rename Makefile to GNUmakefile #313 #339 (kotakanbe)
• Update README #338 (kotakanbe)
• add error handling #332 (kazuminn)
• Update readme #308 (lapthorn)
• Update glide.lock to fix import error #306 (knqyf263)
• Check whether echo is executable with nopasswd #298 (knqyf263)
• Update docker README #297 (knqyf263)
• update readme #296 (galigalikun)
• remove unused import line. #358 (ymomoi)

Full Changelog

Implemented enhancements:

• Add report subcommand, change scan options. #239 #270 (kotakanbe)
• Add --assume-yes to prepare #260 #266 (Code0x58)
• Use RFC3339 timestamps in the results #265 (Code0x58)

Fixed bugs:

• vuls prepare failed to centos7 #275
• Failed to scan on RHEL5 #94
• Fix container os detection #287 (jiazio)
• Add date header to report mail. #283 (ymomoi)
• Add Content-Type header to report/mail.go . #280 (hogehogehugahuga)
• Keep output of "vuls scan -report-*" to be same every times #272 (yoheimuta)
• Fix JSON-dir regex pattern #265 #271 (kotakanbe)
• Stop quietly ignoring --ssh-external on Windows #263 (Code0x58)
• Fix non-interactive apt-get install #251 #253 (Code0x58)

Closed issues:

• gocui.NewGui now takes a parameter #261
• Add a --yes flag to bypass interactive prompt for vuls prepare #260
• vuls prepare doesn't work on Debian host due to apt-get confirmation prompt #251

Merged pull requests:

• Fix gocui.NewGui after signature change #261 #262 (Code0x58)
• Replace inconsistent tabs with spaces #254 (Code0x58)
• Fix README #249 (usiusi360)

Full Changelog

Implemented enhancements:

• Enable to scan only docker container, without docker host #122
• Add -skip-broken option [CentOS only] #245 #248 (kotakanbe)
• Display unknown CVEs to TUI #244 (kotakanbe)
• Add the XML output #240 (gleentea)
• add '-ssh-external' option to prepare subcommand #234 (mykstmhr)
• Integrate OWASP Dependency Check #232 (kotakanbe)
• Add support for reading CVE data from MySQL. #225 (oswell)
• Remove base docker image, -v shows commit hash #223 (sadayuki-matsuno)
• Support ignore CveIDs in config #222 (kotakanbe)
• Confirm before installing dependencies on prepare #219 (kotakanbe)
• Remove all.json #218 (kotakanbe)
• Add GitHub issue template #217 (kotakanbe)
• Improve makefile, -version shows git hash, fix README #216 (kotakanbe)
• change e-mail package from gomail to net/smtp #211 (sadayuki-matsuno)
• Add only-containers option to scan subcommand #122 #190 (kotakanbe)
• Fix -results-dir option of scan subcommand #185 (kotakanbe)
• Show error when no scannable servers are detected. #177 (kotakanbe)
• Add sudo check to prepare subcommand #176 (kotakanbe)
• Supports yum --enablerepo option (supports only base,updates for now) #147 (kotakanbe)

Fixed bugs:

• Debian 8.6 (jessie) scan does not show vulnerable packages #235
• panic: runtime error: index out of range - ubuntu 16.04 + vuls history #180
• Moved golang.org/x/net/context to context #243 (yoheimuta)
• Fix changelog cache bug on Ubuntu and Debian #235 #238 (kotakanbe)
• add '-ssh-external' option to prepare subcommand #234 (mykstmhr)
• Fixed error for the latest version of gocui #231 (ymd38)
• Handle the refactored gocui SetCurrentView method. #229 (oswell)
• Fix locale env var LANG to LANGUAGE #215 (kotakanbe)
• Fixed bug with parsing update line on CentOS/RHEL #206 (andyone)
• Fix defer cache.DB.close #201 (kotakanbe)
• Fix a help message of -report-azure-blob option #195 (kotakanbe)
• Fix error handling in tui #193 (kotakanbe)
• Fix not working changelog cache on Container #189 (kotakanbe)
• Fix release version detection on FreeBSD #184 (kotakanbe)
• Fix defer cahce.DB.close() #183 (kotakanbe)
• Fix a mode of files/dir (report, log) #182 (kotakanbe)
• Fix a error when no json dirs are found under results #180 #181 (kotakanbe)
• ssh-external option of configtest is not working #178 #179 (kotakanbe)

Closed issues:

• --enable-repos of yum option #246
• --skip-broken at yum option #245
• Recent changes to gobui cause build failures #228
• https://hub.docker.com/r/vuls/go-cve-dictionary/ is empty #208
• Not able to install gomail fails #202
• No results file created - vuls tui failed #199
• Wrong file permissions for results/*.json in official Docker container #197
• Failed: Unknown OS Type #196
• Segmentation fault with configtest #192
• Failed to scan. err: No server defined. Check the configuration #187
• vuls configtest -ssh-external doesnt work #178
• apt-get update: time out #175
• scanning on Centos6, but vuls recognizes debian. #174
• Fix READMEja #164 #173

