secubox/secubox-deb
1
0
Fork 0
mirror of https://github.com/CyberMind-FR/secubox-deb.git synced 2026-07-28 21:17:36 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

docs(cve-triage): changelog 1.1.0 (WAF product-absent generator, deployed gk2)
Some checks are pending
License Headers / check (push) Waiting to run
Details

Browse Source 
Co-Authored-By: Gerald KERMA <devel@cybermind.fr>
This commit is contained in:
CyberMind-FR 2026-07-18 11:27:08 +02:00
parent a64257ca58
commit 60e9d1919b
1 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
packages/secubox-cve-triage/debian/changelog
View File

@ -1,3 +1,17 @@
secubox-cve-triage (1.1.0-1~bookworm1) bookworm; urgency=medium
* WAF product-absent rule generator (closes #875). Turns vendored Nuclei
templates into detect-mode WAF rules fingerprinting scanners that probe for
products this box does not run (F5/PAN-OS/Ivanti). Zero false positives by
construction: appliance-family allowlist AND absence from the presence union
(dpkg + WAF-routed vhosts + secubox modules), fail-safe present-in-doubt.
* CLI secubox-cvectl waf-rules generate (dry-run by default, --apply writes).
* Panel tab + JWT routes GET /waf-rules (preview) and POST /waf-rules/generate.
* Ships a vendored Nuclei subset (MIT) and an offline curation script.
* Depends: python3-yaml.
-- Gerald KERMA <devel@cybermind.fr> Fri, 18 Jul 2026 08:00:00 +0200
secubox-cve-triage (1.0.1-1~bookworm2) bookworm; urgency=medium
* webui: hybrid-dark cyan reskin (WebUI Panel Guidelines) baked into the package.