2020-08-31: Greenbone OS 20.08

Latest Patch Level: 20.08.13 (2021-12-02)

Lifecycle Phase: Retired

20.08.13 (2021-12-02):

20.08.12 (2021-09-08):

• Greenbone OS:
  • Status: The lifecycle status of GOS 20.08 was set to “end-of-life” (#PL-600).
  • Improvement: the package openssl included in GOS was upgraded to version 1.1.1d-0+deb10u7 as the former version 1.1.1d-0+deb10u6 is vulnerable to CVE-2021-3711 and CVE-2021-3712 (#PL-614).
  • Bugfix: Erroneous user permissions for the feed data objects are now automatically fixed when upgrading to GOS 20.08.12 or later, or when changing the “Feed Import Roles” setting (#PL-564).
  • Bugfix: An error was fixed where only a maximum of 12 sensors could be configured for a GSM 650. 20 sensors can now be configured as intended (#PL-580, #GS-202).
  • Bugfix: An error was fixed where the flash image was written to the hard disk if no CompactFlash (CF) card was installed (#PL-608).
  • Bugfix: An error was fixed where an airgap sensor fetched a feed update via FTP but did not install it (#PL-625, #GS-409).
  • Bugfix: In master-sensor setups with different feeds (GCF/GSF), the sensor could get mixed feed information. To prevent this problem, the existing GCF metadata and cache are now deleted when importing a GSF key (#PL-577).
  • Bugfix: An error was fixed where the greenbone_signing_key.py integrity check failed after a GOS upgrade (#PL-591).
  • Bugfix: An error was fixed where the authorized_key.sh integrity check failed after a GOS upgrade if SSH keys had been added to the system previously (#PL-596).
  • Bugfix: An error was fixed that caused system integrity checks to fail when they were being updated during a system upgrade (#PL-313).
  • Bugfix: An error was fixed where empty performance graphs for deleted VLAN interfaces were still shown on the web interface. After deleting a VLAN interface, a reboot is also required to remove the graphs (#PL-403, #2019032710000104).
  • Minor improvement: The IPv6 addresses for HTTP upload dialog menus are now enclosed in brackets to facilitate copy and paste in web browsers (#PL-545, #GS-141).
  • Minor improvement: The selfcheck menu texts for the states “end-of-life”, “retired” and “obsolete” were improved to provide better guidance for upgrading (#PL-572).
  • Minor improvement: The GSM manual included in GOS was updated to the current version from 2021-08-30 (#PL-612).
• Vulnerability Management:
  • Bugfix: An error was fixed where the verification of sensors in the web interface for IPv6 master-sensor setups was not possible (#PL-556, #GS-146).
• Vulnerability Scanning:
  • Bugfix: An error was fixed that caused scans to be interrupted when the maximum number of running scanner processes was reached or exceeded (#SC-177, #GS-105).

20.08.11 (2021-08-02):

• Greenbone OS:
  • Improvement: The gvm-tools included in GOS have been updated to version 21.6.1 (#PL-540).
  • Bugfix: The download of beaming images failed on GSM models ONE and TRIAL (#PL-547).
  • Bugfix: To prevent errors and improve security, it is no longer possible to upgrade to GOS 21.04 if a HTTPS certificate with weak encryption, e.g. 1024-bit RSA, is used (#PL-574, #GS-160).
  • Bugfix: When uploading no file or an empty file via GOS menu upload dialogs, an internal error occured (#PL-279).
  • Bugfix: Enabled the GOS upgrade functionality, if GOS is in the status “retired” or “end-of-life” (#PL-536).
  • Bugfix: The maximum number of simultaneous SSH connections for sensors has been increased (#PL-543).
  • Minor improvement: Added a dedicated method to require a reboot after a GOS upgrade (#PL-531).
  • Minor improvement: The maximum number of database connections has been increased for GSM enterprise class appliances (#PL-563).
  • Minor improvement: The expiration dates for the feed signing and support package encryption keys have been extended until 2023-02-28 (#PL-460, #PL-461).
  • Minor improvement: The GOS copyright menu has been updated and now includes license information for the Greenbone Community Feed (#PL-586).
  • Minor improvement: The GSM manual included in GOS has been updated to the current version from 2021-07-30 (#PL-578).
• Vulnerability Management:
  • Improvement: The performance when adding a large number of results to reports during scans has been improved (#AP-1495, #2021061710000033).
  • Improvement: The performance when viewing targets or target list pages with a large number of hosts has been improved (#AP-1368, #GS-31).
  • Improvement: The performance when filtering results by tags has been improved (#AP-1459, #AP-1463, #GS-101, #2021060210000052).
  • Improvement: The content security policy for the web interface has been improved (#AP-1507, #AP-1613).
  • Bugfix: When resuming a scan task with multiple target hosts, scan results for hosts scanned before resuming the task were duplicated (#AP-1476, #2020010310000016, #2021061810000022).
  • Bugfix: VT rebuilds could sometimes fail because the SHA-256 hash of the VTs in the database differed from the one of the scanner (#AP-1498).
  • Bugfix: Editing and saving the “Timeout” setting of the “Ping Host” VT more than once caused an error (#AP-1004).
  • Bugfix: The filters “Severity is greater than 0” and “Severity is less than 0” did not work (#AP-1355, #GS-19).
  • Bugfix: Sorting remediation tickets by assigned user did not work (#AP-1385, #2021021210000077).
  • Minor improvement: Added new command line options to clean up data-objects-via-feed permissions (#AP-1467, #AP-1489, #GS-53).
  • Minor bugfix: Some IPv4 addresses were sorted incorrectly in the “IP” column on report detail pages (#AP-1354).
  • Minor bugfix: The “Roles” column on the “Users” list page now supports line breaks to maintain formatting for large number of roles (#AP-1384, #2021020410000029).
  • Minor bugfix: For VTs with references, the reference type was not displayed in the web interface (#AP-898).

20.08.10 (2021-06-08):

• Greenbone OS:
  • Bugfix: When upgrading to GOS 21.04, recommended system packages are no longer removed (#PL-471).
  • Bugfix: When restoring an incremental backup, the system state was not restored completely (#PL-483).
  • Bugfix: When importing a beaming image, the authorized host keys integrity check could fail afterwards (#PL-408).
  • Bugfix: If the restoration of a backup failed due to an error, the incron service would also fail (#PL-493).
  • Bugfix: If the restoration of a backup failed due to an error, the system integrity check could fail (#PL-489).
  • Bugfix: On appliances that received their feed via the USB airgap feature, and had no prior feed present, starting system upgrades failed (#PL-435).
  • Minor improvement: The maximum password length for the GOS mail settings has been increased to 128 characters (#PL-436).
  • Minor improvement: A selfcheck has been added to show possible inconsistencies of the GOS network state (#PL-299).
  • Minor improvement: The Greenbone Vulnerability Manager permission cache is now rebuilt during each GOS upgrade. This can prevent some permission problems which cause incomplete information to be shown in the web interface (#PL-421).
  • Minor improvement: The GOS state variable ‘scanner_connection_retry’ has been added. With this variable it is possible to control the number of retries that are made when the master-sensor connection fails during a scan (#PL-446).
  • Minor improvement: The log files for the beaming feature are now included in the GOS support package for debugging purposes (#PL-426).
  • Minor improvement: The GSM manual included in GOS was updated to the current version from 2020-06-04 (#PL-527).
• Vulnerability Management:
  • Improvement: The hashing algorithm used to hash GVM user passwords has been updated from MD5 to SHA-512. Passwords for new users will automatically use the new algorithm. Passwords for existing users will be changed automatically, if the user logs in, or if the password for the user is changed (#AP-1254).
  • Bugfix: Scans could get stuck if the target had an HTTPS certificate with a subject DN containing invalid UTF-8 characters (#AP-929, #2021020110000034).
  • Bugfix: When saving changes to multiple schedules at once, a double free error occured (#AP-1424).
  • Bugfix: The time of day was ignored in the filter term “created” in the web interface (#AP-1162).
  • Bugfix: In the “Create Multiple Permissions” dialog in the web interface, the drop-down menu for selecting the affected resources did not work (#AP-1379, #2021051110000073).
  • Minor bugfix: When sorting SecInfo items by severity in the web interface, the severity “N/A” is now sorted below “0.0” (#AP-1267).
  • Minor improvement: The Vulnerabilities page in the web interface is now sorted in descending order of severity by default (#AP-1296).
  • Minor improvement: The cookie used by the web interface now has the attribute “SameSite=Strict” set (#AP-1433).
• Vulnerability Scanning:
  • Improvement: Scans in the queue are now started at an interval of one minute to avoid overloading the system by starting too many scans at once (#SC-215, #2021042810000043).
  • Bugfix: If the Boreas alive scanner was enabled, scanning targets with virtual hosts (vhosts) did not detect all virtual hostnames (#SC-194).
  • Bugfix: If the scanner process was terminated unexpectedly, it was not restarted automatically when required (#SC-226).

20.08.9 (2021-05-03):

• Greenbone OS:
  • Extension: The upgrade path to the next major GOS release, GOS 21.04, has been unlocked for all supported GSM models. Several requirements apply, for details see the GOS 21.04 manual (#PL-172, #PL-223, #PL-417).
  • Improvement: The data-objects (scan configs, report formats, port lists) of the next GOS version will now be automatically downloaded during feed updates. This improves useability when upgrading to the next major GOS release (#PL-388).
  • Bugfix: When restoring a GOS 6 backup in GOS 20.08, some GOS 20.08 database extensions were not installed correctly, which could cause subsequent SQL errors (#PL-356, #PL-381, #2021030910000036).
  • Bugfix: When restoring a backup, the GVM credential encryption key could be duplicated in some cases, making the credentials no longer accessible (#PL-343, #2021031810000055).
  • Bugfix: When restoring a backup, the incron service could fail in rare cases (#PL-366).
  • Bugfix: On GSM appliances with the network namespaces feature a segmentation fault for the collectd service occured, if network interfaces were moved to the scan namespace (#PL-400).
  • Bugfix: When importing a backup or beaming image with the network state ‘gnm’, the state was sometimes set to ‘default’ (#PL-275, #PL-431).
  • Bugfix: An issue with the collectd service has been fixed. Symptoms that could occur were missing performance data in the web interface for network interfaces in the scan namespace, and warning messages during the GOS boot process (#PL-196, #PL-216).
  • Bugfix: The GOS installer did not recognize flash cards with 16 GB capacity included in some newer GSM appliances (#PL-412).
  • Minor bugfix: The wording of some GOS menu dialogs has been changed so that failed GOS upgrades are no longer referred to as successful and a reboot is no longer recommended in such a situation (#PL-326).
  • Minor improvement: When importing a beaming image, a size check of the image is now done to see if there is enough hard disk space to process the image (#PL-322).
  • Minor improvement: The error messages for the beaming feature have been improved, making it easiert to understand why an error occured (#PL-404).
  • Minor improvement: The GSM manual included in GOS was updated to the current version from 2020-05-03 (#PL-444).
  • Minor improvement: The error message when a NVT rebuild fails due to a hash value mismatch has been improved (#AP-1094).
• Vulnerability Management:
  • Improvement: A retry option has been added for master-sensor connections in case the connection is temporarily lost due to network problems. The master will attempt to reconnect 3 times before the scan task is set to “Stopped” (#AP-1126).
  • Bugfix: CVE scans could return no or less results for hosts that were also the target of an ongoing vulnerability scan (#AP-848, #2021010510000074).
  • Bugfix: The alert condition ‘Severity at least’ did not work (#AP-1053, #2021020210000096).
  • Minor bugfix: A case where the Greenbone Vulnerability manager could fail when no report formats were present on a system has been fixed (#PL-331).
  • Minor bugfix: A problem with the “NOT” operator of the powerfilter has been fixed (#AP-962).
  • Minor bugfix: A case where new lines were erroneously removed from the “Detection Method” section of a result has been fixed (#AP-1005).
  • Minor improvement: It is now possible to create targets with underscore characters (“_”) in their hostnames (#AP-1112).
• Vulnerability Scanning:
  • Bugfix: If excluded hosts were not part of the hosts to be scanned, the scan progress was calculated incorrectly, causing interrupted scans (#SC-33).
  • Bugfix: A case with the reverse_lookup_only preferences causing interrupted scans has been fixed (#SC-183, #2021031710000048).
  • Bugfix: A problem with the logging of the scanner that could cause interrupted scans has been fixed (#SC-23).
  • Minor improvement: Some miscellaneous improvements against interrupted scans have been added (#SC-27, #2021022410000054).
  • Minor improvement: The log messages have been improved for the case that a scan was started via a network source interface that has no IP configured and failed (#SC-22).

