2.2.0+0

Changelog

Features

• 04a6ab0: feat(cve): MariaDB CVEs from BDU, NVD and MariaDB's own fixed-versions table (@stamepicmorg)
• d34f931: feat(cve): enodia cve update downloads the configured CVE databases (@stamepicmorg)
• 745da74: feat(cve): map 24 newer probes to NVD and BDU (@stamepicmorg)
• db2ba83: feat(cve): match iLO 4, iDRAC per generation and Synology DSM builds (@stamepicmorg)
• 6a07f71: feat(cve): read Atlassian's per-release CVE data (cve.atlassian.path) (@stamepicmorg)
• fa1355c: feat(cve): read PostgreSQL's and nginx's own security pages (@stamepicmorg)
• 27ecdba: feat(probe): add code-server (@stamepicmorg)
• bbe79a6: feat(probe): add doxygen and qbittorrent; more GitHub tag spellings (@stamepicmorg)
• 14663ec: feat(probe): add home-assistant and openhab; skip pre-release tag names (@stamepicmorg)
• 8cf8fed: feat(probe): add kafka (over SSH, from the broker's own jar) (@stamepicmorg)
• 9758458: feat(probe): add memcached, rabbitmq and cassandra (@stamepicmorg)
• 803b4f3: feat(probe): add minio (over SSH); compare MinIO release names (@stamepicmorg)
• febf5d0: feat(probe): add netbox and greenbone (@stamepicmorg)
• cb0b0c2: feat(probe): add netdata, libretranslate and torrserver (@stamepicmorg)
• da4d28b: feat(probe): add onlyoffice and euro-office (@stamepicmorg)
• 1c8bdaa: feat(probe): add phpipam and domainmod (@stamepicmorg)
• cf8315b: feat(probe): add posthog (@stamepicmorg)
• 93bc054: feat(probe): add sentry (self-hosted) (@stamepicmorg)
• 7cb2663: feat(probe): add splunk (management API, with credentials) (@stamepicmorg)
• fef7a1c: feat(probe): add uptime-kuma (socket.io login) (@stamepicmorg)
• b784017: feat(probe): add wapt (@stamepicmorg)
• 5b8d72a: feat(probe): add weblate; github resolver trims a repo-name tag prefix (@stamepicmorg)
• 04060e3: feat(probe): add zookeeper and ghost (@stamepicmorg)
• 78bf8e7: feat(probe): teamcity reads /app/rest/server/version without credentials (@stamepicmorg)

Fixes

• c31d865: fix(config): reject a credential kind the product never sends (@stamepicmorg)
• 2b0e92d: fix(cve): keep Jenkins weekly and LTS ranges apart (@stamepicmorg)
• 552ae9f: fix(probe): phpipam reads a bare ?v= asset version; code-server 4.92.2 fixture (@stamepicmorg)
• 93834a3: fix(probe): zookeeper keeps a full srvr reply when the close resets (@stamepicmorg)

Other

• e9a798b: style: gofmt weblate_test.go (@stamepicmorg)

2.1.1+0

Changelog

Fixes

• 4fd8818: fix(probe): recognise unmasked MariaDB 11.0+ in mysql and mariadb (@stamepicmorg)

2.1.0+0

Changelog

Features

• a588e4b: feat(cve): package-level Alpine CVEs from secdb (@stamepicmorg)
• 4d24dde: feat(cve): package-level CVEs for Astra Linux and RED OS from their own OVAL (@stamepicmorg)
• 8d23012: feat(cve): package-level CVEs for Ubuntu, Mint and the RHEL family from vendor OVAL (@stamepicmorg)
• 2011889: feat(cve): package-level Debian CVEs from the Debian Security Tracker (@stamepicmorg)
• 0e4503b: feat(probe): add freeradius, with a per-branch GitHub tags resolver (@stamepicmorg)
• 0f45e9f: feat(probe): add mariadb via the shared MySQL handshake reader (@stamepicmorg)
• 990e21b: feat(probe): add pfsense (Community Edition) (@stamepicmorg)
• c2d336d: feat(probe): add supermicro-bmc, dell-idrac, hp-ilo4 (@stamepicmorg)

