risu 1.7.3 → 1.7.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 3976d26d2c92a443ccbc3a367a78f452e1bf959e
-  data.tar.gz: 0d8c53e2188555be31370de88051c3b033ab5e25
+  metadata.gz: ed1f7b219ebb25c728109b214d7b1f6f2b4aabd5
+  data.tar.gz: 91e12a4dd836bbe7b9573c6d9b2f53f7f0fc3146
 SHA512:
-  metadata.gz: bdee561ba2e2d97d7c07cc211b469c51fabc303c7ceaa673fb92aaa8141d52fa53c9a6c28054002ba8a548d1d6e1e9787bb1c44ce49fc4bf5836ea6cb31fb05a
-  data.tar.gz: baed03ceb606c9034731555abe4857552a61e97453a5dbd15ed6b72cef40a3a33f1fd5e4c03aa61ddc23b8f604a3985e6c3f35c4cff0fed649e5d737be011cef
+  metadata.gz: 4452938f9fdbc00b1a692e9e7e771f51655a44b550a8a8145f6a71cd905f9cc8a1d40c7fda5d8d59a4ace8e3f5d371177bc7adadd619f6c49b360fbfb2bbfd8e
+  data.tar.gz: 40cc53b89b40b5c855b9713e9f6371e5062d3ff819d6328e69f50e9b9e4fd5121012b9c4c82f966536303a67a112453cc8d0289ae12528fc0343b619b2fe76ed

data/NEWS.markdown

@@ -1,5 +1,12 @@
 # News
 
+# 1.7.4 (January 25, 2015)
+- Added New tags to the model Item
+	- cm:compliance-reference
+	- cm:compliance-see-also-
+	- cm:compliance-solution
+- Increased the database size of all cm:compliance tags from string to text
+
 # 1.7.3 (January 8, 2015)
 - Parser Optimizations by [@bluehavana]
 - Renamed Attachment.type to Attachment.ttype, due to a rails naming issue
@@ -62,9 +69,9 @@
 		- Added hp.
 		- Added glsa.
 		- Added freebsd.
-- _Experimental Post Processing_, Sums up the findings and removes the duplicates. This allows for cleaner 
-	authenticated reports. Very experimental at the moment, the are auto loaded from the same directories as 
-		templates for the time being
+		- *Experimental Post Processing*, Sums up the findings and removes the duplicates. This allows for cleaner
+			authenticated reports. Very experimental at the moment, the are auto loaded from the same directories as templates
+			for the time being
 	- Use of the --post-process command line option will turn this on and off
 	- Java Plugins
 	- Adobe Reader plugins
@@ -98,12 +105,12 @@
 	- Added "Exploitablity Summary Report" template
 	- Added "Talking Points Report" template
 	- Added "Missing Root Cause Report" template
-	- Templates must now specify their renderer :renderer => "PDF" or :renderer => "CSV" in the template_info section. This
-		will break all templates until it is added.
+	- Templates must now specify their renderer :renderer => "PDF" or :renderer => "CSV" in the template_info section.
+		This will break all templates until it is added.
 	- Template Helper
 		- Added a table method to generate a table in 1 line of code
 		- Added a new_page method to create a page break in the report
-		- Added other_os_graph_page, This generates a page for the PDF renderer with the 
+		- Added other_os_graph_page, This generates a page for the PDF renderer with the
 			other_os_graph and other_os_graph_text followed by a new_page
 		- item_count_by_plugin_name
 		- item_count_by_plugin_id
@@ -446,20 +453,20 @@ You can access it via `Host.first.patches` or `Patch.all`
 	- New HostProperties attribute: pcidss:www:xss
 - Added more unit tests 91.7% code coverage for testing at the moment. Not including templates.
 
-#1.4.2 (May 13, 2011)
+# 1.4.2 (May 13, 2011)
 
 - Added a fix for all of the MSXX-XXX Host Properties tags that don't serve any purpose
 - Added sqlite3 as an install dependency to help with sqlite usage
-- Fixed a privately report bug with the *_risks_unique_sorted functions not working on MySQL
+- Fixed a privately report bug with the *_risks_unique_sorted* functions not working on MySQL
 
-#1.4.1 (May 10, 2011)
+# 1.4.1 (May 10, 2011)
 
 - Fixed a issue with a nonexistent 'Critical' severity.
 - Added VMware ESX to the Other OS graph Ticket #33
 - windows_os_graph were using the wrong counters Ticket #32
 - Updated the Prawn gem version to 0.11.1
 
-#1.4.0 (April 20, 2011)
+# 1.4.0 (April 20, 2011)
 