20.08.8 (2021-03-18):

• Greenbone OS:
  • Improvement: The RAM limits for the GSM ONE and 25V appliances have been increased to 6 GB (#GPE-67).
  • Improvement: The gvm-tools included in GOS were updated to version 21.1.0 (#GPE-45).
  • Improvement: A GOS menu option to migrate all GMP sensors to OSP sensors has been added. The option will migrate the sensor configuration in GOS as well as in the web interface (#GPE-70).
  • Bugfix: If the Remote Syslog service was enabled, upgrades from GOS 6.0 to GOS 20.08.7 failed (#GPE-49, #2021021910000028, #2021021810000075, #2021021810000084).
  • Bugfix: If the HTTP Strict Transport Security (HSTS) functionality was enabled, upgrades from GOS 6.0 to any version of GOS 20.08 failed (#GPE-66, #2020121610000052).
  • Bugfix: Testing the configuration of a remote backup server added the public SSH key of its IP address without a new line to the SSH known hosts, causing subsequent connections to fail (#GPE-48, #202102221000002).
  • Bugfix: The logging of airgap feed updates on airgap sensor appliances failed partially (#GPE-69).
  • Bugfix: When importing a beaming image from a different GOS version, the migration of the SCAP database could fail (#GPE-71).
  • Minor improvement: The GSM manual included in GOS was updated to the current version from 2020-03-18 (#GPE-44).
  • Minor improvement: The GOS superuser password may now contain all printable ASCII characters (#PL-169).
• Vulnerability Management:
  • Bugfix: Invalid references in NVTs could cause database errors, resulting in missing NVT reference data. All NVT references are now validated before they are processed (#GPE-57).
  • Bugfix: Clicking hyperlinks to operating system assets in the web interface could cause an error in some cases (#GPE-34, #2021020210000069).
  • Bugfix: Scan tasks on GMP sensors failed if the same task was started multiple times on the master, or if they were not properly removed from the sensor after completion and then started again on the master. Timestamps are now added to GMP sensor task names to prevent this issue (#GPE-59, #2020101410000051).
  • Minor bugfix: GMP and Greenbone Sensors were displayed with port 9391 in the web interface. This was a cosmetic issue since port 22 is always used. The web interface has been adjusted to always show port 22 now (#GPE-51, #2021022610000014).
  • Minor improvement: The error messages when requesting invalid SecInfo items via the GMP API were improved (#GPE-58).
• Vulnerability Scanning:
  • Bugfix: Scanning a target with an underscore character (“_”) in its hostname resulted in an interrupted scan (#GPE-32, #2021011110000035).
  • Bugfix: Scanning a single, unreachable target resulted in an interrupted scan (#GPE-65).
  • Minor improvement: The logging of interrupted scans was improved for debugging purposes (#GPE-25).

20.08.7 (2021-01-25):

• Greenbone OS:
  • Improvement: A 8 GB SWAP partition was added for the virtual midrange appliances GSM DECA, TERA, PETA, and EXA (#GPE-3).
  • Bugfix: The GOS menu option “Setup > Master > Sensor > Test all sensor connections” caused a traceback in GOS 20.08.6 (#GPE-6, #2020120310000059).
  • Bugfix: The GOS menu option “Setup > Feed > Synchronization” caused a traceback in GOS 20.08.6 (#GPE-24, #2021010810000014, #2021011210000088).
  • Bugfix: Upgrading to GOS 20.08.6 showed a false-positive warning for the hostkey integrity check (#GPE-20, #2020120110000071).
  • Minor improvement: The output of the GSM integrity check is now included in the GOS support package for debugging purposes (#GPE-10).
  • Minor improvement: The GSM manual included in GOS was updated to the current version from 2020-01-21 (#GPE-28).
  • Minor bugfix: The GOS CPU and RAM limits for the GSM ONE and 25V appliances have been corrected to match the VM specifications (#GPE-22).
  • Minor bugfix: The GOS state variable “report_results_threshold” was missing in GOS 20.08 (#GPE-27).
• Vulnerability Management:
  • Bugfix: If an attempt was made to delete the “Feed Import Owner” user and the deletion failed, all “data-objects-via-feed” report formats became unusable (#GPE-4, #2020111110000027).
  • Bugfix: A memory leak in the manager service when handling the scan progress was fixed (#GPE-7).
  • Bugfix: A problem where data-objects-via-feed scan configs could not be created due to vulnerability tests not having a family was fixed. Scan configs are now created in all cases and updated once the vulnerability test family information becomes available (#GPE-14).
  • Bugfix: It was not possible for super admin users to save changes to their own user settings. Most settings can now be changed and saved, with the exception of the user name (#GPE-15).
  • Minor improvement: For host assets with TLS certificates a direct link to the certificate was added on the host detail page. The link can be found in the upper left menu bar (#GPE-12).
  • Minor bugfix: The alert condition “Condition: Severity level changed” was erroneously displayed as “Severity level increased” on the alert list page (#GPE-11).
  • Minor bugfix: Creating permissions for an object without related resources displayed an erroneous menu option (#GPE-13).
  • Minor bugfix: German “Umlaut” characters are now supported in the Business Process Map (#GPE-8).
• Vulnerability Scanning:
  • Bugfix: Modifying the mtime of a vulnerability test plugin file could bypass the signature check when the scanner loaded the file. With the fix, an error is now logged and the file is not loaded (#GPE-1, ##2020100610000011).
  • Bugfix: When running SNMP-related vulnerability tests, the scanner could return unexpected strings or an incomplete response (#GPE-5).
  • Minor improvement: The SSH timeout can now be configured by vulnerability tests. If no configuration is provided, the default of 10 seconds will be used (#GPE-17).

20.08.6 (2020-11-30):

• Greenbone OS:
  • Extension: Alerts and Schedules are now available on the GSM ONE (#152653).
  • Improvement: The gvm-tools included in GOS were updated to version 20.10.1 (#150912).
  • Improvement: To prevent problems, major GOS upgrades are no longer possible if there is not enough storage space left for the database migration (#147578).
  • Improvement: If the Greenbone Feed Signing Key, which is required for the validation of GOS upgrades, is expired, upgrades are no longer possible instead of failing. For a solution, contact Greenbone Networks Support (#93687, #148007).
  • Bugfix: During a master-sensor feed update, not all NVTs were updated on the sensor in some cases (#150662, #2020101910000051).
  • Bugfix: The GOS system integrity check could report a false positive warning after a GOS backup was restored (#147070).
  • Bugfix: The LCD display service could sometimes fail on GSM models 5300 und 6400 (#136798, #2020032710000049).
  • Bugfix: During the first time setup wizard, the feed server is no longer contacted twice in rapid succession. This could cause problems in combination with the Greenbone Community Feed server. Users of the Greenbone Security Feed Server were not affected (#120005).
  • Bugfix: SSH keys of the types ‘rsa-sha2-256’ and ‘rsa-sha2-512’ are now supported (#150121, #2020101910000069).
  • Minor bugfix: The spelling and usability of the GOS administration menu have been improved (#101818, #103537, #123181, #144657, #150664, #2019062610000057).
  • Minor bugfix: Uninstalling the gsm-debug meta-package did not uninstall all contained packages (#147286).
  • Minor bugfix: The collected service could generate excessive, but harmless log messages (#68977).
  • Minor improvement: The full GOS version including the current patch level is now shown on the GOS login screen (#116817).
  • Minor improvement: If no SSH host keys exist, they will now be re-created when enabling the SSH service (#149548).
  • Minor improvement: A command line setting to configure the timeout of SCP alerts has been added (#144727).
  • Minor improvement: Help texts have been added for running the GOS integrity check via the command line (#146804).
  • Minor improvement: All files included in the Greenbone Support Package are now non-hidden by default (#81612).
  • Minor improvement: The GSM manual included in GOS was updated to the current version from 2020-11-30 (#152775).
• Vulnerability Management:
  • Improvement: The alert condition ‘[Filter] matches at least [x] result(s) NVT(s)’ has been added (#148607, #2020092310000036).
  • Improvement: When editing a ‘Username + SSH Key’ credential, the correctness of the password is now verified (#112159).
  • Bugfix: Deleting and then re-downloading a scan config that had all NVTs of a family selected, e.g. ‘Full and very deep’, caused that family to have no NVTs selected (#150579, #2020102210000053, #2020102610000019)
  • Bugfix: If a IP addresses of target hosts were configured with a leading zero in an octet, e.g. ‘192.168.50.010’, the maximum number of hosts was calculated incorrectly, and vulnerability scans could fail (#151801, #2020111010000029).
  • Bugfix: If a target credential cannot be decrypted, an unauthenticated vulnerability scan without a credential will now be run against the target. Previously, the scan would remain in the status ‘Requested’ indefinitely (#149549).
  • Bugfix: For SCP alerts the handling of usernames and destination paths has been improved in combination with Windows systems. In addition, a configurable timeout has been introduced for the SCP alert to prevent it from running indefinitely in some situations (#144727, #2020071610000044).
  • Bugfix: It was not possible to delete a web user, if the user owned TLS certificates, and no inheriting user was provided (#149652, #2020101410000078).
  • Bugfix: When deleting a web user, web interface settings will no longer be inherited. This will prevent settings of the inheriting user from being overwritten (#149652, #2020101410000078).
  • Bugfix: It was not possible to delete orphaned permissions in all cases (#150186, #2020102110000019).
  • Bugfix: The verification of ports and port ranges when editing a port list has been improved (#149776).
  • Bugfix: The ‘scan_nvt_version’ XML tag in XML reports was empty erroneously (#150569, #2020102210000071).
  • Bugfix: Moving a data object via feed scan config or policy to the trashcan generated excessive, but harmless log warnings (#149299, #2020100710000046).
  • Bugfix: Two SQL errors that could occur when rebuilding the SCAP or CERT databases have been fixed (#151175).
• Vulnerability Scanning:
  • Bugfix: If a host name in a list of target hosts could not be resolved, scans could fail with the status ‘Interrupted’ (#150988, #2020102810000033).
  • Bugfix: When configuring a target IP with a subnet mask of less than /24, addresses ending in ‘.0’ are now supported (#150990).
  • Bugfix: When the host name resolution of a target resolved it to more than one IP address, the scan progress bar percentage could show ‘100%’ even though the scan was still in progress (#149349).
  • Bugfix: For scans with a SNMP credential, the SNMP community ‘None’ was erroneously used when configuring no community. An empty string is now used to assure that no community will be used (#149649).

20.08.5 (2020-10-15):

• Greenbone OS:
  • Bugfix: Activating DHCPv6 could cause an error (#149180).
  • Bugfix: GOS upgrades did not stop as expected, if the packages to be upgraded could not be verified. An empty upgrade was applied in this case (#149212).
  • Bugfix: Vulnerability scans could erroneously show missing ‘iTLB multihit’ Linux kernel mitigations for GOS. Since no virtualization is in use, the system was and is always protected by the kernel unconditionally (#146845).
  • Minor bugfix: During feed updates, cosmetic known hosts warnings for the IP address ‘172.30.2.22’ appeared (#146729, #2020100210000028)
  • Minor improvement: The postgres database migration during GOS upgrades has been improved (#148526).
  • Minor improvement: To prevent problems, major GOS upgrades are no longer possible if a global gateway is used, but no global gateway interface is configured (#147418).
  • Minor improvement: The warning text displayed if a GOS upgrade is blocked has been updated (#148006).
  • Minor improvement: The GSM manual included in GOS was updated to the current version from 2020-10-15 (#149706).
• Vulnerability Management:
  • Bugfix: The Scans > Vulnerabilities page in the web interface could fail to load due to an error (#143484).
  • Bugfix: A database deadlock could occur if changing the feed import owner and browsing scan results at the same time (#146803).
  • Bugfix: The ‘Auto Delete Reports’ functionality did not work on GSM models that do not support schedules (#133136, #2020020310000041).
  • Bugfix: The advanced task wizard in the web interface no longer offers to create a schedule on GSM models that do not support schedules (#147660, #2020091010000122).
  • Bugfix: The number of hosts shown per operating system on the Assets > Operating Systems page included operating systems for which the user did not have permissions to view (#140467).
  • Bugfix: When changing the name or comment of a scan configuration or a policy that was in use, an erroneous warning was displayed (#120605, #147669).
  • Bugfix: Filters attached to SecInfo alerts could not be edited and saved (#109311, #2020081710000022, #202008171000002).
  • Bugfix: The placeholder ‘$U’ did not work for e-mail alerts (#148533, #2020092310000036).
  • Bugfix: Saving invalid values for the ‘Rows Per Page’ setting in the ‘My Settings’ menu is now prohibited, and corresponding tooltips have been implemented (#148529).
  • Bugfix: The deprecated ‘SecInfo’ filter setting has been removed from the ‘My Settings’ menu (#149179, #2020100510000031).
  • Bugfix: TLS certificates from container tasks, or belonging to other users, could not be downloaded even with permissions (#148892, #2020092810000081).
  • Bugfix: TLS certificates downloaded via the web interface could not be re-uploaded via the API (#125191).
  • Minor improvement: The tooltip for override indicators on result details pages in the web interface has been improved (#146799).
• Vulnerability Scanning:
  • Bugfix: SNMPv3 authentication for vulnerability scans failed, if no SNMP community was configured, even though the SNMP community is not relevant for SNMPv3 (#148611).
  • Bugfix: Vulnerability scans failed, if a scan configuration or policy without any NVT preferences was used (#148894).
  • Minor improvement: The error handling for WMI queries has been improved. Previously the logging was too verbose and included events that were not errors, but expected behaviour (#125438).