Fixes

• c5c38a3: fix(config): validate reports missing cve.bdu.path/cve.nvd.path (@stamepicmorg)
• 610f092: fix(evaluate): clean MatchedCycle/LatestInCycle before storing them (@stamepicmorg)
• dd3d127: fix(version): fold VMware's "Update N" shorthand into the numeric spine (@stamepicmorg)

2.0.0+0

Changelog

Features

• a6390a7: feat(cve): add NIST NVD as a second correlation source alongside BDU (@stamepicmorg)
• dffff01: feat(cve): correlate CVEs via an operator-supplied БДУ ФСТЭК export (@stamepicmorg)
• 8f41322: feat(cve): map every probe with CVE data, match GitLab by edition (@stamepicmorg)
• 4c29e10: feat(cve): match Vault, Nextcloud and MongoDB CVEs by edition (@stamepicmorg)
• 3fa9f09: feat(probe): add fortios via its REST API (@stamepicmorg)
• 7716a4c: feat(render): add a CVE detail modal to the HTML compact view (@stamepicmorg)
• 4e78bf3: feat(render): add the CVES column and modal to the drift view (@stamepicmorg)
• a385d4c: feat(render): one CVE modal line per CVE, with parsed CVSS ratings (@stamepicmorg)
• 5c6576d: feat(render): remember a dismissed HTML alert per viewer (@stamepicmorg)
• 9f76c18: feat(render): show CVE ratings as colored badges in the modal (@stamepicmorg)
• 7011432: feat(render): widen the CVE modal (modal-xl) (@stamepicmorg)

Fixes

• cad6ec9: fix(config): reject CVE paths that YAML double quotes mangled (@stamepicmorg)
• 7615ee2: fix(cve): read the cve block from the config the run actually uses (@stamepicmorg)
• 5cb0552: fix(render): give the CVE modal Bootstrap's .modal class in CDN mode (@stamepicmorg)
• 58a92e3: fix(render): link BDU findings to their real bdu.fstec.ru page (@stamepicmorg)

Other

• 40804a4: build(deps): bump golang.org/x/crypto from 0.56.0 to 0.57.0 (@stamepicmorg)

1.2.1+0

Changelog

Fixes

• 03b7444: fix(probe): apply t.Timeout to the p4 CLI subprocess (@stamepicmorg)

1.2.0+0

Changelog

Features

• 72cd183: feat(probe): add p4d and p4p via the operator's own p4 CLI (@stamepicmorg)

Fixes

• 72b3e73: fix(probe): strip Windows line endings from p4 -Ztag output (@stamepicmorg)

1.1.1+0

Changelog

Fixes

• aab4100: fix(probe): give debian its own probe for the missing point release (@stamepicmorg)
• a38df82: fix(probe): give ubuntu its own probe for the missing point release (@stamepicmorg)

Other

• 6c2b021: build(deps): bump alpine from 3.20 to 3.24 (@dependabot[bot])
• d8d546a: sync from master (@stamepicmorg)

1.1.0+0

Changelog

Features

• 2d93db9: feat(probe): split sonarqube's lifecycle resolver into Server vs Community Build (@stamepicmorg)
• 440d911: feat(release): build the release Docker image on the house base, amd64 only (@stamepicmorg)
• 8acc717: feat(release): remove container publishing from this repo entirely (@stamepicmorg)
• 74a1d1b: feat(resolver): surface swallowed resolver errors, add GITHUB_TOKEN, add pgadmin via GitHub tags (@stamepicmorg)

Fixes

• ea950ca: fix(release): use the raw binary and root user, not the .deb, for the house-based image (@stamepicmorg)

