From f9f63a525673cd939c66acc72da31ac87158860b Mon Sep 17 00:00:00 2001
From: zapbot <12745184+zapbot@users.noreply.github.com>
Date: Wed, 23 Oct 2024 09:37:00 +0000
Subject: [PATCH] Release add-on(s)
Release the following add-ons:
- Active scanner rules version 69
- Linux WebDrivers version 110
- MacOS WebDrivers version 110
- Windows WebDrivers version 110
Signed-off-by: zapbot <12745184+zapbot@users.noreply.github.com>
---
ZapVersions-2.15.xml | 66 +++++++++++++++++++-------------------------
ZapVersions-dev.xml | 66 +++++++++++++++++++-------------------------
2 files changed, 58 insertions(+), 74 deletions(-)
diff --git a/ZapVersions-2.15.xml b/ZapVersions-2.15.xml
index b66b3364..cc4114d3 100644
--- a/ZapVersions-2.15.xml
+++ b/ZapVersions-2.15.xml
@@ -124,31 +124,23 @@
Active scanner rules
The release status Active Scanner rules
ZAP Dev Team
- 68
- ascanrules-release-68.zap
+ 69
+ ascanrules-release-69.zap
release
<h3>Changed</h3>
<ul>
-<li>Maintenance changes.</li>
-<li>The following scan rules now include example alert functionality for documentation generation purposes (Issue 6119):
-<ul>
-<li>Spring Actuator</li>
-<li>XSLT Injection</li>
-<li>XPath Injection</li>
-</ul>
-</li>
+<li>The XML External Entity Attack scan rule now include example alert functionality for documentation generation purposes (Issue 6119).</li>
</ul>
<h3>Fixed</h3>
<ul>
-<li>Address false positives with Source Code Disclosure - CVE-2012-1823 scan rule, by not scanning binary responses and responses that already contain PHP source (Issue 8638).</li>
-<li>Cross Site Scripting Rule false positives at medium threshold by matching the expected context (Issue 8640).</li>
+<li>Added more checks for valid .htaccess files to reduce false positives (Issue 7632).</li>
</ul>
- https://github.com/zaproxy/zap-extensions/releases/download/ascanrules-v68/ascanrules-release-68.zap
- SHA-256:f66847dacea00eac5da8de34159f6e733acbc5a91a95fc249986b4fb7d79069a
+ https://github.com/zaproxy/zap-extensions/releases/download/ascanrules-v69/ascanrules-release-69.zap
+ SHA-256:0d5aae9ca89f7329590591199f382d9c12248b3cb02fa7d73167fb87c5e2646a
https://www.zaproxy.org/docs/desktop/addons/active-scan-rules/
https://github.com/zaproxy/zap-extensions/
- 2024-09-24
- 3301667
+ 2024-10-23
+ 3302878
2.15.0
@@ -3009,19 +3001,19 @@ to find and add subdomains to the Sites Tree.</li>
Linux WebDrivers
Linux WebDrivers for Firefox and Chrome.
ZAP Dev Team
- 109
- webdriverlinux-release-109.zap
+ 110
+ webdriverlinux-release-110.zap
release
<h3>Changed</h3>
<ul>
-<li>Update ChromeDriver to 130.0.6723.58.</li>
+<li>Update ChromeDriver to 130.0.6723.69.</li>
</ul>
- https://github.com/zaproxy/zap-extensions/releases/download/webdriverlinux-v109/webdriverlinux-release-109.zap
- SHA-256:d2bb0739bbdab8a39b0238f94b55989c7d00cd643576340a685cb88022b025aa
+ https://github.com/zaproxy/zap-extensions/releases/download/webdriverlinux-v110/webdriverlinux-release-110.zap
+ SHA-256:3896bf7eb93e40add35391804d22557aab106cd297e09f28adb14cf6b5f8f31a
https://www.zaproxy.org/docs/desktop/addons/linux-webdrivers/
https://github.com/zaproxy/zap-extensions/
- 2024-10-16
- 15299755
+ 2024-10-23
+ 15036483
2.15.0
webdrivermacos
@@ -3029,19 +3021,19 @@ to find and add subdomains to the Sites Tree.</li>
MacOS WebDrivers
MacOS WebDrivers for Firefox and Chrome.
ZAP Dev Team
- 109
- webdrivermacos-release-109.zap
+ 110
+ webdrivermacos-release-110.zap
release
<h3>Changed</h3>
<ul>
-<li>Update ChromeDriver to 130.0.6723.58.</li>
+<li>Update ChromeDriver to 130.0.6723.69.</li>
</ul>
- https://github.com/zaproxy/zap-extensions/releases/download/webdrivermacos-v109/webdrivermacos-release-109.zap
- SHA-256:a3c8ab5e4711b36cd46845c5ebae7e894b0aa71b221c477ad9cba146e94e9f53
+ https://github.com/zaproxy/zap-extensions/releases/download/webdrivermacos-v110/webdrivermacos-release-110.zap
+ SHA-256:a75d779fdcc926e74feec551bcf870a056a53f5efe1440b63dcb25990a0b73d8
https://www.zaproxy.org/docs/desktop/addons/macos-webdrivers/
https://github.com/zaproxy/zap-extensions/
- 2024-10-16
- 23790580
+ 2024-10-23
+ 22915537
2.15.0
webdriverwindows
@@ -3049,19 +3041,19 @@ to find and add subdomains to the Sites Tree.</li>
Windows WebDrivers
Windows WebDrivers for Firefox and Chrome.