20.08.4 (2020-09-23):

• Greenbone OS:
  • Extension: The former ‘Greenbone Community Edition’ virtual appliance has been updated to GOS 20.08 and renamed to ‘GSM TRIAL’ (#148403).
  • Bugfix: Virtual GSM appliances with EFI/UEFI boot mode could fail to boot after being exported or cloned (#148262).
  • Bugfix: The ‘GSM Installation and Rescue’ GRUB option did not boot the GOS installer as expected (#148530).
  • Bugfix: The USB power management on GSM hardware appliances could consume excessive CPU time (#147583).
  • Bugfix: The verification of a downloaded flash image would always fail (#147878).
  • Bugfix: Sensor scans via a proxy could fail for OSP sensors (#147582).
  • Minor bugfix: The GOS version was not displayed correctly in the GOS installer (#147658).
  • Minor improvement: The database-vacuum script that is used to reclaim storage space has been updated (#148266).
  • Minor improvement: The description of the ‘Setup > Services > SNMP’ menu has been extended, it now includes a warning that saving SNMP configuration changes will stop all running scans (#148479).
  • Minor improvement: A warning has been added when using the command ‘su’ incorrectly in the Greenbone OS command line administration (#147666).
  • Minor improvement: The GSM manual included in GOS was updated to the current version from 2020-09-22 (#147872).
• Vulnerability Management:
  • Improvement: For Compliance Audits, the base colouring of all non-compliant audit status has been adjusted to red. This way, non-compliant audits can be identified much quicker, for example, a 0% compliant audit status will now be always shown in red (#147577).
  • Bugfix: When editing and saving scan configurations or compliance policies, the names of some included NVT preference options were not saved correctly (#147870).
  • Minor bugfix: On Schedule and Report Format details pages in the web interface, the ‘Move to trashcan’ button was incorrectly shown as a ‘Delete’ button (#147936).
• Vulnerability Scanning:
  • Improvement: Experimental TLS 1.3 support has been enabled for the OpenVAS vulnerability scanner (#145963).
  • Improvement: Experimental SNMPv3 support has been enabled for the OpenVAS vulnerability scanner (#57662).
  • Bugfix: Stopping a vulnerability scan could fail in some cases (#147124).

20.08.3 (2020-09-10):

• Greenbone OS:
  • Bugfix: GOS could not be installed with EFI/UEFI boot mode on VirtualBox 6.1.14 or later (#147300).
  • Bugfix: If no network interface as assigned to the global gateway, upgrades from GOS 6.0 failed (#147215, #2020090410000018, #2020090710000012, #2020090710000067, #2020090710000101).
  • Bugfix: The package ncat was erroneously removed when upgrading to GOS 20.08 (#147574).
  • Bugfix: Feed updates via proxy could fail on GSM models 35 and 25V (#147437).
  • Bugfix: Removed an unnecessary menu option to configure the sensor protocol for GSM modes 35 and 25V. These appliances will always use the OSP protocol (#147301).
  • Minor bugfix: Reduced the amount of error messages when the feed import owner had been set, but no feed was present on the system. These error messages were expected and are harmless (#147303).
  • Minor improvement: The GSM manual included in GOS was updated to the current version from 2020-09-10 (#147570).
• Vulnerability Scanning:
  • Bugfix: Only the default alive test method was applied (#147302, #2020090810000038).

20.08.2 (2020-09-07):

• Greenbone OS:
  • Extension: EFI/UEFI boot mode has been implemented for all virtual GSM appliances shipped with GOS 20.08.2 or later (#147079).
  • Improvement: The GOS upgrade functionality has received several internal improvements and fixes (#147130).
  • Minor improvement: The GSM manual included in GOS was updated to the current version from 2020-09-07 (#147129).

20.08.1 (2020-09-03):

• Greenbone OS:
  • Bugfix: The settings ‘Management IP (v4)’ and ‘Management IP (v6)’ were not applied (#147079).
  • Bugfix: GOS upgrades no longer fail if the system integrity is compromised. However, after the upgrade, a system integrity warning will be displayed (#147125).
  • Minor improvement: The GSM manual included in GOS was updated to the current version from 2020-09-03 (#146861).
• Vulnerability Management:
  • Bugfix: When importing scan configurations or compliance policies, the included NVT preferences were not imported correctly in all cases (#146855).
• Vulnerability Scanning:
  • Bugfix: In rare cases stopping a scan task could cause system instability (#146802).

20.08.0 (2020-08-31):

• • Scan Queueing: To prevent scans from overloading the system and from starting at an inappropriate time (e.g., during a feed update), a scan queue management has been introduced. Scan tasks are only started if sufficient system resources are available. The available resources depend on the GSM model, the GOS version used, and the current workload of the system. If too many tasks are started and running at the same time and not enough resources are available, scans are added to a waiting queue. A new status bar “Queued” has been introduced.

• • Performance Improvements: Due to scan queueing as well as other architecture improvements, the number of scans that can be run simultaneously has been increased in GOS 20.08 when compared to GOS 6.0. On a GSM 400 we measured more than twice the capacity with GOS 20.08 in comparison to GOS 6.0.
  • Data Objects via Feed: With GOS 20.08, scan configurations, compliance policies, report formats, and port lists by Greenbone Networks will be distributed via the Greenbone Security Feed. This allows for direct updates of existing objects, and for the publication of new scan configurations, compliance policies, etc. for current, hot NVTs. In addition, users will not need to manually download additional files from the Greenbone website anymore.
  • Beaming: Beaming makes it possible to copy the current state of a GSM to another GSM. The data may be transferred directly and securely from one GSM to another, or it may be saved for a later transfer. The data includes all user data (e.g., tasks, reports, results) and – optionally – system settings, i.e., the GOS configuration. Beaming makes it much easier to upgrade from one GSM model to another while still keeping all previous data.
  • Business Process Map:The Business Process Map (BPM) can be used to illustrate the impact of collected scan results on a business. Each process has assigned hosts and will be highlighted based on the highest severity of these hosts. This way, it is possible to see the vulnerability of processes and their impact on any linked processes at a glance, determining the risk to the company based on the location of a host within the process chain.
  • Updated Feed Status Page: The feed status page of the web interface has received several improvements. The status of the objects that are distributed via the feed (scan configurations, compliance policies, port lists and report formats) is now included in the table. In addition, the feed status page now shows if a feed update is in progress.
  • Start Task via “New SecInfo” Alert: Starting a task automatically after a feed update is now possible. This feature unlocks the combination of a “New NVTs/CVEs/CPEs…” alert event and the “Start Task” alert method in the web interface.
  • GOS Backup Compatibility Checks: The Greenbone Operating System (GOS) now checks whether a backup is suitable before restoring the backup. Unsuitable backups cannot be restored, and warnings may be displayed. This feature prevents errors when restoring backups.
  • Comprehensive Update of the Base System: For GOS 20.08, the underlying Linux foundation of GOS was updated to the latest version.

2019-10-31: Greenbone OS 6.0

Latest Patch Level: 6.0.15 (2021-02-22)

Lifecycle Phase: Retired 2021-02-22

6.0.15 (2021-02-22):

• Greenbone OS:
  • Status: Set the release status to “retired” for all GSM types with GOS 6.0. An upgrade notification will be displayed in the GOS selfcheck (#157074).
  • Bugfix: Enabled the GOS upgrade functionality, if GOS is in the status “retired” or “end-of-life” (#157073).

6.0.14 (2020-09-23):

• Greenbone OS:
  • Improvement: To prevent problems, major GOS upgrades, such as the upgrade to GOS 20.08, are no longer possible if there is not enough storage space left for the database migration (#147423).
  • Minor improvement: The database-vacuum script that is used to reclaim storage space has been updated (#148265).
  • Minor improvement: The warning text displayed if an upgrade to GOS 20.08 is blocked has been updated (#148005).

6.0.13 (2020-09-16):

• Vulnerability Management:
  • Bugfix: When importing scan configurations or compliance policies, the included NVT preferences were not imported correctly in all cases (#147938).
  • Bugfix: When editing and saving scan configurations or compliance policies, the names of some included NVT preference options were not saved correctly (#147938).

6.0.12 (2020-09-03):

• Greenbone OS:
  • Bugfix: The upgrade to GOS 20.08 caused an error for hardware GSM appliances with active settings ‘Management IP (v4)’ or ‘Management IP (v6)’ (#146930, #2020090210000012, #2020090210000058, #2020090210000031).

6.0.11 (2020-08-31):

• Greenbone OS:
  • Extension: The upgrade path to GOS 20.08 has been unlocked for all GSM models (#131625).
  • Bugfix: The GOS upgrade functionality has received several fixes and improvements (#143826, #144927).
  • Minor improvement: To prevent problems, major GOS upgrades, such as the upgrade to GOS 20.08, now require a reboot before being started, if another upgrade, such as the upgrade to GOS 6.0.11, was run immediately before (#146857).
  • Minor improvement: To prevent problems, major GOS upgrades, such as the upgrade to GOS 20.08, are no longer possible if the the ‘gsm-debug’ package is installed (#144929).

6.0.10 (2020-07-30):

• Greenbone OS:
  • Bugfix: The ‘Max email size’ setting in the ‘Setup/Mail’ menu has been split into the settings ‘Max attachment’ and ‘Max include’ to prevent mail truncation issues (#143124).
  • Minor improvement: The installation history of all installed GOS versions, starting with version 6.0.10, is now included in the GOS support package (#134537).
  • Minor improvement: The GSM manual included in GOS was updated to the current version from 2020-07-29 (#143155).
• Vulnerability Management:
  • Bugfix: The ‘Add new host’ dialog on the ‘Assets/Hosts’ page allowed unsanitized input in the ‘Name’ field. The field has been renamed to ‘IP Address’, and it only allows IPv4 or IPv6 addresses now (#143731, #143737).
  • Bugfix: The ‘Solution’, ‘Summary’, ‘Insight’, ‘Affected Software/OS’, ‘Impact’, and ‘Detection Method’ NVT details could not be filtered (#143748, #2020071010000055).
  • Bugfix: The ‘Vulnerable Products’ could disappear from CVE detail pages during loading (#142986).
  • Bugfix: Reference identifiers on CVE detail pages were missing (#142987).
  • Bugfix: The ‘Published’, ‘Last updated’, ‘Modified’, and ‘ID’ information on CVE detail pages was missing (#143743).
  • Bugfix: ‘GCR PDF’ reports did not include compliance details (#143858, #2020071410000011).
  • Bugfix: The ‘Dashboards’ page could fail to load in rare cases (#131921, #2020013110000035, #2020070110000116).
  • Minor bugfix: The ‘XML’ and ‘Anonymous XML’ report formats had a interchanged description (#143812).
  • Minor improvement: The NVT rebuild of the manager now also rebuilds the NVT preferences. This removes any deprecated NVT preferences (#143852).
• Vulnerability Scanning:
  • Bugfix: The scanner generated incorrect checksums for ICMPv6 packets. This could cause failed alive detections of IPv6 targets when using specific, non-default scan configurations. In addition, it could cause less detection results for some IPv6 targets (#143315).