Merged pull requests:

• Update README #225 #242 (kotakanbe)
• fix readme #241 (sadayuki-matsuno)
• Fix README #234 #237 (kotakanbe)
• Update glide files #236 (kotakanbe)
• fix README #226 (usiusi360)
• fix some misspelling. #221 (ymomoi)
• fix docker readme #214 (sadayuki-matsuno)
• Fix ja document about typo #213 (shokohara)
• fix readme #212 (sadayuki-matsuno)
• fix README #207 (sadayuki-matsuno)
• fix typo #204 (usiusi360)
• fix gitignore #191 (sadayuki-matsuno)
• Update glide.lock #188 (kotakanbe)
• Fix path in setup/docker/README #186 (dladuke)
• Vuls and vulsrepo are now separated #163 (hikachan)

Full Changelog

Implemented enhancements:

• High speed scan on Ubuntu/Debian #172 (kotakanbe)
• Support CWE(Common Weakness Enumeration) #169 (kotakanbe)
• Enable to scan without sudo on amazon linux #167 (kotakanbe)
• Remove deprecated options -use-unattended-upgrades,-use-yum-plugin-security #161 (kotakanbe)
• delete sqlite3 #152 (sadayuki-matsuno)

Fixed bugs:

• Failed to setup vuls docker #170
• yum check-update error occurred when no reboot after kernel updating #165
• error thrown from 'docker build .' #157
• CVE-ID is truncated to 4 digits #153
• 'yum update --changelog' stalled in 'vuls scan'. if ssh user is not 'root'. #150
• Panic on packet scan #131
• Update glide.lock #170 #171 (kotakanbe)
• Fix detecting a platform on Azure #168 (kotakanbe)
• Fix parse error for yum check-update #165 #166 (kotakanbe)
• Fix bug: Vuls on Docker #159 (tjinjin)
• Fix CVE-ID is truncated to 4 digits #155 (usiusi360)
• Fix yum update --changelog stalled when non-root ssh user on CentOS #150 #151 (kotakanbe)

Closed issues:

• Support su for root privilege escalation #44
• Support FreeBSD #34

Merged pull requests:

• Change scripts for data fetching from jvn #164 (kotakanbe)
• Fix: setup vulsrepo #162 (tjinjin)
• Fix-docker-vulsrepo-install #160 (usiusi360)
• Reduce regular expression compilation #158 (itchyny)
• Add testcases for #153 #156 (kotakanbe)

Full Changelog

Implemented enhancements:

• Enable to scan without running go-cve-dictionary as server mode #84
• Support high-speed scanning for CentOS #138 (tai-ga)
• Add configtest subcommand. skip un-ssh-able servers. #134 (kotakanbe)
• Support -report-azure-blob option #130 (kotakanbe)
• Add optional key-values that will be outputted to JSON in config #117 (kotakanbe)
• Change dir structure #115 (kotakanbe)
• Add some validation of loading config. user, host and port #113 (kotakanbe)
• Support scanning with external ssh command #101 (kotakanbe)
• Detect Platform and get instance-id of amazon ec2 #95 (kotakanbe)
• Add -report-s3 option #92 (kotakanbe)
• Added FreeBSD support. #90 (justyntemme)
• Add glide files for vendoring #89 (kotakanbe)
• Fix README, change -cvedbpath to -cve-dictionary-dbpath #84 #85 (kotakanbe)
• Add option for it get cve detail from cve.sqlite3. #81 (ymd38)
• Add -report-text option, Fix small bug of report in japanese #78 (kotakanbe)
• Add JSONWriter, Fix CVE sort order of report #77 (kotakanbe)

Fixed bugs:

• Docker: Panic #76
• Fix apt command to scan correctly when system locale is not english #149 (kit494way)
• Disable -ask-sudo-password for security reasons #148 (kotakanbe)
• Fix no tty error while executing with -external-ssh option #143 (kotakanbe)
• wrong log packages #141 (sadayuki-matsuno)
• Fix platform detection. #137 (Rompei)
• Fix nil pointer when scan with -cve-dictionary-dbpath and cpeNames #111 (kotakanbe)
• Remove vulndb file before pkg audit #110 (kotakanbe)
• Add error handling when unable to connect via ssh. status code: 255 #108 (kotakanbe)
• Enable to detect vulnerabilities on FreeBSD #98 (kotakanbe)
• Fix unknown format err while check-update on RHEL6.5 #93 (sadayuki-matsuno)
• Fix type of SMTP Port of discovery command's output #88 (kotakanbe)
• Fix error msg when go-cve-dictionary is unavailable #84 #86 (kotakanbe)
• Fix error handling to avoid nil pointer err on debian #83 (kotakanbe)
• Fix nil pointer while doing apt-cache policy on ubuntu #76 #82 (kotakanbe)
• fix log import url #79 (sadayuki-matsuno)
• Fix error handling of gorequest #75 (kotakanbe)
• Fix freezing forever when no args specified in TUI mode #73 (kotakanbe)
• mv version.go version/version.go to run main.go without compile #71 (sadayuki-matsuno)

