-
Notifications
You must be signed in to change notification settings - Fork 2
/
CHANGES
398 lines (328 loc) · 12.8 KB
/
CHANGES
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
2013-08-30
* Minor bug fixes
2013-08-28
* AIRT now has a strong dependency on PostgreSQL
* Speed optimizations for high-volume processors
* Removed several deprecated PHP Calls and added
support for new PHP releases
* Import queue now only requires jobs from localhost
and no longer requires authentication.
* Configuration option to disable grouping of incidents
in import queue
* Configuration option to allow imported elements
to be automatically promoted to full incidents
* Ability to bulk email users from main incident screen
without needing user intervention
* Numerous bug fixes
2011-12-24
* Various bug fixes
* Added user bubbles
* Maximum bubble size is now configurable via global options
* New event handler when adding external events
* Ability to disable mail templates
* Compatibility fixes for newer PHP versions
* Mail details now include the recipient of the email
* Batch upload of delimited files containing incident data implemented
* Mail now sent via sendmail (or compatible), rather than via direct smtp
2011-04-15
* Mailbox updates now need to run from cron by calling the
~/bin/airt_schedule_mailbox_update script. Make sure to include
--virtual-host when needed
* GUI changes
* Functional improvements
* Bug fixes
2009-04-18
* GUI changes
* Bug fixes
2009-09-04
* Bug fixes
* Improved mailbox behavior by user smarter querying and asynchronous
* archiving. Note: update your airt.cfg with a bindir directive for this to
* work properly!
2009-07-22
* Bug fixes
* CSRF fixes by introducing form keys
2009-07-18
* Several bug fixes
* Improved import queue behavior
* Moved several settings to GUI
* New input filter
2009-04-23
* Bug fixes
* Import queue selection improvements
2009-02-21
* No new features; general bug fixes
* Bug fixed that prevented mail templates from being deleted
* Bug fixed that prevented preferred mail template from being deleted
2009-01-21
* Bug fixes
2008-12-31
* Public release containing all changes since 20080403.1
* minor costmetic changes
* New configuration options:
x509client: define to true to allow x509 client certificate login
instance_name: descriptive name of the AIRT instance (a few words at most)
2008-12-19
* Removed all OTRS references
* Mailbox improvements
* Update in users settings screen
* Full user-interface overhaul
2008-10-31
* Ability to import contact data
* First shot at inbox
* Numerous bug fixes
2008-09-24
* Bug fixes
2008-09-06
* Incident attachments
* Mail template overrides
* User capabilities
2008-04-03
* Bug fixes
2008-03-28
* Code enhancement; fix of several potential SQL injection and cross-site
scripting vulnerabilities.
2008-02-29
* Bug fixes; no new features
2008-02-01
* New incident field: short description
* API changes in createIncident; formatBasicIncidentData
* Bugfixes
* Backend rewritten to allow PHP5
* New report in stats.php: incidents created/total per const
* Search input area now consists of four separate fields, rather than 1.
2007-09-05
* Minor bug fixes and feature enhancements
* New export macro: @IODEF@
* Improved import filter: filter_iodef.plib
2007-07-31
* Removed dependency on PHP4; added dependency on PHP5
* Several workflow changes
* Bug fixes
* Incident details defaults to 'preferred template' instead to 'no template'
* Last updated now works more comprehesively
* included incident created date in incidnet overview and update layout
* code cleanup;
* implemented WS_IMPORT_RESETSTATE configuration option
2007-07-05
* Changed default layout
* Fixed bug in automatic action in mail templates in combination with
preferred mail templates (FS#16)
* Import queue merges into incident database cause preferred template
to be overridden (FS#17)
2007-06-21
* Login now redirects to requested page, instead of index.php
* Started work on wildcards
* Comment in incident history while merging in import queue
* Changed authentication method to the database
2007-06-11
* Input option to associate default template with a specific version of
a filter and code cleanup.