6.0.9 (2020-06-29):

• Greenbone OS:
• • Bugfix: The Intel June 2020 microcode update is included, addressing the ‘CROSSTalk’, ‘CacheOut’ and ‘SGAxe’ vulnerabilities of Intel processors (#134852, #142326, #2020030410000065, #2020031810000039).
  • Bugfix: The GOS setup could fail in rare cases (#142487).
  • Minor improvement: The GSM manual included in GOS was updated to the most current version from 2020-06-27 (#143122).
• Vulnerability Management:
  • Bugfix: CVEs that were removed during a feed update were not removed from the database in some cases, resulting in an incorrect number of CVEs and incorrect CVE <-> CPE references. The corresponding database is now rebuilt during each GOS 6.0 upgrade to ensure the correct data (#140008).
  • Bugfix: The ‘NVTs addressing this CVE’ section on CVE details pages could show inaccurate NVT references, e.g., CVE-2019-12345 was also displayed when CVE-2019-1234 was displayed (#140464, #2020051910000015).
  • Bugfix: The ‘Reported Vulnerabilities’ section on CPE details pages could fail to load in some cases (#129752).
  • Bugfix: GSR HTML reports sometimes failed to load (#129078, #2020011410000095, #2020011710000026, #2020020510000038, #2020021710000033, #2020021710000168).
  • Bugfix: GSR HTML reports generated with GOS 6.0 did not include CVE nor CPE references (#137200, #2020040110000051).
  • Bugfix: Filtering a GSR HTML report using IPv4 addresses did not work correctly (#140620).
  • Bugfix: GPG or S/MIME encrypted e-mail alerts could fail, resulting in no e-mail being sent (#129221).
  • Bugfix: The ‘Auto Cache Rebuild’ setting can cause a duplicate entry in the database. This could cause scans to freeze. Scans now work correctly even if this duplicate entry is present (#140255, #2020050810000045).
  • Bugfix: Tasks with an ampersand character (‘&’) in the task name caused an error if they were run on a GSM sensor (#141858).
  • Bugfix: ‘All SecInfo’ page contents could not be exported via the ‘Export page contents’, ‘Export selection’ or ‘Export all filtered’ buttons (#141867).
  • Minor bugfix: The number of hosts in the ‘Vulnerabilities’ section of GSR HTML reports was always ‘1’ (#131036).
  • Minor bugfix: Long result texts in GSR HTML reports were missing line breaks (#131689, #2019041710000041).
  • Minor improvement: GSR HTML reports now include notes (#107465, #2019011010000023)
• Vulnerability Scanning:
  • Improvement: Scans can now be started at all times irregardless of feed updates. Since scans and feed updates may not occur at the same time, the feed update will now be postponed until all scans are finished. Scans that are started while a feed update is pending will use the older feed version. A warning message will be added to the scan reports and system logs, if a scan uses such an outdated feed version (#140411, #2020043010000031, #2020060910000112).
  • Minor bugfix: The CIDR address validation of target hosts has been improved further (#141308).
  • Minor improvement: The handling of scan preferences in Redis has been improved (#141193).

6.0.8 (2020-05-25):

• Greenbone OS:
  • Bugfix: The available system memory (RAM) was lower than expected due to a ‘PCI hole’ problem, this has been corrected for all affected GSM appliances (#137862, #2020042410000016, #2020042810000027, #2020042910000043, #2020010210000018, #2020050710000038).
  • Bugfix: The upgrade path from GOS 4.2 to GOS 6.0.7 failed on GSM master appliances that had sensors configured (#140182, #2020051310000017).
  • Bugfix: A timeout for the feed update lockfile functionality from GOS 6.0.7 has been added to prevent processes potentially waiting infinitely to aquire the lockfile (#139495).
  • Bugfix: Airgap feed updates in progress now also take the feed update lockfile functionality from GOS 6.0.7 into account (#137870).
  • Bugfix: The keyboard layout selection was not applied sporadically (#139724).
  • Minor improvement: Added the dmidecode package to GOS, and added the dmidecode output to the Greenbone Support Package (#138961).
  • Minor improvement: Adjusted the snmpd configuration to prevent excessive log messages (#126898).
  • Minor improvement: If the networking service is in a failed state, a switch release can no longer be started, preventing subsequent errors (#129755).
  • Minor improvement: The GSM manual included in GOS was updated to the most current version from 2020-05-18 (#138576).
• Vulnerability Management:
  • Improvement: The ‘Hosts’ counter of the Operating Systems page now only counts hosts for which the operating system was detected as the primary / best-matching operating system (#132428).
  • Bugfix: The Quality of Detection (QoD) was set to 75% for Results gathered by a GSM sensor (#138692, #2020051510000068).
  • Bugfix: The ‘Deny all and allow’ hosts setting for a user had no effect (#132302).
  • Bugfix: The ‘Scanner’ setting was not available when configuring an Audit (#135118, #2020031010000035).
  • Bugfix: A passphrase input field was missing when creating or editing credentials of the type ‘Client Certificate’ (#134697).
  • Bugfix: Hyperlinks on the NVTs list page to the NVT families were not functional when opened in the same tab (#132655).
  • Bugfix: The hyperlink to the NVT family ‘Windows : Microsoft Bulletins’ was always incorrect (#132577).
  • Bugfix: The ‘Audit visible to’ indicator was not shown in all expected cases (#136111).
  • Bugfix: OVAL definitions were duplicated in rare cases (#128163).
  • Bugfix: The placeholder ‘%F’ did not work in the Report Export Filename setting (#134768).
  • Minor bugfix: The counters on a Report details page switched between zero and the actual value when a scan is running (#131731, #131096)
  • Minor bugfix: The warning when triggering an Alert for a Report that is above the results threshold did not include the results threshold (#138573).
  • Minor bugfix: If the New/Edit Credential dialog was opened from another dialog, credential error messages were not shown as expected (#128599).
  • Minor bugfix: The Errors tab in Report details was missing information (#134698, #2020022710000121, #2020022810000031).
  • Minor improvement: The memory usage of the gvmd service has been improved (#140183).
  • Minor improvement: The ‘get_vts’ command will no longer return NVTs if the NVTs are being updated to prevent subsequent errors (#138759).
  • Minor improvement: When the same TLS Certificate was found multiple times for the same Host, the Host was displayed multiple times in the TLS Certificate details (#125193).
  • Minor improvement: The naming of the TLS Certificate content columns has been streamlined (#132009).
• Vulnerability Scanning:
  • Bugfix: The CIDR format validation for targets has been improved (#135027).
  • Minor bugfix: The false positive warning ‘Invalid VT oid for a result’ was logged when scanning a dead host (#134693, #2020030410000065).
  • Minor bugfix: A missing ‘id’ function parameter in script_get_preference has been added (#131686).

6.0.7 (2020-04-15):

• Greenbone OS:
  • Improvement: The system memory limits have been increased to 6 GB for the GSM types 400, 150 and 35 and to 5 GB for the GSM types ONE, MAVEN, 25V and CE (#137202).
  • Improvement: The available disk space is now checked before creating a backup. If the disk space is not sufficient, no backup will be attempted (#134696).
  • Bugfix: The upgrade of GSM master-sensor setups to GOS 6.0.6 could fail if they were migrated from GOS 4.3 (#135389, #2020031210000013, #2020031210000022).
  • Minor improvement: The Greenbone Vulnerability Manager NVT cache rebuild during a GOS upgrades is now part of the GOS upgrade system operation (#136112).
  • Minor improvement: The GSM manual included in GOS was updated to the most current version from 2020-04-09 (#137204).
  • Minor improvement: The full GOS version and the installation date are now recorded in the installation log (#134536).
• Vulnerability Management:
  • Improvement: For the Greenbone Vulnerability Manager the ‘–rebuild’ option was reintroduced, allowing to fully rebuild the NVT database in a clean state (#133336, #134667).
  • Bugfix: A lockfile is now created when either openvas or ospd-openvas update their respective NVT caches. Only one process will now be able to update its cache at a time, this should prevent potentially corrupted caches (#129077, #134666, #136113).
  • Bugfix: Reports from previous GOS versions which contain unescaped, invalid control characters will be cleaned when upgrading to GOS 6.0.7 (#134573, #2020022810000012, #2020030210000069, #2020030310000094, #2020030310000138, #2020030410000011, #2020030210000096, #2020012210000061, #2020021310000031, #2020022810000021, #2020032710000031, #2020030410000029).
• Vulnerability Scanning:
  • Improvement: The memory usage of ospd-openvas has been improved (#137201, #2020010210000018, #2019122310000041, #2020011310000024, #2020030210000096, #2020012810000014).
  • Bugfix: For scan results, control characters that are not supported in XML are now properly escaped (#134573).

6.0.6 (2020-03-05):

• Greenbone OS:
  • Improvement: An incremental backup is now automatically attempted before every GOS upgrade (#132588).
  • Bugfix: The feed directories in GOS could have had erroneous permissions. The permissions are now corrected during every feed update (#130351, #132578).
  • Bugfix: GSM master appliances copied their flash images to all connected GSM sensors during a feed push. The images will no longer be copied, existing erroneous images on the sensors will be cleaned when using the ‘Maintenance/Flash/Download’ option in the GOS menu (#134524).
  • Bugfix: SCP Alerts caused a path error in GOS (#132433, #2020012810000032).
  • Bugfix: Error messages from SCP Alerts in the Manager journal were shown as ASCII character codes or blob data (#132431, #2020012810000032).
  • Bugfix: An unsupported email attachment size setting could be used in rare cases, causing an error when a truncation warning should have been sent via email (#131574).
  • Minor Bugfix: The GOS copyright has been updated to reflect the correct LICENSE for the Greenbone Security Feed (#134331).
  • Minor improvement: The GSM manual included in GOS was updated to the most current version from 2020-03-05 (#134851).
  • Minor improvement: The current NVT count of the GSM is now included in the Greenbone Support Package (#134413).
• Vulnerability Management:
  • Bugfix: XML exports of Reports could produce corrupt XML files (#130561. #2020011510000066, #2020020610000027, #2020021310000031).
  • Bugfix: Invalid host details could cause a JavaScript error on the ‘Assets/Hosts’ page, preventing it from being displayed (#133624, #2020021110000053, #2020022710000103).
  • Bugfix: The Scan Config ‘scanner_plugins_timeout’ preference was not correctly migrated from GOS 5.0 in all cases, which led to subsequent errors when scanning (#130349).
  • Bugfix: Private key authentication was missing for SCP Alerts (#125050, #2019101810000019).
  • Bugfix: Verinice ISM exports of Reports could contain identical links, preventing the import in verinice. (#132592).
  • Bugfix: Erroneous ‘sync_scap’ and ‘Skipping CPEs’ messages could sometimes repeatedly appear after a feed update (#130352).
  • Bugfix: For host identifiers, the ‘Delete Identifier’ button was missing (#131629).
  • Bugfix: The ‘Stop’ button for Tasks was useable for users who had only been granted ‘Read’ permissions on the task (#128686).
  • Bugfix: The ‘Add tag to page contents’, ‘Add tag to selection’ and ‘Add tag to all filtered’ buttons did not add the tag to the resources (#132814).
  • Bugfix: Vulnerabilities could not be exported via the ‘Export page contents’, ‘Export selection’ or ‘Export all filtered’ buttons (#125741).
  • Bugfix: The ‘Task visible to’ indicator was not shown in all expected cases (#131916).
  • Bugfix: When editing a LDAP or RADIUS configured User, the authentication method preselection would be set to ‘Password’. The preselection is now saved correctly according to the authentication method (#129700).
  • Bugfix: For Tasks created via the Task Wizard, the ‘Auto Delete Reports’ count could be out of range, causing an error (#131918, #2020020510000074).
  • Minor bugfix: The sort order for hosts without a host name has been improved in the ‘Hosts’, ‘TLS Certificates’ and ‘Error Messages’ tabs for Report details (#130028).
  • Minor bugfix: Invalid SecInfo URLs did not display an error page in all cases (#112794).
  • Minor improvement: The wording for unavailable SecInfo item error pages, for example for CVEs, has been improved (#112794).
  • Minor improvement: The wording for unavailable results in delta reports has been improved (#125848).

6.0.5 (2020-02-19):

•  Vulnerability Management:
  • Bugfix: Result details generated via NVTs with the new NVT OID scheme were incomplete (#134029).

6.0.4 (2020-02-13):

• Greenbone OS:
  • Bugfix: The Greenbone Vulnerability Manager NVT cache is now rebuilt during a GOS upgrade (#132582, #133623).
  • Minor improvement: Log messages from ospd-openvas are now included in the GOS menu ‘Advanced/Logs/Scanner’ (#130353).
  • Minor improvement: The GSM manual included in GOS was updated to the most current version from 2020-02-11 (#133341).
• Vulnerability Management:
  • Bugfix: Reports sent via the ‘Trigger Alert’ functionality on Report details pages did not contain any vulnerability details (#132585, #2020010710000036).
  • Bugfix: Reports sent via an Alert, if the event of the Alert was triggered, did not use the ‘Report Export Filename’ user setting (#132586).
  • Bugfix: Hyperlinks to Report Formats, Scan Configs, Port Lists and Operating Systems from Permission objects were incorrect (#131102).
  • Bugfix: Anonymous XML reports had an incorrect XML declaration, which could cause an error when retrieving them via the command line (#131561, #2020011510000066).
• Vulnerability Scanning:
  • Bugfix: The Scan Config Scanner preferences ‘expand_vhosts’, ‘max_sysload’, ‘min_free_mem’ and ‘test_empty_vhosts’ were missing (#131833).
  • Bugfix: The deprecated Scan Config Scanner preferences ‘debug_mode’, ‘dry_run’, ‘vhosts’ and ‘vhosts_ip’ were removed. These preferences may still appear in the web interface, but will not be functional. They should not be considered and may be hidden in a future GOS patch level (#131833).
  • Bugfix: The Target options ‘reverse_lookup_only’ and ‘reverse_lookup_unify’ were not sent to the Scanner (#132289).
  • Bugfix: The error handling for NVTs that are missing from the ospd dictionary was improved. They should now be skipped during a scan instead of causing a process failure (#130350).
  • Bugfix: The names of NVTs are now escaped before they are sent as a part of a Result (#132004).
  • Bugfix: SNMP credential preferences were missing delimiters when sent at the start of a scan (#132002).