Closed issues:

• SSh password authentication failed on FreeBSD #99
• BUG: -o pipefail is not work on FreeBSD's /bin/sh. because it isn't bash #91
• Use ~/.ssh/config #62
• SSH ciphers #37

Merged pull requests:

• Update README #138 #144 (kotakanbe)
• Fix a typo #142 (dtan4)
• Remove unnecessary step in readme of docker setup #140 (mikkame)
• Update logo #139 (chanomaru)
• Update README.ja.md to fix wrong tips. #135 (a2atsu)
• add tips about NVD JVN issue #133 (a2atsu)
• Fix README wrong links #129 (aomoriringo)
• Add logo #126 (chanomaru)
• Improve setup/docker #125 (kotakanbe)
• Fix scan command help #124 (aomoriringo)
• added dockernized-vuls with vulsrepo #121 (hikachan)
• Fix detect platform on azure and degital ocean #119 (kotakanbe)
• Remove json marshall-indent #118 (kotakanbe)
• Improve Readme.ja #116 (kotakanbe)
• Add architecture diag to README.md #114 (kotakanbe)
• Rename linux.go to base.go #100 (kotakanbe)
• Update README.md #74 (yoshi-taka)
• Refactoring debian.go #72 (kotakanbe)

Full Changelog

Implemented enhancements:

• Initial fetch from NVD is too heavy (2.3 GB of memory consumed) #27
• Enable to show previous scan result #69 (kotakanbe)
• Add ignore-unscored-cves option #68 (kotakanbe)
• Support dynamic scanning docker container #67 (kotakanbe)
• Add version flag #65 (kotakanbe)
• Update Dockerfile #57 (theonlydoo)
• Update run.sh #56 (theonlydoo)
• Support Windows #33 (mattn)

Fixed bugs:

• vuls scan -cvss-over does not work. #59
• panic: runtime error: invalid memory address or nil pointer dereference when scan CentOS5.5 #58
• It rans out of memory. #47
• BUG: vuls scan on CentOS with Japanese environment. #43
• yum --color=never #36
• Failed to parse yum check-update #32
• Pointless sudo #29
• Can't init database in a path having blanks #26
• Fix pointless sudo in debian.go #29 #66 (kotakanbe)
• Fix error handling of httpGet in cve-client #58 #64 (kotakanbe)
• Fix nil pointer at error handling of cve_client #58 #63 (kotakanbe)
• Set language en_US. #61 (pabroff)
• Fix -cvss-over flag #59 #60 (kotakanbe)
• Fix scan on Japanese environment. #55 (pabroff)
• Fix a typo: replace Depricated by Deprecated. #54 (jody-frankowski)
• Fix yes no infinite loop while doing yum update --changelog on root@CentOS #47 #50 (pabroff)
• Fix $servername in output of discover command #45 (kotakanbe)

Full Changelog

Implemented enhancements:

• Add sudo support for prepare #11
• Dockerfile? #10
• Update README #41 (theonlydoo)
• Sparse dockerization #38 (theonlydoo)
• No password in config #35 (kotakanbe)
• Fr readme translation #23 (novakin)

Fixed bugs:

• Issues updating CVE database behind https proxy #39
• Vuls failed to parse yum check-update #24
• Fix yum to yum --color=never #36 #42 (kotakanbe)
• Fix parse yum check update #40 (kotakanbe)
• fix typo #31 (blue119)
• Fix error while parsing yum check-update #24 #30 (kotakanbe)

Closed issues:

• Unable to scan on ubuntu because changelog.ubuntu.com is down... #21
• err: Not initialize(d) yet.. #16
• Errors when using fish shell #8

Full Changelog

Fixed bugs:

• Maximum 6 nodes available to scan #12
• panic: runtime error: index out of range #5
• Fix sudo option on RedHat like Linux and change some messages. #20 (kotakanbe)
• Typo fix and updated readme #19 (EuanKerr)
• remove a period at the end of error messages. #18 (kotakanbe)
• fix error while yum updateinfo --security update on rhel@aws #17 (kotakanbe)
• Fixed typos #15 (radarhere)
• Typo fix in error messages #14 (Bregor)
• Fix index out of range error when the number of servers is over 6. #12 #13 (kotakanbe)
• Revise small grammar mistakes in serverapi.go #9 (cpobrien)
• Fix error handling in HTTP backoff function #7 (kotakanbe)

Full Changelog

Fixed bugs:

• Typo in Exapmle #6 (toli)

Merged pull requests:

• English translation #4 (hikachan)
• English translation #3 (chewyinping)
• Add a Bitdeli Badge to README #2 (bitdeli-chef)

* This Change Log was automatically generated by github_changelog_generator