1.0.0+0

Changelog

Features

• c0112c7: feat(android): a real android/arm64 build — linux_arm64 can't exec on Termux (STAM stam@epicm.org)
• cc6ac4e: feat(cli): add enodia about (STAM stam@epicm.org)
• 2e7306d: feat(cli): implement cmd/enodia per the roadmap's CLI phase (STAM stam@epicm.org)
• e1d06f6: feat(config): also accept config.yaml/.config.yaml naming; docs(readme): views + full search paths (STAM stam@epicm.org)
• 84b45c7: feat(config): implement internal/config (STAM stam@epicm.org)
• bce61d1: feat(config,settings): accept .yml alongside .yaml in the search path (STAM stam@epicm.org)
• 58878a7: feat(docker): add build/docker/Dockerfile, an epicmorg-base install-from-.deb image (STAM stam@epicm.org)
• e326771: feat(evaluate): implement internal/evaluate (STAM stam@epicm.org)
• adcfa5d: feat(export,settings): export.default_format in settings.yaml (STAM stam@epicm.org)
• d496288: feat(history): implement enodia history for historical tracking (STAM stam@epicm.org)
• 080826e: feat(packaging): .deb/.rpm via nfpm; docs(readme): supported platforms matrix (STAM stam@epicm.org)
• 8756d5c: feat(packaging): add .apk format, make pkg target, portable preinstall (STAM stam@epicm.org)
• 7e9e15a: feat(packaging): add Arch Linux (.pkg.tar.zst) package format (STAM stam@epicm.org)
• cd95125: feat(packaging): goreleaser, container, install script, GitHub Action (STAM stam@epicm.org)
• eb67e79: feat(packaging): pin enodia system user/group to uid/gid 1337 (STAM stam@epicm.org)
• 990200e: feat(packaging): rootless system user, man pages, install.ps1 (STAM stam@epicm.org)
• 2d15841: feat(probe): add Apache httpd support via the Server response header (STAM stam@epicm.org)
• d68252c: feat(probe): add Astra Linux, RED OS, and openEuler (STAM stam@epicm.org)
• ff0070f: feat(probe): add ClickHouse support via SELECT version() (STAM stam@epicm.org)
• 8f042cd: feat(probe): add Forgejo support via /api/v1/version (STAM stam@epicm.org)
• 11ab94d: feat(probe): add FreeBSD to the os-release family; document the rest (STAM stam@epicm.org)
• 540e14c: feat(probe): add Gentoo Linux (STAM stam@epicm.org)
• 4ba7b44: feat(probe): add Graylog support via /api/ root discovery document (STAM stam@epicm.org)
• 9ea0199: feat(probe): add HAProxy support via the stats page heading (STAM stam@epicm.org)
• bf37872: feat(probe): add Harbor support via /api/v2.0/systeminfo (STAM stam@epicm.org)
• 3f502a6: feat(probe): add Jaeger support via the embedded JAEGER_VERSION (STAM stam@epicm.org)
• 817b11c: feat(probe): add Kali Linux (STAM stam@epicm.org)
• 4b82f51: feat(probe): add Kibana support via /api/status (STAM stam@epicm.org)
• 851591b: feat(probe): add Logstash support via its own monitoring API root (STAM stam@epicm.org)
• b6c9030: feat(probe): add MikroTik RouterOS support via the REST API (STAM stam@epicm.org)
• e79303d: feat(probe): add MongoDB support via buildInfo over the wire protocol (STAM stam@epicm.org)
• 65f1765: feat(probe): add NixOS, SteamOS, EuroLinux, Linux Mint, postmarketOS, CentOS, and Proxmox VE (STAM stam@epicm.org)
• c5469f4: feat(probe): add OPNsense via vmactions/opnsense-vm; defer TrueNAS (STAM stam@epicm.org)
• 8db2914: feat(probe): add OpenBSD, NetBSD and Oracle Solaris via vmactions CI VMs (STAM stam@epicm.org)
• 434b70b: feat(probe): add OpenSearch support; fix elasticsearch misidentifying it (D9) (STAM stam@epicm.org)
• dea7482: feat(probe): add ProFTPD support via the FTP greeting (STAM stam@epicm.org)
• b42e1d3: feat(probe): add SSH-based OS-identification probes for 12 Linux distros (STAM stam@epicm.org)