6.0.3 (2020-01-23):

• Greenbone OS:
  • Improvement: Significantly reduced the time required to upgrade from GOS 5 to GOS 6 for appliances with large databases (#128835).
  • Improvement: Added a GOS selfcheck to warn users about changes of default behaviour and necessary sensor adjustments after upgrading to GOS 6 (#128406).
  • Improvement: Added a GOS selfcheck to warn users about an ongoing, major release upgrade, e.g. from GOS 5 to GOS 6 (#128479).
  • Bugfix: A sqlite database could still be generated on the file system of a GSM 150, even though sqlite usage was removed from GOS 6 (#130812).
  • Bugfix: A sudo prompt could be erroneously shown when uploading a GSF key. After upgrading to GOS 6.0.3, a reboot is required to fully remedy the situation (#129222).
  • Bugfix: The system integrity could be uncertain for new installations and after a factory reset due to a race condition (#131037).
  • Minor bugfix: Logs from the OpenVAS scanner were missing from the GOS support package (#129697).
  • Minor improvement: Updated the integrated version of the GSM manual (#131044).
• Vulnerability Management:
  • Improvement: Added a check for the web interface when trying to view the Report details of a Report with a large number of Results. If this Results threshold is reached, the Report details will no longer be loaded. By adjusting the Report filter term the number of Results can be reduced, making it possible to view the Report details again. The default threshold is 25.000 Results per Report, this threshold can be adjusted via GOS at the responsibility of the user (#128398).
  • Improvement: Improved the memory allocation management of the gsad webserver (#128981).
  • Improvement: The Verify Scanner action in the web interface now also checks whether the credential of the GMP scanner is correct (#89510).
  • Bugfix: The connection of a GSM master appliance to GMP scanners could fail (#131623, #131709, ##2020011610000037).
  • Bugfix: The Summary, Insight, Affected Software/OS and Detection Method paragraphs on Result details pages could show no or incomplete information (#129621).
  • Bugfix: In the New Override dialog, the Severity: Other input field did not accept valid inputs (#130795).
  • Bugfix: Sorting the columns in several Report details tabs, e.g. Closed CVEs, did not work correctly (#131693).
  • Bugfix: Changing the Results filter for a Report that is loading did not apply the new filter (#131695).
  • Bugfix: Unsetting all Severity (Class) levels via the Update Filter dialog lead to a wrong filter term (#131694).
  • Bugfix: Permissions linked to Resources showed ‘Orphan’ instead of the link to the Resource (#129696).
  • Minor bugfix: Comments for Permissions could not be deleted as expected (#128145).
  • Minor bugfix: Dashboards on the Tasks page included Audits in the total number of Tasks (#128332).
• Vulnerability Scanning:
  • Bugfix: The Alive Test setting of a Target did not overwrite the Scan Config default, if it was set to a custom value (#130722).

6.0.2 (2019-12-19):

• Greenbone OS:
  • Bugfix: The system integrity check did not recognize all valid GSF keys as valid. This could cause ansible to fail (#129624, #2019121810000168, #2019121910000077).
  • Minor improvement: Enhanced the contents of the Greenbone Support Package. More debugging information related to the system integrity check is now included (#129622).

6.0.1 (2019-12-17):

• Greenbone OS:
  • Improvement: The time required for a synchronization of the Greenbone Security Feed has been reduced significantly (#126323).
  • Bugfix: During the initial feed update after the setup of a GSM, postgres could rarely fail due to a race condition (#128984).
  • Bugfix: SNMPv2 was still active even when a user name and an authentication passphrase were configured (#128597).
  • Bugfix: IPv6 routes were not shown correctly in the GOS menu (#128331).
  • Bugfix: The ‘Scanner’ and ‘Upgrade’ log options in the GOS menu did not work (#128112).
  • Minor improvement: Updated the integrated version of the GSM manual (#128691).
• Vulnerability Management:
  • Improvement: Increased the automatic reload timer for web interface pages to 60 seconds for hidden windows and tabs. This may have a beneficial impact on performance (#126498).
  • Improvement: Redesigned the ‘Edit Scan Config Family’ dialog for better performance and usability (#111530).
  • Bugfix: Introduced a fallback when requesting an unlimited number of rows in the Power Filter. Unlimited rows should now only be applied when the user explicitly requests it, in all other cases the ‘Rows Per Page’ setting should be used (#128565).
  • Bugfix: The ‘Special Groups’ setting did not work correctly when configuring it for a Group with existing members. This could result in missing Permissions for some Group members (#128334).
  • Bugfix: Resuming a Scan Task caused a new report to be generated. The Results from the resumed Scan will now be added to the current report as expected (#125046).
  • Bugfix: Icon tooltips in the web interface were not functional (#126250).
  • Bugfix: Sorting TLS Certificate Assets in the web interface did not work as expected (#128167).
  • Bugfix: Long Result descriptions in the web interface Report view were missing linebreaks (#128338).
  • Bugfix: When creating an Override for a Result in the web interface, the default selections did not create the Override for all Results in the Report. This was an unintended change of default behaviour (#125744).
  • Bugfix: When creating an Override for a NVT in the web interface, the respective NVT was not pre-selected in the Create Override dialog. This was an unintended change of default behaviour (#128066).
  • Bugfix: The help icon hyperlinks for the web interface tabs ‘User Tags’ and ‘Permissions’ were incorrect (#128404).
  • Bugfix: When editing a Scan Config in the web interface any selected checkboxes would be unselected after some time (#125747).
  • Bugfix: Fixed a resource error that could occur when editing a Permission (#118348).
  • Minor bugfix: When linking directly to a CVSS calculator calculation, the settings were not configured as expected (#127661).
  • Minor bugfix: When creating a new Permission in the web interface, the radio button for ‘Group’ is now unselectable if there are no groups that can be selected (#128143).
  • Minor bugfix: GMP and Greenbone Sensors were displayed with port 9391 in the web interface. This was a cosmetic issue since port 22 is always used, and the web interface display has been adjusted (#124591).
  • Minor bugfix: Adjusted the mouse cursor icon used when hovering the mouse pointer over various icons (#127556).
  • Minor improvement: Added a basic Scan Config template with the minimum set of NVTs required to start a Scan (#56665).
  • Minor improvement: Added the currently configured timezone to the user/session menu (#126251).
  • Minor improvement: Added loading indicators for the contents of dropdown menus in the web interface (#126246).
• Vulnerability Scanning:
  • Bugfix: Improved a case where the Scanner process could get stuck (#127759).

• Explicit Compliance:
  Compliance audits are featured prominently and independently of vulnerability scans. The compliance status is now visible at a glance and managing compliance policies is easier than ever. In addition, the new Greenbone Compliance Report format is available for reporting the results (FS-180926-0105).
• Lean Sensors:
  GSM SENSOR appliances now implement the Open Scanner Protocol (OSP). This means much lighter appliances that use less resources and can offer better performance, for example substantially decreased feed synchronization times (FS-171122-5830).
• Updated GSA web interface:
  The new ‘Resilience’ category is introduced, offering central access to Compliance checks and Remediation tickets. In general the menu is reordered to provide a cleaner structure (FS-190124-5645).
• New explicit asset type “TLS Certificates”:
  Detected TLS certificates are copied into the asset managemenet. This allows a overview on TLS certitifcate status independent of actual scan tasks (FS-171121-4722).
• Self integrity checks for the Greenbone Security Manager:
  This feature extends the GOS with special integrity checks that try to identify unauthorized or unintended changes of key elements such as signing keys or disk encryption (FS-180823-5946).
• Restart after upgrade option:
  A GSM may now be configured to restart automatically after an important system upgrade that would require a reboot. This alleviates the GOS upgrade management of sensors while still offering full control over each system (FS-171220-2932).
• Configurable fail-over proxy:
  It is now possible to configure more than one proxy in GOS. If the feed synchronisation with the first proxy is not possible, the second proxy will act as a fallback (FS-180823-2319).
• Internal hardening:
  The GOS Linux kernel has been updated to version 4.19.81, offering better hardening and support for future hardware upgrades. The ssh service is tailored as well (FS-190429-3226, FS-180918-4743).
• Streamlining of the GMP API protocol:
  Several redundant or deprecated GMP elements were removed. Apart from a cleaner and leaner API these changes have a positive effect on performance (FS-181230-4813, FS-180927-1120, FS-181109-3633, FS-181116-4311, FS-181219-3932).
• Prepared internal advanced NVT preference naming and identifier scheme:
  The previous preference identification scheme depended on the name of the NVT and preference while the new one uses independent identifiers like the NVT OID. This will allow NVT and preference names to be changed once GOS versions using the old scheme are retired (FS-180109-1807).
• Consolidation Database Management System:
  The same database management system (DBMS) is now used for all GSM models. Essentially only GSM 150 now pgrades to a full DBMS while the SENSORs do not use a DBMS anymore. Further, a GOS migration is limited to upgrade to the direct successor, which also needs to be considered for activation of backups. The consolidation towards a single DBMS allows to simplify data management and gain performance improvements apart from a consistent behavior of all GSM models simplifying support cases (FS-180925-1323, FS-190227-3318).

2019-04-30: Greenbone OS 5.0

Latest Patch Level: 5.0.20 (2021-02-22)

Lifecycle Phase: Retired 2021-02-22

5.0.20 (2021-02-22):

• Greenbone OS:
  • Status: Set the release status to “retired” for all GSM types with GOS 5.0. An upgrade recommendation will be displayed in the GOS selfcheck (#146929, #157072).
  • Bugfix: Enabled the GOS upgrade functionality, if GOS is in the status “retired” or “end-of-life” (#157071).

5.0.19 (2020-07-30):

• Greenbone OS:
  • Bugfix: The Intel June 2020 microcode update is included, addressing the ‘CROSSTalk’, ‘CacheOut’ and ‘SGAxe’ vulnerabilities of Intel processors (#143643).
  • Bugfix: The GOS setup could fail in rare cases (#142488).
  • Bugfix: The setting ‘Max email size’ in the ‘Setup/Mail’ menu has been split into the settings ‘Max attachment’ and ‘Max include’ to prevent mail truncation issues (#143123).
  • Minor improvement: The GSM manual included in GOS was updated to the current version from 2020-07-29 (#144474).
• Vulnerability Management:
  • Bugfix: The ‘Add new host’ dialog on the ‘Assets/Hosts’ page allowed unsanitized input in the ‘Name’ field. The field has been renamed to ‘IP Address’, and it only allows IPv4 or IPv6 addresses now (#143731, #143737).
  • Bugfix: The ‘NVTs addressing this CVE’ section on CVE details pages could show inaccurate NVT references, e.g., CVE-2019-12345 was also displayed when CVE-2019-1234 was displayed (#140469).
  • Bugfix: The ‘Reported Vulnerabilities’ section on CPE details pages could fail to load in some cases (#129751, #2019122310000023).
  • Bugfix: SSH private keys of the ‘ed25519’ key type were not accepted for credentials (#142242).
  • Bugfix: GPG or S/MIME encrypted e-mail alerts could fail, resulting in no e-mail being sent (#114448, #114449, #2019090410000011).
  • Bugfix: Tasks with an ampersand character (‘&’) in the ask name caused an error if they were run on a GSM sensor (#141859).
  • Bugfix: Migrating sqlite user data from GOS 4.3 to GOS 5.0 manually could fail in some cases (#142144).
• Vulnerability Scanning:
  • Bugfix: The scanner generated incorrect checksums for ICMPv6 packets. This could cause failed alive detections of IPv6 targets when using specific, non-default scan configurations. In addition, it could cause less detection results for some IPv6 targets (#143798).

