Releases: clearlinux/cve-check-tool
v5.6.4
- Minor maintanence update to cve-check-tool due to NVD changes
- You MUST update to this release to continue using cve-check-tool!
Recently the National Vulnerability Database switched to an SSL-only service,
so the tool has been updated to support this.
Note this is now the last release of cve-check-tool in the current 5.x
series. Many requirements have begun to emerge of late, that the tool
in it's current form does not serve.
Consequently, cve-check-tool will be rebased upon libnica, to provide the
core type/library functionalities. This will reduce complexity by proxying
much development and testing to an isolated library.
The remainder of the tools innards will be cleaned up, and "libraryfied"
to form the basis of a cleanroom reimplementation of cve-check-tool.
This will fix the limited scope issue to serve more needs, as well as
drop old code and speed everything up, and add the long-awaited multiple
data sources.
v5.6.3
- Small code cleanups
- Support running from git tree properly
- Enable relative plugin locations for ISAFW (--enable-relative-plugins)
- Support older compilers and Clang
v5.6.2
- Remove JIRA plugin for now due to many issues
- Further deglibification
- Fix segfault on forced types
v5.6.1
v5.6
- Many improvements to advisory locking support, for parallel usage
- Many many code cleanups
- Use NVD META file and check data integrity of XML downloads
- Add "-o" option for all stdout using report plugins
- Further deglibification (issue #21)
- Further database optimisations
- Be more considerate in I/O ops (posix_fadvise, malloc_trim, etc)
v5.5
- Many code cleanups
- Completely modular approach to package formats
- Full separation in API
- Enable atomic operations for Yocto buildbot/bitbake environment
- Enable direct inspection of .src.rpm
- Enable direct inspection of faux.csv type file
- Fix bugs relating to faux input
- Fix overwrites in recursive scenarios
v5.4
Maintenance release: Simple cleanup, performance fixes and build fixes for realpath issues
v5.3
Maintenance release with cleanups, clang compatibility and relro.
Also sees the incorporation of a "faux" package type to enable integration in more projects.
v5.2
Maintenance release for distribution maintainers
v5.1
Tag 5.1 for distribution releases, due to key fixes after v5