2007-06-01
* Option to "Skip and prepare next" in bulk mail handling
2007-05-31
* New import filter for IODEF data generated by nfsen
* Updated import queue interface; removed tags; ability to group incidents in the queue:
ability to associate a suggested mail template with an incident
* Query optimalization in mail_templates
2006-12-06
* New template expander @OTRS@
* Advanced OTRS integration
2006-11-29
* Ability to group elements in the import queue into one new incident
* Ability to close OTRS tickets from within AIRT
* Bug fixes
* Added mail template macro 'OTHER_OPEN'
* Hook for OTRS ticket ID in incident details
* More OTRS integration
* ACNS import filter
* New IODEF import filter
2006-08-10
* Multilingual infrastructure; see doc/gettext.txt for more information
2006-08-07
* Gettext support
* Added statistics module
2006-06-26
* Extra basic incident data: date of incident
* Improved interface of constituency contact administration and code cleanup
* Incident Overview defaults to open incidents now
* Possible SQL injection fixes
2006-05-17
* Maintenance release
2006-05-12
* Ability to create incidents in bulk
* Ability to search for incidents in a network range
* Ability to specify a default action on status, state, type in
mail templates
* Import filter for IDMEF
* Bug fixes
2006-03-29
* Bug fixes and configuration option for base url
2006-03-24
* Multiple (external) incident identifers per incident.
* Improved search interface
2006-03-22
* Fixed bug in assigning multiple users to incident from search form
* Now handles multiple email addresses per template properly
2006-02-24
* Jump to incident from search screen
* Ability to bulk update incident types
* "New incident" button returned to incident details screen
* Hostnames are no longer resolved every time the incident overview screen
is generated, but only when the incident is created.
* New event in search output between previous and new
2005-11-23
* Provisions for multiple emails
* Default import filters for SpamCop and MyNetWatchman
2005-11-16
* Numerous bug fixes
* Imported elements are now imported with state 'imported' (configurable)
* Ability to toggle all incidents at once in incident overview
* Ability to filter on incident state
* More stuff external in style declarations.
* Export queue: user interface first practical release.
2005-11-10
* Export queue backend (cron part) fully completed.
* Export queue user interface part demo version ready.
2005-11-09
* Import queue now caches IP address and Constituency at the initial import,
speeding up the visualiser significantly. Also, visualiser now prints
progress reports while reading to prevent PHP processing time caps.
* Import queue now keeps track of date that queue items were last updated.
* Bug fixes
2005-11-08
* Bug fixes
2005-11-01
* Incidents overview now has a pager
* Incidents overview now sortable by column
* Update user interface import queue
* Moved mail templates out of filesystem
* Added version consistency check between code base and data base.
* Import queue now correctly sets constituency contacts (if known)
2005-10-21
* New field with incident: logging
* Import queue enhancements and interface changes
* Import queue no longer depends on filesystem
* CURL options in import queue and import filters
2005-10-10
* Import queue now no longer uses hard-coded directories for the filters, but
makes them user configurable.
2005-10-03
* First version of import queue module is now available. Minor bugfixes
throughout the code.
2005-09-26
* lib/incident.plib: When creating a new incident directly, the IP address is
now also set in the session. (closes: Infolab-RT#36)
* php/incident.php: Direct link to mail templates from incident details page
(closes: Infolab-RT#37).
* plugins/importqueue/: First step for import queue visualiser
2005-08-30
* Various bug fixes
2005-08-12
* All netmask input field accept CIDR notation too
* Various bug fixes
2005-08-02
* Interface enhancements (more sensible defaults)
* Improve UTF-8 handling
* Added framework of the import queue plugin and a default (inert) filter.
2005-07-26
* Plugins directory completely restructured.
* Introduced new (hopefully better) functions for output and error reporting
* Added support for roles of addresses in incidents (e.g. attacker, victim)
* Bug fix in networks.php (used showConstituencies)
* Added createIncident function to incident-functions
2005-07-18
* In database.plib, and all files that depend on it, fixed connection
handling. Hopefully I didn't break too much
* In standard.php, fixed MIME handling of PGP signed messages
2005-jun-30
* in incidents.php; removed "details" column and added functionality to a
clickable incident id
2005-jun-28
* Typo fixes.
* Mass incident update added.
2005-jun-24
* Added last-login and hostnamelast to the users-table, and removed the
fopen-functions for the welcome-message.