5.0.18 (2020-05-25):

• Greenbone OS:
  • Improvement: An incremental backup is now automatically attempted before every GOS upgrade (#132589).
  • Improvement: The available disk space is now checked before creating a backup. If the disk space is not sufficient, no backup will be attempted (#134695).
  • Bugfix: The restoration of sqlite backups from an external USB device could fail sporadically (#134772).
  • Bugfix: SCP Alerts caused a path error in GOS (#134804).
  • Bugfix: Error messages from SCP Alerts in the Manager journal were shown as ASCII character codes or blob data (#125050).
  • Bugfix: The keyboard layout selection was not applied sporadically (#139723).
  • Minor Bugfix: The GOS copyright has been updated to reflect the correct LICENSE for the Greenbone Security Feed (#134332).
  • Minor improvement: Adjusted the snmpd configuration to prevent excessive log messages (#126898, #2019111210000064).
  • Minor improvement: If the networking service is in a failed state, a switch release can no longer be started, preventing subsequent errors (#129754).
  • Minor improvement: Added a selfcheck if the given remote backup server is misconfigured or unreachable (#125752)
  • Minor improvement: Removed the selfcheck alerting the user about a pending switch release (#138967).
  • Minor improvement: Changed the community feed URL ‘feed.openvas.org’ to ‘feed.community.greenbone.net’ (#137537).
  • Minor improvement: The GSM manual included in GOS was updated to the most current version from 2020-05-14 (#131710).
• Vulnerability Management:
  • Improvement: The ‘Hosts’ counter of the Operating Systems page now only counts hosts for which the operating system was detected as the primary / best-matching operating system (#132426, #117784, #2019011610000021, #2019082010000037, #2019091110000061).
  • Bugfix: The ‘Deny all and allow’ hosts setting for a user did not deny host access if the input field for ‘allow’ was empty (#132301, #2019032810000013, #2020040210000031).
  • Bugfix: For host identifiers, the ‘Delete Identifier’ button was missing (#131628, #2019042610000033).
  • Bugfix: A passphrase input field was missing when creating or editing credentials of the type ‘Client Certificate’ (#127466).
  • Bugfix: Private key authentication was missing for SCP Alerts (#125050, #2019101810000019).
  • Bugfix: The ‘Stop’ button for Tasks was useable for users who had only been granted ‘Read’ permissions on the task (#128685).
  • Bugfix: The ‘Task visible to’ indicator was not shown in all expected cases (#131912, #2020012410000021).
  • Bugfix: Hyperlinks to Report Formats, Scan Configs, Port Lists and Operating Systems from Permission objects were incorrect (#131102, #131837, #2018083010000029).
  • Bugfix: Hyperlinks on the NVTs list page to the NVT families were not functional when opened in the same tab (#132654).
  • Bugfix: OVAL definitions were duplicated in rare cases (#128163).
  • Bugfix: Verinice ISM and Verinice ITG reports were no longer importable in Verinice (#128330, #2019120410000014, #2019121310000015)
  • Bugfix: Downloading a credential as a RPM package could result in an unuseable package (#131207, #2020040310000038).
  • Minor bugfix: The sort order for hosts without a host name has been improved in the ‘Hosts’, ‘TLS Certificates’ and ‘Error Messages’ tabs for Report details (#130027).

5.0.17 (2020-01-20)

• Greenbone OS:
  • Improvement: Added a GOS selfcheck to warn users about an ongoing, major release upgrade, e.g. from GOS 5 to GOS 6 (#129688, #131103).
• Vulnerability Management:
  • Improvement: Added a check for the web interface when trying to view the Report details of a Report with a large number of Results. If this Results threshold is reached, the Report details will no longer be loaded. By adjusting the Report filter term the number of Results can be reduced, making it possible to view the Report details again. The default threshold is 25.000 Results per Report, this threshold can be adjusted via GOS at the responsibility of the user (#128397).
  • Bugfix: Sorting the columns in several Report details tabs, e.g. Closed CVEs, did not work correctly (#128600).
  • Bugfix: Changing the Report filter for a Report that is loading did not apply the new filter (#129127).
  • Bugfix: Unsetting all Severity (Class) levels via the Update Filter dialog lead to a wrong filter term (#129073).
  • Minor bugfix: Comments for Permissions could not be deleted as expected (#128144).

5.0.16 (2019-12-17)

• Greenbone OS:
  • Improvement: Unlocked the switch releases to Greenbone OS 6.0.1 for all supported GSM types (#129123, #128405).
  • Bugfix: In rare cases, switch release upgrades could get triggered on GSM sensors unintentionally when upgrading the GSM master (#121478).
  • Bugfix: SNMPv2 was still active even when a user name and an authentication passphrase were configured (#98371).
  • Bugfix: IPv6 routes were not shown correctly in the GOS menu (#127560).
  • Minor improvement: Updated the integrated version of the GSM manual (#128690).
• Vulnerability Management:
  • Improvement: Improved the memory allocation management of the gsad webserver (#128399).
  • Improvement: Increased the automatic reload timer for web interface pages to 60 seconds for hidden windows and tabs. This may have a beneficial impact on performance (#126497).
  • Bugfix: Introduced a fallback when requesting an unlimited number of rows in the Power Filter. Unlimited rows should now only be applied when the user explicitly requests it, in all other cases the ‘Rows Per Page’ setting should be used (#124690).
  • Bugfix: The ‘Special Groups’ setting did not work correctly when configuring it for a Group with existing members. This could result in missing Permissions for some Group members (#127760).
  • Bugfix: Long Result descriptions in the web interface Report view were missing linebreaks (#128336).
  • Bugfix: When creating an Override for a Result in the web interface, the default selections did not create the Override for all Results in the Report. This was an unintended change of default behaviour (#124447).
  • Bugfix: When creating an Override for a NVT in the web interface, the respective NVT was not pre-selected in the Create Override dialog. This was an unintended change of default behaviour (#128065).
  • Bugfix: The help icon hyperlinks for the web interface tabs ‘User Tags’ and ‘Permissions’ were incorrect (#128394).
  • Bugfix: The web interface tab ‘General Command Permissions’ listed duplicate permissions for default items (#118680).
  • Bugfix: ‘sort’ and ‘sort-reverse’ filters were not shown in the web interface Scan Report Content Composer (#121752).
  • Minor bugfix: When creating a new Permission in the web interface, the radio button for ‘Group’ is now unselectable if there are no groups that can be selected (#128142).
• Vulnerability Scanning:
  • Bugfix: Improved a case where the Scanner process could get stuck (#124695).

5.0.15 (2019-11-26):

• Vulnerability Scanning:
  • Bugfix: Increased the maximum number of NVTs supported by the openvas-scanner (#127751).

5.0.14 (2019-11-01):

• Vulnerability Management:
  • Bugfix: Results did not show up for downloaded reports (#126018).
  • Bugfix: Viewing a delta report in the web interface could show a constant loading indicator (#126022).
  • Bugfix: The number of high results was not shown in the ‘Hosts’ tab of the report details page (#126020).

5.0.13 (2019-10-29):

• Greenbone OS:
  • Improvement: Included the latest major release of gvm-tools, version 2.0.0. See https://github.com/greenbone/gvm-tools for more information (#123416).
  • Improvement: Added a check and an info dialogue to prevent GOS upgrades if deprecated settings are configured (#119699, #121980).
  • Bugfix: Added support for restoring old backups created with GOS 4 (#123292, #125198).
  • Bugfix: For airgap setups, the airgap master will now provide the airgap sensors with upgrade packages for the current and previous GOS versions, similar to normal master-sensor setups. This should improve switch releases between major GOS versions for airgap setups (#123183).
  • Bugfix: Incremental backups were only listed if at least one backup had been created locally. Incremental backups are now always listed, even if all backups are stored remotely (#122908, #2019091910000029).
  • Bugfix: The configuration of Remote Syslog settings did not become active until after reboot. They are now active when saving the settings in the corresponding menu (#122260, #2019091010000063).
  • Minor bugfix: Added proper system operation names for creating and restoring an USB backup (#123140, #125500).
  • Minor improvement: When sending emails, a GSM will now use its fully-qualified domain name as the hostname (#72221, #2019021410000014).
  • Minor improvement: Changed the internal variables used to differ between the Greenbone Security Feed and the Greenbone Community Feed (#125234).
  • Minor improvement: Updated the integrated version of the GSM manual (#125754).
• Vulnerability Management:
  • Improvement: Simplified the verification process for custom report formats: Custom report formats are no longer verified manually, only automatically. The ‘Verify Report Format’ button was removed in this scope (#111692).
  • Improvement: The report details page now opens at the ‘Information’ tab by default (#125850).
  • Bugfix: After encountering an error page in the web interface, the error is no longer displayed when trying to view another page (#124342).
  • Bugfix: The ‘Reset to Default Filter’ button on Report details pages set an erroneous filter, causing no Results to be displayed (#120979).
  • Bugfix: When editing a LDAP or RADIUS configured User, the authentication method preselection would be set to ‘Password’. The preselection is now saved correctly according to the authentication method (#119765).
  • Bugfix: When creating objects in the web interface, no preselections were shown even if suitable elements existed, for example when creating a Permission, no User would be preselected. The first element alphabetically is now preselected, if an element exists (#119932, #2019080810000015).
  • Bugfix: The icons identifying an operating system on the Assets pages would sometimes show up as “?” only, even if detailed information on the operating system is available (#125194).
  • Bugfix: It was not possible to delete comments for Users (#125448, #2019100910000054).
  • Bugfix: Saving a space character as a User comment caused an error (#124339, #2019100910000054).
  • Bugfix: Deleting a user with objects in the Trashcan could cause a sql error (#124694).
  • Bugfix: The dashboard display “Next Scheduled Task” was missing timezone information (#122387, #2019091110000016).
  • Minor bugfix: Verifying a Scanner on the corresponding scanner details page was missing a feedback dialog (#112039).
  • Minor bugfix: Increased the number of characters allowed in the ‘Filter’ input field of the ‘Update Filter’ dialogue (#121747).
  • Minor bugfix: On the dashboard display “Chart: Operating Systems by Vulnerability Score” CPE values could be truncated at the end, omitting operation system details. Such cases are truncated at the beginning now, allowing for easier identification of the operating systems in question (#122146, #2019090910000039).
  • Minor bugfix: Corrected a special character encoding issue on the User list page (#123139, #2019092310000066).
  • Minor bugfix: Corrected an error message that could occur when saving a Role (#121746).
  • Minor improvement: Improved the error message in case the web server does not respond (#113218).
  • Minor improvement: Removed the ‘Clone Report Format’ button since it had no use case (#111692).
  • Minor improvement: Improved the default name and password hints on the web interface login page (#124117).

5.0.12 (2019-10-08):

• Greenbone OS:
  • Bugfix: GSM appliances without Alert functionality that were installed via a GOS 5.0.4 or newer image were exposing a SMTP port erroneously. The related service has been disabled for these appliances (#123978).
  • Bugfix: Security update for the CVE-2019-15902 “Spectre” related regression in the Linux kernel (#121977).
  • Bugfix: Security updates for the openssl and expat libraries, covering CVE-2018-20843 and CVE-2019-1543 (#121977).

5.0.11 (2019-09-24):

• Greenbone OS:
  • Improvement: In case of filesystem corruption (for example due to a sudden power outage), an automatic reboot is now carried out after the filesystem repair at boot time as a precautionary measure (#121983).
  • Bugfix: In rare cases, switch release upgrades could get triggered on sensors unintentionally when upgrading the master (#121478).
  • Bugfix: Added the missing ‘gpgsm’ package for S/MIME certificate support to GOS (#121985).
  • Bugfix: Fixed frequent, cosmetic redis error messages that were shown after a GOS upgrade (#118683).
  • Minor bugfix: Fixed scanner logs during a feed update sometimes not showing the correct progress when loading NVTs (#81956).
  • Minor improvement: Added warnings regarding the usage of ECDSA/DSA remote backup server host keys (#120115).
  • Minor improvement: Added a name for the ‘Flash Write’ system operation in the ‘About’ menu (#119046).
  • Minor improvement: Updated the integrated version of the GSM manual (#123087).
• Vulnerability Management:
  • Improvement: On Report details pages, only ‘high’, ‘medium’ and ‘low’ severity Results will now be displayed by default. ‘Log’ Results are no longer displayed by default, but may still be shown via a Filter. This may improve the performance of displaying Reports with a very large number of Results (#121641).
  • Improvement: Changed the default sorting of Results on Report details pages. Results are now sorted from highest to lowest severity (#121641, #2019082910000057).
  • Improvement: Added the columns ‘Ports’, ‘Apps’, ‘Distance’ and ‘Auth’ to the ‘CSV Hosts’ report format (#120739, #2019082010000028).
  • Improvement: Added an animation and a lock to the ‘OK’ buttons of the report composer and trigger alert dialogues in the web interface to indicate that they been clicked, and to prevent further clicks until the original operation is finished (#120695, #2019081910000021).
  • Improvement: Added a short animation to the ‘Empty Trash’ button in the web interface to indicate that it has been clicked (#121341).
  • Improvement: Improved the ‘Edit User Settings’ dialog part for changing the current password. The description and error handling have been improved (#121974).
  • Improvement: Enhanced the Alert details pages to show more information regarding the configured Alert type and settings (#119766).
  • Improvement: Added tooltips to the ‘Edit Task’ dialog to indicate which settings cannot be edited for non-alterable tasks (#119840).
  • Bugfix: Sensor scans would add all hosts in a target network to the Assets, even if the hosts were offline and “Mark unreachable Hosts as dead (not scanning) = yes” was set. Only active hosts will get added to the Assets in this case (#108616, #2019011510000041).
  • Bugfix: The downloadable Windows LSC installer for Credentials did not add the user to the administrator group on all supported versions of Microsoft Windows (#122907, #2019091810000067).
  • Bugfix: Filtering Remediation Tickets by status was not working correctly. Remediation Tickets can now be filtered via ‘Open’, ‘Fixed’, ‘Fix Verified’ and ‘Closed’ as expected (#117783).
  • Bugfix: Remediation Tickets linked to a Task that is in the Trashcan or deleted had several display and useability issues (#116253).
  • Bugfix: Fixed a further issue with the CVSS calculator, if “Authorization” was set to “Single” (#118415).
  • Bugfix: Fixed the ‘Download CSV’ chart button causing an error (#121745).
  • Bugfix: Fixed long note texts breaking the boundaries of the text box on Notes details pages (#120981).
  • Bugfix: It was not possible to request individual vulnerabilities when using the GMP command ‘get_vulns’ with the ‘vuln_id’ attribute (#116532).
  • Minor improvement: Updated the man page of gsad (#112036).

