secubox-deb/packages/secubox-cve-triage/debian/changelog
CyberMind-FR 60e9d1919b
Some checks are pending
License Headers / check (push) Waiting to run
docs(cve-triage): changelog 1.1.0 (WAF product-absent generator, deployed gk2)
Co-Authored-By: Gerald KERMA <devel@cybermind.fr>
2026-07-18 11:27:08 +02:00

36 lines
1.5 KiB
Plaintext

secubox-cve-triage (1.1.0-1~bookworm1) bookworm; urgency=medium
* WAF product-absent rule generator (closes #875). Turns vendored Nuclei
templates into detect-mode WAF rules fingerprinting scanners that probe for
products this box does not run (F5/PAN-OS/Ivanti). Zero false positives by
construction: appliance-family allowlist AND absence from the presence union
(dpkg + WAF-routed vhosts + secubox modules), fail-safe present-in-doubt.
* CLI secubox-cvectl waf-rules generate (dry-run by default, --apply writes).
* Panel tab + JWT routes GET /waf-rules (preview) and POST /waf-rules/generate.
* Ships a vendored Nuclei subset (MIT) and an offline curation script.
* Depends: python3-yaml.
-- Gerald KERMA <devel@cybermind.fr> Fri, 18 Jul 2026 08:00:00 +0200
secubox-cve-triage (1.0.1-1~bookworm2) bookworm; urgency=medium
* webui: hybrid-dark cyan reskin (WebUI Panel Guidelines) baked into the package.
-- Gerald KERMA <devel@cybermind.fr> Thu, 10 Jul 2026 10:00:00 +0200
secubox-cve-triage (1.0.1-1~bookworm1) bookworm; urgency=low
* Rewrite Description to identify this as the CVE vulnerability
triage workflow and disambiguate from the other six
threats-cluster packages (closes #383, part of dns/threats
naming-clarity pass)
* Maintainer corrected to Gerald KERMA
-- Gerald KERMA <devel@cybermind.fr> Wed, 27 May 2026 12:00:00 +0000
secubox-cve-triage (1.0.0-1~bookworm1) bookworm; urgency=medium
* Initial release
-- SecuBox <dev@secubox.local> Fri, 27 Mar 2026 08:57:14 +0100