• f7e2516: feat(probe): add Sonatype Nexus Repository support via the Server header (STAM stam@epicm.org)
• 896132d: feat(probe): add Synology DSM via its Web API login flow (STAM stam@epicm.org)
• 235154a: feat(probe): add Traefik support via /api/version (STAM stam@epicm.org)
• 4383c2d: feat(probe): add TrueNAS via /etc/version (interim, SSH-based) (STAM stam@epicm.org)
• a7e62f4: feat(probe): add VMware ESXi support via RetrieveServiceContent (STAM stam@epicm.org)
• 7ea58ab: feat(probe): add VMware Photon OS (STAM stam@epicm.org)
• 8f2c0da: feat(probe): add WordPress support via feed generator, meta tag fallback (STAM stam@epicm.org)
• 19f3998: feat(probe): add YouTrack support via /api/config?fields=version (STAM stam@epicm.org)
• b28f1c4: feat(probe): add Zabbix support via apiinfo.version (STAM stam@epicm.org)
• 1a3bbef: feat(probe): add artifactory (STAM stam@epicm.org)
• bffda1e: feat(probe): add bitwarden and vaultwarden (STAM stam@epicm.org)
• f7aee1e: feat(probe): add elasticsearch (STAM stam@epicm.org)
• 6a99660: feat(probe): add gitlab (STAM stam@epicm.org)
• 922f543: feat(probe): add grafana (STAM stam@epicm.org)
• 57947db: feat(probe): add jellyfin (STAM stam@epicm.org)
• 9a040d6: feat(probe): add jenkins (STAM stam@epicm.org)
• d785eda: feat(probe): add keycloak (STAM stam@epicm.org)
• 511a4dd: feat(probe): add macOS support via sw_vers over SSH (STAM stam@epicm.org)
• 5b929fd: feat(probe): add mattermost (STAM stam@epicm.org)
• b1be5e6: feat(probe): add mysql, the first non-HTTP probe (D10) (STAM stam@epicm.org)
• 730f47e: feat(probe): add nextcloud (STAM stam@epicm.org)
• e859b25: feat(probe): add nginx support via the Server response header (STAM stam@epicm.org)
• 5da22d5: feat(probe): add oauth2-proxy support via the sign_in page footer (STAM stam@epicm.org)
• 04bff31: feat(probe): add owncast (STAM stam@epicm.org)
• a1f09f0: feat(probe): add perforce-swarm (STAM stam@epicm.org)
• 02114c1: feat(probe): add pgAdmin support via the ?ver= cache-busting param (STAM stam@epicm.org)
• e93712b: feat(probe): add phpMyAdmin support via CommonParams.setAll's version field (STAM stam@epicm.org)
• 5124e2c: feat(probe): add portainer (STAM stam@epicm.org)
• d40d45f: feat(probe): add postgres_exporter support via build_info metric (STAM stam@epicm.org)
• 38febc1: feat(probe): add sonarqube (STAM stam@epicm.org)
• b81e745: feat(probe): add ssh, redis, postgresql — the rest of D10's non-HTTP probes (STAM stam@epicm.org)
• f8abe6f: feat(probe): add teamcity (STAM stam@epicm.org)
• 066e63f: feat(probe): add testrail (STAM stam@epicm.org)
• d25691e: feat(probe): add vault (STAM stam@epicm.org)
• fd05d40: feat(probe): add vcenter (STAM stam@epicm.org)
• 2063b84: feat(probe): add zou (kitsu) (STAM stam@epicm.org)
• 692109d: feat(probe): split zou and kitsu into two distinct products (STAM stam@epicm.org)
• 5cb3bfd: feat(probe): switch TrueNAS to its HTTP API (STAM stam@epicm.org)
• 64afd8e: feat(probe): wire up GitHub Releases resolver for six probes (STAM stam@epicm.org)
• 3e0f5eb: feat(probe): wire zou's GitHub Releases resolver to cgwire/kitsu (STAM stam@epicm.org)
• 849df47: feat(release): also push the container image to Docker Hub and Quay (STAM stam@epicm.org)
• feabe9e: feat(render): dismissible CDN warning, report footers, README settings docs (STAM stam@epicm.org)
• a9cc950: feat(render): footer links to enodia.sh/docs.enodia.sh, add a favicon (STAM stam@epicm.org)
• 2a0c1d0: feat(render): highlight CDN-mode table rows by severity (STAM stam@epicm.org)
• 4360db2: feat(render): implem...