5.0.10 (2019-09-03):

• Greenbone OS:
  • Minor improvement: Added and improved the GOS menu descriptions for restoring backups and setting the GSM hostname, since backups are dependent on the hostname (#119837).
  • Minor improvement: Updated the integrated version of the GSM manual (#121640, #121753).
• Vulnerability Management:
  • Bugfix: Fixed a reflected XSS vulnerability in the web interface (#121870).
  • Bugfix: Sensor scans could erroneously show the status ‘Interrupted’ on the master in some cases (#121106).
  • Bugfix: Permissions could not be edited in the Administration/Roles/Edit Role dialog (#120601, #121343).
  • Bugfix: Disabled the ‘Trigger Alert’ button on Report details pages for GSM types that do not support Alerts and for users that have no permission to use Alerts (#120598, #120600).
  • Bugfix: Disabled the ‘Edit My Settings’ button on the Extras/My Settings page for users that have no permission to modify Settings (#120598).
  • Bugfix: Removed the ‘Clone Host’ button from all Assets/Hosts pages since it had no use case and caused an error (#121242).
  • Bugfix: The ‘sort-reverse’ filter was not applied in the GSR-PDF report (#119483).

5.0.9 (2019-08-26):

• Greenbone OS:
  • Bugfix: Testing the sensor connections could cause a traceback when a sensor had an invalid remote host identifier configured (#120973).
• Vulnerability Management:
  • Bugfix: On the Assets/Hosts page, creating a new target via a bulk action caused an error (#120185, #2019081310000032).
  • Bugfix: In the power filter, quotation marks in keywords starting with the character ‘~’ where not handled correctly, causing subsequent errors during bulk actions (#115293).

5.0.8 (2019-08-14):

• Greenbone OS:
  • Extension: The “Greenbone Security Manager with Greenbone OS 5” user manual is now included in GOS for offline use. It can be accessed via the web interface menu Help/Contents (#119292, #119764).
  • Improvement: Added an experimental “SQL chunking” setting for sensor scans. It is activated via the GOS command line and may improve the scan performance (#117778).
  • Bugfix: Security update for the CVE-2019-1125 “Spectre SWAPGS” gadget vulnerability (#116440).
  • Bugfix: It was possible to configure invalid domain names, leading to subsequent errors. All domain names now have to comply to RFC952 and RFC1123 (#118556).
  • Bugfix: The disk usage of journalctl could exceed safe limits, affecting system stability. It has been hard limited to use a maximum of 1.5 GB (#119829, #2019080510000021, #2019072410000022).
  • Bugfix: The database file of a user data backup was not renamed correctly when upgrading from GOS 4 to GOS 5, causing a redundant copy to be present (#118354).
  • Bugfix: Uploading a remote backup server host key could add a newline character, causing the host key to be invalid (#109875).
  • Bugfix: The Maintenance/Upgrade/Sensors menu on a GSM master could display the sensor status “Update Feed” erroneously in some cases. These cases were fixed to display “Upgrade manually”. “Update Feed” will still be shown when relevant (#118338).
  • Minor bugfix: The Maintenance/Flash menu was erroneously shown for the virtual appliances GSM DECA, TERA, PETA and EXA. It was not functional and has been removed (#119052).
• Vulnerability Management:
  • Improvement: Single select dropdown menus in the web interface are now completely clickable (#118178, #2019071510000101).
  • Improvement: The Edit/New Schedule dialog has been extended to make picking Schedule times easier: The new “Now” button will always set the current time, the date picker has had a year picker added (#118251).
  • Bugfix: Schedules could be erroneously removed from Tasks, since the new iCalendar format was not used for all checks (#117775, #2019070910000033).
  • Bugfix: Schedule “Next Run” times were wrong if the Schedule was non-recurring or for certain timezone constellations (#119045, #119482, #2019072910000013).
  • Bugfix: Schedules migrated from GOS 4 were always using the UTC timezone (#118054, #2019071510000012).
  • Bugfix: Schedule times are once again shown in the timezone that the Schedule was configured for, not the general user settings timezone, restoring the behaviour from GOS 4 (#118873).
  • Bugfix: On the Report details page, the columns Ports, Apps, Distance, Auth, Start and End were missing in the Hosts tab (#115647).
  • Bugfix: The Export File Name settings in the web interface were not applied (#118181, #2019071610000029).
  • Bugfix: The Task setting “Once” for Schedules was not saved correctly (#118237, #118238, #2019071610000127).
  • Bugfix: Emails sent via the an Email Alert had a wrong “Return-path”, “envelope-from” respectively “X-MailRelay-From” (#119942, #2019080810000024).
  • Bugfix: If any default Permissions are missing, they will now be re-created when the Greenbone Vulnerability Manager starts (#117410, #2019062010000013).
  • Bugfix: Resuming a Task configured to run on a Sensor could lead to duplicate results (#113271).
  • Bugfix: Verifying a Report Format in the web interface was missing a feedback dialog (#115104).
  • Bugfix: Verifying a Scanner in the web interface was missing a feedback dialog (#112039).
  • Bugfix: Alerts with the deprecated Report Format “HTML” were not migrated to use the Report Format “TXT” correctly (#110772, #2019071510000085).
  • Bugfix: Opening the web interface login page in a new window or tab while a login was active in another window or tab could log the user out (#114452).
  • Bugfix: If two web users are configured with different user interface languages, switching between the two users required two login attempts (#118559, #2019072310000015).
  • Bugfix: On the Performance page, the performance graphs for Sensors were not working correctly (#119210, #2019073110000045).
  • Bugfix: On the Performance page, changes made via the date picker were not saved correctly (#118055).
  • Bugfix: An error in the CVSS calculator occured, if “Authorization” was set to “Single” (#118415).
  • Bugfix: Clicking the operating system icon on any Host details page caused an error, it now links to the corresponding operating system details (#117780).
  • Bugfix: Creating a valid, but incomplete Alert via GMP and then trying to view it in the web interface caused an error (#114775).
  • Bugfix: Exporting a NVT with an apostrophe in the name caused an error (#120071).
  • Minor bugfix: When creating new Permissions for a Task, the default, pre-selected Permissions were different than in GOS 4 (#114791).
  • Minor bugfix: The “Filter” field in the Scan Report Content Composer was not automatically resized to fit the filter string, causing the text to overflow (#118182, #2019071510000111).
  • Minor bugfix: On the Tasks page, the indicator icon for Tasks configured to run on a Sensor was missing (#119767).
  • Minor bugfix: In the Delta Report view, the indicator for changed items, (+) and (-), was missing colorization (#112862).
  • Minor bugfix: The Task settings “Maximum concurrently executed NVTs per host” and “Maximum concurrently scanned hosts” were not shown on the Task details view (#110104).
  • Minor bugfix: Viewing any Report Format details page as a user with the role “Observer” would show XML parsing errors (#118560).
  • Minor bugfix: The “rows” Filter allowed for invalid values and relations. Invalid values are now converted to “1”, invalid relations are converted to “=” (#111336).
  • Minor bugfix: The response for the GMP command “delete_ticket” has been adjusted to lowercase (#116531).
  • Minor improvement: Removed the preview icon for Delta Report result differences, since the preview can not support all relevant details. Delta Report result differences may still be clicked to view their full details (#113514).
  • Minor improvement: Lists of objects in the web interface, for example “Tasks using this Alert” on the Alert details page, have been improved to make individual objects easier to discern (#118179, #2019071510000067).
  • Minor improvement: The Edit/New Task dialog has been adjusted, allowing the display of longer Scan Target and Schedule names (#118178, #2019071510000101).
  • Minor improvement: The CVSS calculator now states that CVSS V2.0 is used (#113527).
  • Minor improvement: The “details” attribute of the GMP command “get_reports” was undocumented (#114702).
• Vulnerability Scanning:
  • Bugfix: The get_ssh_port() function of the scanner could fall back to port 22 when a custom port was configured (#114986).

5.0.7 (2019-07-25):

• Vulnerability Scanning:
  • Bugfix: Fixed an issue causing scans to abort early due to the scanner not being able to fork new processes. This could lead to less detection results and host details being reported (#116389, #116533, #116866, #2019062510000059, #2019071610000011).
  • Bugfix: Added missing libopenvas build dependencies to openvas-smb (#118501).

5.0.6 (2019-07-11):

• Vulnerability Management:
  • Bugfix: The HTTP timeout setting for the web interface was using an erroneous internal value, this has been corrected (#117889, #2019070810000071).

5.0.5 (2019-07-09):

• Greenbone OS:
  • Bugfix: Uploading the remote backup server host key did not add it to the known hosts list correctly (#117589).
  • Bugfix: During the initial feed update after the setup of a GSM, postgres could rarely fail due to a race condition (#117030).
  • Bugfix: Support for importing old GOS 3.1 or 2.0 userdata backups has been improved (#117135).
  • Bugfix: Starting a GOS upgrade after importing an old GOS 3.1 or 2.0 userdata backup could cause a postgres error (#117412).
  • Minor bugfix: The system operation ‘Update Feed’ in the GOS menu ‘About’ was not named correctly in all cases (#117411).
  • Minor improvement: Enhanced the contents of the Greenbone Support Package. More debugging information related to ansible is now included (#117591).
  • Minor improvement: All occurences of ‘Airgap Slave’ have been renamed to ‘Airgap Sensor’ (#117282).
• Vulnerability Management:
  • Bugfix: Configuring a custom HTTP timeout setting for the web interface was not applied in all cases (#117640, #2019070810000071).

5.0.4 (2019-07-01):

• Greenbone OS:
  • Extension: Introduced new GSM types 450, CENO, DECA, TERA, PETA and EXA (#114981, #114992).
  • Improvement: Activated support for SMTPS encryption of emails sent by a GSM (#83277).
  • Improvement: Added a shell script to fix oversized postgres databases (#86497).
  • Improvement: Enhanced the contents of the Greenbone Support Package. More debugging information related to postgres is now included (#93050, #116252).
  • Improvement: The ‘Management IP’ menu option is now always shown, even when only one interface is present in a namespace (#115904).
  • Minor improvement: Added warnings regarding the usage of ECDSA SSH keys (#116303).
  • Bugfix: The flash drive of GSM hardware appliances was sometimes not detected correctly (#115837).
  • Bugfix: No network traffic performance graph data was shown for interfaces in the ‘scan1’ namespace (#110755).
  • Bugfix: The network route 0.0.0.0/0 can now be set (#115609).
  • Bugfix: Patched libssh to resolve possible issues with Cisco devices (#113876).
  • Minor bugfix: Improved the formating of the GOS sensor test results (#113219).
• Vulnerability Management:
  • Improvement: The Greenbone Vulnerability Manager now automatically adds a “login failed” host detail when a target has a credential configured and the login fails (#106677).
  • Improvement: Updated the manpage of gvmd (#112086).
  • Bugfix: Notes and overrides for results were not shown (#112702).
  • Bugfix: Not all result pages for delta reports could be viewed (#116392).
  • Bugfix: Task names were not visible in the reports view (#110527, #2019051010000034).
  • Bugfix: The ‘Edit’ dialogue for LDAP and RADIUS settings did not work in some cases (#115426).
• Vulnerability Scanning:
  • Bugfix: If there is no redis database available, the scanner will no longer wait forever, but resume operation as soon as a database becomes available again (#115613).

5.0.3 (2019-06-19):

• Greenbone OS:
  • Bugfix: Security update for CVE-2019-11477, CVE-2019-11478 and CVE-2019-11479 “SACK Panic” TCP remote denial of service attacks (#116440).