 - Added a --console option for creating a ActiveRecord console into the database
 - Updated the parser to handle the new plugin_type field on the plugins table

data/lib/risu.rb

@@ -26,7 +26,7 @@
 
 module Risu
 	APP_NAME = "risu"
-	VERSION = "1.7.3"
+	VERSION = "1.7.4"
 	GRAPH_WIDTH = 750
 	#                  red     orange  yellow  green    blue   purple        grey           pink
 	GRAPH_COLORS = %w(#d2403f #ec9241 #fcc343 #50ad51 #397bbb #8E6B8E black #cccccc brown #e52d89)

data/lib/risu/base/schema.rb

@@ -98,14 +98,19 @@ module Risu
 					t.integer :severity
 					t.string :plugin_name
 					t.boolean :verified
-					t.string :cm_compliance_info
-					t.string :cm_compliance_actual_value
-					t.string :cm_compliance_check_id
-					t.string :cm_compliance_policy_value
-					t.string :cm_compliance_audit_file
-					t.string :cm_compliance_check_name
-					t.string :cm_compliance_result
-					t.string :cm_compliance_output
+					t.text :cm_compliance_info, limit: 4294967295
+					t.text :cm_compliance_actual_value, limit: 4294967295
+					t.text :cm_compliance_check_id, limit: 4294967295
+					t.text :cm_compliance_policy_value, limit: 4294967295
+					t.text :cm_compliance_audit_file, limit: 4294967295
+					t.text :cm_compliance_check_name, limit: 4294967295
+					t.text :cm_compliance_result, limit: 4294967295
+					t.text :cm_compliance_output, limit: 4294967295
+
+					t.text :cm_compliance_reference, limit: 4294967295
+					t.text :cm_compliance_see_also, limit: 4294967295
+					t.text :cm_compliance_solution, limit: 4294967295
+
 					t.integer :real_severity
 					t.integer :risk_score
 				end

data/lib/risu/parsers/nessus/nessus_sax_listener.rb

@@ -75,7 +75,7 @@ module Risu
 					cm:compliance-info cm:compliance-actual-value cm:compliance-check-id cm:compliance-policy-value
 					cm:compliance-audit-file cm:compliance-check-name cm:compliance-result cm:compliance-output policyOwner
 					visibility script_version attachment policy_comments d2_elliot_name exploit_framework_d2_elliot
-					exploited_by_malware compliance
+					exploited_by_malware compliance cm:compliance-reference cm:compliance-see-also cm:compliance-solution
 				])
 
 				# TODO: documentation. These are never used in the class
@@ -276,7 +276,8 @@ module Risu
 									:svc_name => attributes["svc_name"],
 									:protocol => attributes["protocol"],
 									:severity => attributes["severity"],
-									:plugin_id => @plugin.id)
+									:plugin_id => @plugin.id
+								)
 
 					@plugin.save
 				end
@@ -358,8 +359,7 @@ module Risu
 				#parser. To solve this we do the references before the final plugin data, Valid references must be added
 				#the VALID_REFERENCE set at the top to be parsed.
 				def end_valid_reference(element)
-					@ref = @plugin.references.create(:reference_name => element,
-										:value => @vals["#{element}"])
+					@ref = @plugin.references.create(:reference_name => element, :value => @vals["#{element}"])
 				end
 
 				def end_report_item(_)
@@ -372,7 +372,12 @@ module Risu
 						:cm_compliance_audit_file => @vals["cm:compliance-audit-file"],
 						:cm_compliance_check_name => @vals["cm:compliance-check-name"],
 						:cm_compliance_result => @vals["cm:compliance-result"],
-						:cm_compliance_output => @vals["cm:compliance-output"])
+						:cm_compliance_output => @vals["cm:compliance-output"],
+
+						:cm_compliance_reference => @vals["cm:compliance-reference"],
+						:cm_compliance_see_also => @vals["cm:compliance-see-also" ],
+						:cm_compliance_solution => @vals["cm:compliance-solution"]
+					)
 
 					@plugin.update(:solution => @vals["solution"],
 						:risk_factor => @vals["risk_factor"],
@@ -401,7 +406,8 @@ module Risu
 						:always_run => @vals["always_run"],
 						:script_version => @vals["script_version"],
 						:exploited_by_malware => @vals["exploited_by_malware"],
-						:compliance => @vals["compliance"])
+						:compliance => @vals["compliance"]
+					)
 				end
 
 				def end_attachment(_)

data/lib/risu/parsers/nessus/postprocess/root_cause.rb

@@ -301,6 +301,7 @@ module Risu
 							73598 => "Vendor Support",
 
 							49071 => "Configuration",
+							19948 => "Configuration",
 							41028 => "Configuration",
 							57582 => "Configuration",
 							45411 => "Configuration",

data/risu.gemspec

@@ -59,7 +59,7 @@ Gem::Specification.new do |s|
 	s.add_dependency('prawn', ['0.12.0'])
 	s.add_dependency('gruff', ['0.3.7'])
 	s.add_dependency('mysql2', ['0.3.11'])
-	s.add_dependency('rmagick', ['2.13.2'])
+	s.add_dependency('rmagick', ['2.13.4'])
 	s.add_dependency('sqlite3', ['1.3.7'])
 	s.add_dependency('nokogiri', ['1.6.0'])
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: risu
 version: !ruby/object:Gem::Version
-  version: 1.7.3
+  version: 1.7.4
 platform: ruby
 authors:
 - Jacob Hammack
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-01-09 00:00:00.000000000 Z
+date: 2015-01-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: simplecov
@@ -146,14 +146,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.13.2
+        version: 2.13.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.13.2
+        version: 2.13.4
 - !ruby/object:Gem::Dependency
   name: sqlite3
   requirement: !ruby/object:Gem::Requirement