Skip to content

Releases: Qualys/log4jscanwin

2.1.4.0

31 May 18:47
Compare
Choose a tag to compare
  • Added command line parameters for changing the temporary directory and max size of files to inspect.

/max_size X
Skip scanning files which are larger than X megabytes in size.
/temp_directory "C:\Temp"
Use the desired directory for storing temporary files.

Log4jRemediation Release 1.2.2.1

07 Apr 12:02
Compare
Choose a tag to compare

Fixed issues related to parsing and archiving.

2.1.3.0

09 Feb 03:40
Compare
Choose a tag to compare
  • Fix writing the signature report to the correct directory structure for Windows XP, Windows Server 2003, and Windows Server 2003 R2

2.1.2.0

10 Jan 20:14
Compare
Choose a tag to compare

Scanner:
• Added Bzip2 compression support.
• Added support for scanning the following file extensions: .tbz, .tbz2, .tar.bz, .tar.bz2
• Allow both types of reports to be generated at the same time. (Issue: Allow run of /report and /report_sig together · Issue #29 · Qualys/log4jscanwin (github.com))
• Add ability to exclude drives/directories/files from a scan. (Issue: Exclude from scan parameter · Issue #42 · Qualys/log4jscanwin (github.com))
o Excluded drives, directories, and files are added to the report summaries.
• Added the ability to add additional file extensions to the scanning engine via command line parameters.

2.0.2.7

08 Jan 01:10
Compare
Choose a tag to compare
  • Addresses issue where the tar library code would throw an Out of Memory exception with small tar/tgz files ( less than 512 bytes, which violate the TAR standards ). (Issue: #35)
  • Allow for /report and /report_sig to be processed at the same time. (Issue: #29)

2.0.2.4

06 Jan 02:24
Compare
Choose a tag to compare
  • Add Remediation Tool to distribution
  • Add support for lowering process and thread priorities for background processing (/lowpriority command line argument) (Community submission: Nico Agten)
  • Add support for processing directories attached by mount points (/scaninclmountpoints command line argument) (Community submission: Nico Agten)
  • Add support for scanning tarballs (.tar) and compressed tarballs (.tar.gz, .tgz)
  • Add support for creating a scan summary file for the /report_sig command line argument

2.0.2.3

06 Jan 00:36
Compare
Choose a tag to compare
  • Add Remediation Tool to distribution
  • Add support for lowering process and thread priorities for background processing (/lowpriority command line argument) (Community submission: Nico Agten)
  • Add support for processing directories attached by mount points (/scaninclmountpoints command line argument) (Community submission: Nico Agten)
  • Add support for scanning tarballs (.tar) and compressed tarballs (.tar.gz, .tgz)
  • Add support for creating a scan summary file for the /report_sig command line argument

1.2.19

29 Dec 00:27
Compare
Choose a tag to compare
  • Added support for CVE-2021-44832
  • Added support for PAR files (assuming similar to ZIP files)

1.2.18

21 Dec 19:26
Compare
Choose a tag to compare
  • Add detection support for CVE-2021-45105
  • Add detection support for CVE-2021-4104
  • Report on all Log4j detections so various dashboards can be created tracking remediation efforts across an enterprise.

1.2.17

17 Dec 20:56
Compare
Choose a tag to compare

Addresses the following issues:

  • Correctly display localized directory and file names when just the /scan option is used.
  • Always create the required directory structure for the signature report when the /report_sig option is used.