Loren Bandiera’s weblog

LDAP Administration Tool 1.3.2 has been released. This is the new development branch that will eventually become 1.4. Changes since 1.3.1:

• Stetic interface now translatable
• Upgraded managed D-Bus library (dbus-sharp 0.4 / dbus-sharp-glib 0.3)
• Build system fixes

Downloads: tar.gz

Earlier today, Sussen was certified as being OVAL compatible. Here is the message we got:

Congratulations! MMG Security’s Sussen has been granted official OVAL
Compatibility. The OVAL Community is excited to add you to the growing
list of products and services that have embraced the initiative and are
working to make IT Security better for all.

The OVAL web site should now reflect this status. We will also be
presenting you with a formal certificate, either by mail or at an
upcoming conference.

Thank you again for you support of OVAL!

Currently it’s only for the Windows version though. We had some issues with XML validation under Linux/Mono. We reported the bugs, they got fixed and are just waiting for the next Mono release. Since the Linux and Windows versions share 90%+ of their code we don’t expect any major issues getting the Linux version certified as well.

Sussen 0.34 has been released. Sussen is a tool that checks for vulnerabilities and configuration issues on computer systems. Changes since 0.33:

• agent: Fixed crash when loading app.config in Mono 1.1.13.x
• applet: Save results to desktop if explict path not specified
• applet: Run as tray icon by default
• oval: Fixed incorrect behavior in variable handling
• oval: Increased debug information available
• oval: Make sure all tested objects are recorded in system characteristics
• oval: Record variable values in system characteristics
• oval: Fixed error in behaviors handling for FileEffectiveRightsTest (Windows)
• xml: Updated Ubuntu definitions for USNs 390-1 to 412-1
• xml: Updated Windows definitions from oval.mitre.org

Downloads: tar.gz | .rpm (Fedora Core 6) | .deb (Ubuntu) | .msi (Windows)

Sussen 0.33 has been released. Sussen is a tool that checks for vulnerabilities and configuration issues on computer systems. Changes since 0.32:

• oval: Improved DataCollector handling of collected objects
• oval: Include variable values in system characteristics
• oval: Fixed logic error in FileEffectiveRightsTest (Windows)
• oval: Rewrote SidTest (Windows)
• oval: XML comments in the definition file caused an error
• oval: Fixed incorrect test names in LocalVariable.GetObjectValue() method
• oval: Return ‘not applicable’ if definition family doesn’t match platform
• www: Updated webservice API arguments to be consistent across methods
• www: Interoperability fixes for web service
• xml: Updated Ubuntu definitions for USNs 364-1 to 390-1
• xml: Added definition test suite

Downloads: tar.gz | .rpm (Fedora Core 6) | .deb (Ubuntu) | .msi (Windows)

LDAP Administration Tool 1.3.1 has been released. This is the new development branch that will eventually become 1.4. Changes since 1.3.0:

• Switched to managed Gnome.Keyring library
• Switched to managed D-Bus library
• Finished converting interface to use Stetic instead of Glade
• Code cleanup

Downloads: tar.gz

Sussen 0.32 has been released. Sussen is a tool that checks for vulnerabilities and configuration issues on computer systems. Changes since 0.31:

• agent: Updated agent to work with new web service interface
• oval: Make sure to get full file version in File test (Windows)
• oval: Merged missing extend_definition patch from trunk (Windows)
• oval: Fixed logic error in VersionType comparison operators
• oval: results_to_html.xsl uses color coded rows again
• oval: Updated monodoc documentation for oval libraries
• www: Implemented start of proposed OVAL:SOA interface
• www: Web service works under Linux / mod_mono / MySQL
• www: Database schema updated

Downloads: tar.gz | .rpm (Fedora Core 6) | .deb (Ubuntu) | .msi (Windows)

LDAP Administration Tool 1.2.1 has been released. Changes since 1.2.0:

• BUGFIX [#76] Fix build issue with Mono 1.1.18
• BUGFIX [#75] Handle exception if prctl can not be found
• Fixed crash in LDAP browser

Downloads: tar.gz | .deb (Ubuntu)