2005-jun-22
* Fixed compatibility bug in IP address details editor.
* Fixed misplaced "Add new IP address" box.
* Added Updated[By] data to new IP address (copy of Added[By]).
* Fixed bug in search.php that was unveiled by adding "Updated[by]" to
incident_addresses.
* Fixed bug in constituency.plib that omitted "mailto:" in an E-mail URL.
2005-jun-21
* Added edit feature for IP addresses associated with an incident. For now,
only the constituency of the IP address can be edited, but the infra-
structure for a full edit is available.
2005-jun-10
* php/incident.php: Jim's IP address fix, Jim's suggestion to include closed
tickets in the selection options.
* php/standard.php: Jim's typo fix.
* lib/constituency.plib: Jim's USERNAME template macro fix.
* php/incident_status.php: Added interface to default status.
* doc/database/: Database changes to own dir
2005-jun-07
* php/standard.php: Double line spacing fixed
* php/login.php: Typo fix
* php/incident_states.php: Short description for each state
* php/incident_status.php: Short description for each status
* php/incidnet_types.php: Short description for each type
* etc/customfunctions.plib: default layout
* php/incident.php: Popup windows with short descr of states/status/type
2005-apr-21.1 Kees Leune <[email protected]>
* php/standard.php: Fixed bug 1179244 (Textual inconsistency in interface)
Fixed bug 1186071 (@YOURNFIRSTAME@ N to many)
Signed message support
2005-apr-11 Kees Leune <[email protected]>
* php/index.php: new event mainmenutop and mainmenubottom
* php/search.php: Fixed bug 1172478 (dangling link in incident details)
* php/standard.php: Fixed bug 1174006 (dont mail with no recipient),
Changed MIME delimiter to \r\n, since TEXTAREA's are DOS formatted
Fixed warnings generated by possibly uninitialised session variables
* php/incident.php: Email addresses now correctly carried over from new
incident form to default messages.
2005-feb-28 Kees Leune <[email protected]>
* php/incident.php: Fixed incorrect check for uninitialsed variable in
creating new incidents.
2005-feb-24 Kees Leune <[email protected]>
* php/networks.php: network list is now sorted by IP address
* all files: numerous warning fixes; removed all references to $SELF and
BASEURL
* php/login.php: allow custom authentication
2005-feb-12 Kees Leune <[email protected]>
* php/standard.php: Typo fix (@ID@ -> @INCIDENTID@)
* php/incident.php: Forced all email addresses to lower case, input field
to jump directly to an incident.
* lib/incident.plib: getIncident() now returns false when requested incident
does not exists; addIPToIncident now correctly sets constituency and
hostname.
* etc/apahace-airt.conf.in: Typo fix
2005-feb-09 Kees Leune <[email protected]>
* php/login.php: Proper error messages when opening non-existing dirs
* php/incident.php: Removed history and edit as sepeate options and
implemented them as incident details
* php/incident.php: Now possible to associate users with incidents
* php/incident.php: Carry over email addresses
2005-feb-08 Kees Leune <[email protected]>
* php/standard.php: MAIL_CC recipient is now also shown in smtp header
2005-feb-06 Kees Leune <[email protected]>
* php/help.php: New help system
* php/search.php: Added list of previous incidents when searching IP
* lib/airt.plib: Implemented event driven mechanism
* lib/search.plib: Fixed bug in network classification
2005-feb-03 Kees Leune <[email protected]>
* php/incident.php: Incident status filter
* php/login.php.in: Log to syslog on invalid logins
* php/logout.php: Fixed a bug which caused you not to log out
* php/standard.php: Removed hard-wired mail to kees
* lib/history.plib: Fixed DEBUG bug
* etc/airt-apache.conf.in: Hook for local extensions
2005-jan-31 Kees Leune <[email protected]>
* php/login.php.in: Update version number on login screen automagically
* lib/userfunctions.plib: removed from distribution
* lib/database.plib: Fixed bug in debug flag
* etc/airt.cfg.in: added hook for customfunctions
* doc/examples/customfunctions.plib: added customfunctions example
2005-jan-24 Kees Leune <[email protected]>
* Initial public version of AIRT