5.0.2 (2019-06-03)

• Greenbone OS:
  • Improvement: The GOS menu ‘About’ will now show the exact type of system operation that is in progress (#98619).
  • Improvement: The client min and max protocol versions for SMB clients can now be configured via the Greenbone OS command line (#115335).
  • Minor improvement: The expiry date of the Greenbone Support Team GPG key, used for the encryption of support packages, has been extended to 2020-10-31 (#113830).
  • Minor bugfix: Port 53/TCP, used for dnsmasq, now only listens on localhost (#115285).
• Vulnerability Management:
  • Improvement: Greatly improved the performance of the ‘Edit Scan Config’ dialog (#112699).
  • Minor improvement: File upload buttons and text input fields are now inactive if their corresponding radio button is not selected (#113530).
  • Minor improvement: Added documentation of NVT categories in a GMP response (#109616).
  • Bugfix: The Task page could show an internal error in some circumstances (#114037, #2019051010000034).
  • Bugfix: When switching from the reports list page to the report details page, the page could get stuck while loading (#114040, #2019051010000034).
  • Bugfix: Giving write permissions for a task to another user still did not allow that user to start the task (#114793).
  • Bugfix: It was not possible to bulk-tag filtered resources, like port lists (#113729).
  • Bugfix: Vulnerabilities were not supposed to be tagged, the bulk-tag icon has been removed from the Vulnerabilities page (#115294).
  • Bugfix: Using the ‘Test Alert’ functionality for an alert with the method ‘Start Task’ did not start the task (#110778).
  • Bugfix: Verifying default report formats caused an error. Since they are always verified, the corresponding verification has been disabled (#110105).
  • Minor bugfix: Task details pages were not refreshed correctly (#113931).
  • Minor bugfix: The scheduled task icon tooltip did not list the next due date (#113203).
  • Minor bugfix: In the Results view the host IP column could display ‘null’ (#110583).
  • Minor bugfix: Email alerts could be configured with a syntactically invalid email address (#112103).
  • Minor bugfix: For email alerts with an attached report, the content type of the attachment was set to ‘null’ erroneously (#112155).
  • Minor bugfix: Changed the ‘Solution Type’ checkboxes in the Results power filter dialog to radio buttons, since only one selection is allowed at a time (#114039)
  • Minor bugfix: In the ‘Import Report’ dialog all available containers are now always shown (#112616).
  • Minor bugfix: The ‘NVTs by Family’ chart did not show the message ‘Applied filter…’ if a filter is used (#114094).
  • Minor bugfix: In report details, error messages could contain erroneous entities (#113516).
  • Minor bugfix: In scan config details, ‘Tasks using this Scan Config’ was missing linebreaks (#113871).
  • Minor bugfix: The delete icon was shown as active for scan configs which are in use, it now shows as inactive as intended in this case (#111525).
  • Minor bugfix: For the GSR PDF report format, the colour coding of medium CVSS vulnerabilities was red in some cases, this has been corrected to yellow (#114035).
  • Minor bugfix: The ‘Anonymous XML’ and ‘XML’ report format details were incorrectly describing both as ‘OpenVAS Manager XML format’ (#113873).
  • Minor bugfix: The ‘Common Platform Enumeration’ report format details were incorrectly referring to it as ‘Common Product Enumeration’ (#113874).
  • Minor bugfix: Fixed the parsing of CVSS single instance authentication in CVE details (#115277).
  • Minor bugfix: Creating a tag with an empty ‘id’ attribute via a GMP API call could lead to a duplicate response (#113815).
  • Minor bugfix: For tags, the deprecated type ‘slave’ was still checked in GMP API calls, leading to subsequent problems (#115284).
  • Minor bugfix: The ‘get_vulns’ GMP command now returns a valid response when used without a filter (#113817).
  • Minor bugfix: Removed unneeded PostgreSQL error log messages when a lock was not available (#109087).
  • Minor bugfix: Fixed a possible race condition in the ‘Edit My Settings’ dialog (#113930).
  • Minor bugfix: Added German translations for error, date and status information (#114030, #114031, #114193).
• Vulnerability Scanning:
  • Bugfix: Each scan plugin process is now separated into its own process group, preventing defunct processes and NVTs being executed at a wrong time (#109743, #113267).

5.0.1 (2019-05-05):

• Greenbone OS:
  • Improvement: The default system maintenance time is now randomized between 03:00 and 05:00 UTC to distribute load for the Greenbone Security Feed server more evenly. The system maintenance time can still be adjusted manually (#113695).
• Vulnerability Management:
  • Improvement: Only fully translated user interface languages are now available to choose from in the My Settings menu. Incomplete translations are hidden until implementation (#113517).
  • Bugfix: The tasks page was not refreshed correctly when a task was in the status ‘Requested’ (#113515).
  • Bugfix: Viewing the TLS certificate details in a report view could lead to an error page (#113520).
  • Bugfix: The hosts topology graph was not displayed correctly if there was a host with no severity present (#113521).
  • Bugfix: Powerfilter dropdown menus were erroneously limited by the Rows per page / max_rows setting (#113528).
  • Minor bugfix: Some login page elements were offset for Microsoft Edge and Microsoft Internet Explorer (#113725).
  • Minor bugfix: The list of excluded hosts in the target details was missing a linewrap (#113204).
  • Minor bugfix: The download icons for credentials were missing tooltips (#112161).

5.0.0 (2019-04-30)

• Transform Web-GUI into a single page application:
  Transforming the web user interface into a single page application which is loaded once and then only updates the in-browser data from the server. This accelerates user interactions and unloads the server. The design bascially remains as in GOS 4, but the interaction with the user interface will be much more direct and responsive (FS-171117-1741).
• New view on scan results by vulnerability:
  The new view “Vulnerabilities” additional to Results and Reports summarizes identical vulnerabilities across all scans and of course arbitrary filters can be applied (FS-171117-1729).
• Increase speed of feed updates:
  SCAP/CERT updates consume less CPU and less RAM (FS-171117-4518).
• Transition from global objects to ownerless-predefined objects:
  In GOS 4 it was not possible to assign static global objects (Port lists, Scan configs, Scanner and Report  Formats) to roles as a specific permission. With the transition to ownerless-prefefined objects it is now possible to configure Users, Roles, and Groups in a way, which permits them only restricted usage of only a few, just one or even none of the predefined objects (FS-171117-4531).
• Add columns “Hosts” and “Location” to the overview for Notes and Overrides:
  This makes sorting and filtering for Hosts and Locations easier (FS-171117-1839).
• Extended edit dialog for overrides and notes:
  The edit dialog for Notes and Overrides now allows editing the NVT, Host, Location, Severity, Task and Result even if already set to
  “Any” or specified in other ways (FS-171117-5915).
• New option to upload a file for “exluded hosts” for a Target:
  This removes the limit of the previous text entry field (FS-171117-3759).
• Merge of Web-GUI built-in help and GSM Manual:
  The web version of the GSM manual is directly connected with the help buttons and placed into the appliance. This steamlines the documentation (FS-171116-1819).
• Remove menu item “Assets->Hosts (Classic)”:
  The key functionality “prognosis” is already available since GOS 4.0 as the “CVE-Scanner” (FS-171117-2431).
• Remove overrides indicator switch (web interface):
  The indicator/switch icon for overrides in the header of the severity columns in the tasks overview, reports overview, results overview and report-results overview is removed (FS-171117-1503).
• Link to Scan Configs from the OSP Scanner details page (web interface):
  This makes navigation between Scanners and Scan Configs more consistent (FS-171117-3656).
• Improved log files for scanner (internal):
  The scanner now follows the very same logging scheme as all other internal modules. This helps for support case about scanner (FS-171117-3025).
• Renamed internal vulnerability management service to “gvmd”:
  This is a follow-up change of renaming the protocol from OMP to GMP in GOS 4. This establishes an advanced consistency in internal terminology reaching even into the database. However there is no impact for the user interface or to GMP: Neither GUI nor the API is changed (FS-171117-3251).
• Automated internal database updates with feed content:
  This is a plain internal design change to avoid delayed data updates due to network problems or other issues (FS-171117-5003).
• Advanced internal process activity information scheme for vulnerability management service:
  This is a plain internal change which makes it easier for support cases to analyse the activity status of a GSM (FS-171117-5336).
• Removed Report Format Plugin “HTML”:
  The alternative GSR HTML is more advanced in any aspect. Alerts that were configured to use HTML will automatically fall back to use the lightweight “TXT”. Please change to GSR HTML where considered appropriate (FS-171127-5042).
• Multiple user-configured main dashboards:
  The current single main dashboard under menu “Dashboard” is extended to have up-to 10 user-configured named dashboards. This allows for example to configure “Europe”, “Asia”, “Last Week”, “Windows” or “Printers” by applying respective powerfilters to a individual chart selection. (FS-171116-0537).
• From the list of pre-defined severity classification schemes, “OpenVAS  Classic” is removed:
  It was kept for a transitional phase. Since a long time the NVD classification is the default. During migration, “OpenVAS Classic” is replaced by the NVD classification in case a user configured it as a personal setting (FS-180116-0845).
• Task status “Internal Error” is renamed to “Interrupted”:
  Scans that stopped for any other reason than the user pressing the stop button  will have the status “Interrupted at X%” which is shown in red color in the  GUI and and thus replace the status “Internal Error”. After a reboot of the manager, running tasks are set to “Interrupted at X%” instead of “Stopped at X%”. The “Stopped” status remains reserved for user-intentional stopping of a task. Both types can be resumed. This all allows to resume tasks that failed for example due to a network connection problem during a sensor scan. Also it allows to distinguish between user-intended stop and system-driven stop. This changes the status types as handled by the GMP commands get_tasks and get_reports (FS-180108-3217).
• Drop “version” element for NVTs and update version format for Results: The version information is actually redundant since the “last modification” element specifies the version even more meaningful. Thus, the “version” element is removed from the NVT meta data. This also means a minor change to the GMP protocol. Results are still given a version number of the respective NVT, but the format changes from for example “$Revision: 1244$” to “2017-12-20T08:01:27Z” (FS-171208-4740).
• Extend Schedules to allow more refined schedules: The internal task scheduling system was extended to allow more refined schedules. The dialog for editing alerts was extended with more options like “16:00 every monday and wednesday” (FS-171116-3106).
• Drop elements “host_start” and “host_end” from report element of GMP response from “get_reports”: The information in the elements “host_start” and “host_end”are already available in the “host” element. So, this changeis about dropping the redundant part (FS-180104-2357).
• Bulk tagging:
  This feature introduces the opportunity to assign the same tag to many objects with just a single action rather than adding the tag to each object one by one. For example you can easily assign 100 arbitrarily filtered hosts in the host asset management with the tag “Responsible:AdminTeam1” or “AssetGroup:Printers” (FS-171227-1841).
• Extended vhosts support:
  The scanner becomes much smarter about finding all hostnames:IPs relationships without need of extra user input. The previously used per-scan-config vhosts/vhosts_ip preferences are simply dropped. Whatever was configured here will now be done automatically and reliably. In environments with virtual hosts, the scan results will haveless results because duplicates are avoided now. The hostname is now a field of its own in the Web-UI as well as in GMP. (FS-171212-5724).
• Removed report type “prognostic”:
  This report type was available only at GMP level for GET_REPORTS. This removal is the last step of the transition from “Prognosis” reports to the “CVE-Scanner” (FS-180927-0546).
• Extended storage of results (internal):
  This is a plain internal change (no UI nor API change) to improve performance for some use cases. Technically speaking this reduces the size of the results table by introducing a separate results trash table (FS-180910-0459).
• Drop redundant information from NVT meta data:
  This is an internal change to reduce the copyright notice to a single occurance in the NVTs. This has a minor positive effect on performance for feed updates (FS-181022-5813).
• Encrypted alert emails:
  The alert method “Email” now allows to encrypt to a S/MIME certificate or to a PGP key, owned by the recipient. This way a secure end-to-end encryption is established. The encryption keys can be uploaded as a new Credential type in the Configuration section (FS-171122-0309).
• Scan Report Content Composer:
  This new dialog appears when a report download is requested, an alert execution is requested and is available when an alert is created/edited. The dialog offers to compose the content of the XML that is then passed on to the Report Format Plugin, and perhaps then to the Alert. Initially it allows to configure whether notes and/or overrides should be included into the report. Not all report plugins can handle all types of content. The content composer allows to reduce/extend the scope handled by the report plugin and is designed to be extend with further data groups in the future (FS-180924-3251).
• Integrated Remediation Workflow:
  For the product families MIDRANGE and ENTERPRISE, a integrated remediation workflow is introduced. It is a ticket management focussed on resolving the finding of  vulnerabilities. Compared to a generic ticket management system it is much simpler and has less options. On the other hand, it is capable to automatically consider re-scans in order to verify that an assignee has indeed fixed a security problem. Additionally, all valuable information to understand and resolve a problem is directly cross-linked and thus directly available for an assignee (FS-180103-0646).