Skip to content

Tags: cccs-kevin/cuckoo

Tags

2.0.7a1

prepare for 2.0.7a1 release

2.0.6.2

version 2.0.6.2 with a few issues fixed cuckoosandbox#2336 (thanks se…

…cusoc)

2.0.6.1

upgrade sflock peepdf, version 2.0.6.1

Fixes two small issues that have been reported regarding the 2.0.6
release, improves performance and correctness for some PDFs, and
correctly handles maliciously built .zip files.

2.0.5.3

resolve xss upon crafted url cuckoosandbox#2094 (thanks Roy Kokkelkoren)

Seems another XSS slipped through. Only accessible if the attacker is
able to submit tasks through the API but critical nonetheless. Thanks to
Koen Houtman for providing the patch.

2.0.5.2

fixup latest monitor symlink issue cuckoosandbox#2008 (thanks hendl d…

…oomedraven)

2.0.5.1

revert mongodb sorting tweaks cuckoosandbox#2006

This was a good proposal by sebdg, however, it turns out that MongoDB
requires quite some (or at least, too much) memory for such sorting
rules, rendering this kind of useless on bigger'ish installations.

For what it's worth, these sorting rules were put in place so that,
after reprocessing an analysis, the latest results would be visible in
the Web Interface. Naturally the better and longterm solution will be to
completely delete any previous results. This is (still) a TODO item.

Thanks to seantree, nicpenning, and sebdg for identifying this issue and
providing a proper workaround. Keeping in mind the above the best way
forward seems to revert these changes for now, though.

2.0.5

version 2.0.5

2.0.4.4

unescape urls before submitting back to backend

Thanks to napsta, SparkyNZL, and threathive for reporting this issue.
Resolved by automagisch, but I squeezed unnecessary commits together.