From 60e9d1919b9d4f626d314729eba7aa4c27242170 Mon Sep 17 00:00:00 2001 From: CyberMind-FR Date: Sat, 18 Jul 2026 11:27:08 +0200 Subject: [PATCH] docs(cve-triage): changelog 1.1.0 (WAF product-absent generator, deployed gk2) Co-Authored-By: Gerald KERMA --- packages/secubox-cve-triage/debian/changelog | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/packages/secubox-cve-triage/debian/changelog b/packages/secubox-cve-triage/debian/changelog index fa2ea7c0..f9b88811 100644 --- a/packages/secubox-cve-triage/debian/changelog +++ b/packages/secubox-cve-triage/debian/changelog @@ -1,3 +1,17 @@ +secubox-cve-triage (1.1.0-1~bookworm1) bookworm; urgency=medium + + * WAF product-absent rule generator (closes #875). Turns vendored Nuclei + templates into detect-mode WAF rules fingerprinting scanners that probe for + products this box does not run (F5/PAN-OS/Ivanti). Zero false positives by + construction: appliance-family allowlist AND absence from the presence union + (dpkg + WAF-routed vhosts + secubox modules), fail-safe present-in-doubt. + * CLI secubox-cvectl waf-rules generate (dry-run by default, --apply writes). + * Panel tab + JWT routes GET /waf-rules (preview) and POST /waf-rules/generate. + * Ships a vendored Nuclei subset (MIT) and an offline curation script. + * Depends: python3-yaml. + + -- Gerald KERMA Fri, 18 Jul 2026 08:00:00 +0200 + secubox-cve-triage (1.0.1-1~bookworm2) bookworm; urgency=medium * webui: hybrid-dark cyan reskin (WebUI Panel Guidelines) baked into the package.