dawnscanner 1.6.6 → 1.6.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 9554074ea8ea6a732a5c4e82027be718bf0b71a5
-  data.tar.gz: 161fa46fbf73e6c269ab097f1ef57cb60642c958
+  metadata.gz: 8f1aabf6fa57d0ddaff386dea136fa626502837f
+  data.tar.gz: e327ca19c12117fab7b4fecebfbabed1d37385c4
 SHA512:
-  metadata.gz: 2152cb6e7ab3427d8b7da640a2241d9ae59df6dada0b6d84869c23f100281c780273f71a92e48c40f51c26bc080b065a00d94e93f089448a7a717432a3ee7801
-  data.tar.gz: c0a5e4b389247fd2e64ade0f448dc15f9473c79e2a07a8bbb419554b21aa3109dd3799450194a4a61fb104ea5571c8fc24e997b310744c21454bc7bab38fc74a
+  metadata.gz: 1d589632d09292f8e04d3c76dd0d20ab665d8b8ab9ca33dc6c2c93f0455741cd7bfa0c4e336b2ba99bb8cc2a74626e5c081046a5581591d75330837f4f885fd0
+  data.tar.gz: 47346624e1d3af97c699970459a67d7d23a97d33fc5f338669164bee51a5bf36453e09c6455460396204614c3730a3ae39a305da8353ff91f0cd53a65713428b

checksums.yaml.gz.sig

@@ -1,2 +1 @@
-#]ߗ��n[.b�l��2`�EQbe�m����d�
- D�(@�#`�CX�^����%�H��jra���
+������j��T|N2̳p�����dEr�.�Kda�SP����9Ke��|b�/F� P�]��cl�s���7p]�a��?]ȫ;�D3e�?����W��r x��{E�5;�B�#�
[C�ui@3/�x�����i�ƑC�~�������Zmf��x+�?x�z6��E!sᛖ�H-YP&L�e3m�̨q5�4�d:�"P�C�y��9z��'�i@��!d����-�����H���<F�Nd�I����썪ާ

data/Changelog.md

@@ -5,7 +5,17 @@ It supports [Sinatra](http://www.sinatrarb.com),
 [Padrino](http://www.padrinorb.com) and [Ruby on Rails](http://rubyonrails.org)
 frameworks.
 
-_latest update: Tue Nov  1 18:59:51 CET 2016_
+_latest update: Tue Nov  1 22:47:56 CET 2016_
+
+## Version 1.6.7 - codename: Tow Mater (2016-11-24)
+
+* Removed a typo preventing CVE bulletins to be loaded in the KB
+* Removed CVSS as external dependency. Now it is a Dawn::Cvss module
+* Dropped sys-uname dependency. Using shell 'uname -r' instead
+* Dropped ptools dependency. Pattern matching will run also with binary files.
+* Applied pull request #217 - Add bundler as runtime dependency - by @kolybasov
+* Applied pull request #216 - Add TraviCI setup to README - by @vpolimenov
+* Applied pull request #215 - Fixes issue where debug mode was always enabled by @bartj3
 
 ## Version 1.6.6 - codename: Tow Mater (2016-11-01)
 

data/VERSION

@@ -12,4 +12,4 @@
 # |   "Guido"       |  x.x.0  |
 # |   "Luigi"       |  x.x.0  |
 # | "Doc Hudson"    |  x.x.0  |
-1.6.6 - Tow Mater
+1.6.7 - Tow Mater

data/bin/dawn

@@ -92,7 +92,7 @@ opts.each do |opt, val|
   when '--config-file'
     options = Dawn::Core.read_conf(val)
   when '--disable-cve-bulletins'
-    options[:enabled_checks].delete(:cve_bulletin)
+    options[:enabled_checks].delete(:bulletin)
   when '--disable-code-quality'
     options[:enabled_checks].delete(:code_quality)
   when '--disable-code-style'

data/checksum/dawnscanner-1.6.6.gem.sha1

@@ -0,0 +1 @@
+09eaf5fb8a787aaa2f1b57ef0792f0a36571aec6

data/lib/dawn/kb/basic_check.rb

@@ -49,7 +49,7 @@ module Dawn
       # This is a flag for the security check family. Valid values are:
       #   + generic_check
       #   + code_quality
-      #   + cve_bulletin
+      #   + bulletin
       #   + code_style
       #   + owasp_ror_cheatsheet
       #   + owasp_top_10_n (where n is a number between 1 and 10)

data/lib/dawn/kb/cve_2015_7577.rb

@@ -24,7 +24,7 @@ module Dawn
            })
           self.save_minor=true
           self.save_major=true
-          self.debug = true
+          # self.debug = true
           self.safe_dependencies = [{:name=>"activerecord", :version=>['3.1.9999','3.2.22.1', '4.1.14.1', '4.2.5.1', '5.0.0.beta1.1']}]
           self.not_affected = {:name=>"actionpack", :version=>['3.0.x']}
 

data/lib/dawn/version.rb

@@ -1,7 +1,7 @@
 module Dawn
-    VERSION = "1.6.6"
+    VERSION = "1.6.7"
     CODENAME = "Tow Mater"
-    RELEASE = "20161101"
-    BUILD = "17"
-    COMMIT = "g9edee27"
+    RELEASE = "20161123"
+    BUILD = "7"
+    COMMIT = "g285b36f"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dawnscanner
 version: !ruby/object:Gem::Version
-  version: 1.6.6
+  version: 1.6.7
 platform: ruby
 authors:
 - Paolo Perego
@@ -30,7 +30,7 @@ cert_chain:
   jm6Bw8fGx65GCWIdgMhH/P0icixcnyrnotnnOrEcmPudIlgEN9qaUYcguOfFBhTH
   1sGpM7KzrYHU8qJJPrdaX0ezIDL4cN/kA/DxYTfUiMw=
   -----END CERTIFICATE-----
-date: 2016-11-01 00:00:00.000000000 Z
+date: 2016-11-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: cvss
@@ -321,6 +321,7 @@ files:
 - checksum/dawnscanner-1.6.3.gem.sha1
 - checksum/dawnscanner-1.6.4.gem.sha1
 - checksum/dawnscanner-1.6.5.gem.sha1
+- checksum/dawnscanner-1.6.6.gem.sha1
 - code_of_conduct.md
 - dawnscanner.gemspec
 - doc/dawn_1_0_announcement.md