ZAP Dev Team
- 109
- webdriverwindows-release-109.zap
+ 110
+ webdriverwindows-release-110.zap
release
<h3>Changed</h3>
<ul>
-<li>Update ChromeDriver to 130.0.6723.58.</li>
+<li>Update ChromeDriver to 130.0.6723.69.</li>
</ul>
- https://github.com/zaproxy/zap-extensions/releases/download/webdriverwindows-v109/webdriverwindows-release-109.zap
- SHA-256:1e8092ea085d307c1b8a6ca97baf89239af1748648774a58e3ffb2fe2095b390
+ https://github.com/zaproxy/zap-extensions/releases/download/webdriverwindows-v110/webdriverwindows-release-110.zap
+ SHA-256:53392c17bd983275db92b620fbe8c745c2bd78905e30171c569c7a947e4f8d9d
https://www.zaproxy.org/docs/desktop/addons/windows-webdrivers/
https://github.com/zaproxy/zap-extensions/
- 2024-10-16
- 19915106
+ 2024-10-23
+ 20400032
2.15.0
websocket
diff --git a/ZapVersions-dev.xml b/ZapVersions-dev.xml
index 9ad52f6d..1d854941 100644
--- a/ZapVersions-dev.xml
+++ b/ZapVersions-dev.xml
@@ -124,31 +124,23 @@
Active scanner rules
The release status Active Scanner rules
ZAP Dev Team
- 68
- ascanrules-release-68.zap
+ 69
+ ascanrules-release-69.zap
release
<h3>Changed</h3>
<ul>
-<li>Maintenance changes.</li>
-<li>The following scan rules now include example alert functionality for documentation generation purposes (Issue 6119):
-<ul>
-<li>Spring Actuator</li>
-<li>XSLT Injection</li>
-<li>XPath Injection</li>
-</ul>
-</li>
+<li>The XML External Entity Attack scan rule now include example alert functionality for documentation generation purposes (Issue 6119).</li>
</ul>
<h3>Fixed</h3>
<ul>
-<li>Address false positives with Source Code Disclosure - CVE-2012-1823 scan rule, by not scanning binary responses and responses that already contain PHP source (Issue 8638).</li>
-<li>Cross Site Scripting Rule false positives at medium threshold by matching the expected context (Issue 8640).</li>
+<li>Added more checks for valid .htaccess files to reduce false positives (Issue 7632).</li>
</ul>
- https://github.com/zaproxy/zap-extensions/releases/download/ascanrules-v68/ascanrules-release-68.zap
- SHA-256:f66847dacea00eac5da8de34159f6e733acbc5a91a95fc249986b4fb7d79069a
+ https://github.com/zaproxy/zap-extensions/releases/download/ascanrules-v69/ascanrules-release-69.zap
+ SHA-256:0d5aae9ca89f7329590591199f382d9c12248b3cb02fa7d73167fb87c5e2646a
https://www.zaproxy.org/docs/desktop/addons/active-scan-rules/
https://github.com/zaproxy/zap-extensions/
- 2024-09-24
- 3301667
+ 2024-10-23
+ 3302878
2.15.0
@@ -3009,19 +3001,19 @@ to find and add subdomains to the Sites Tree.</li>
Linux WebDrivers
Linux WebDrivers for Firefox and Chrome.
ZAP Dev Team
- 109
- webdriverlinux-release-109.zap
+ 110
+ webdriverlinux-release-110.zap
release
<h3>Changed</h3>
<ul>
-<li>Update ChromeDriver to 130.0.6723.58.</li>
+<li>Update ChromeDriver to 130.0.6723.69.</li>
</ul>
- https://github.com/zaproxy/zap-extensions/releases/download/webdriverlinux-v109/webdriverlinux-release-109.zap
- SHA-256:d2bb0739bbdab8a39b0238f94b55989c7d00cd643576340a685cb88022b025aa
+ https://github.com/zaproxy/zap-extensions/releases/download/webdriverlinux-v110/webdriverlinux-release-110.zap
+ SHA-256:3896bf7eb93e40add35391804d22557aab106cd297e09f28adb14cf6b5f8f31a
https://www.zaproxy.org/docs/desktop/addons/linux-webdrivers/
https://github.com/zaproxy/zap-extensions/
- 2024-10-16
- 15299755
+ 2024-10-23
+ 15036483
2.15.0
webdrivermacos
@@ -3029,19 +3021,19 @@ to find and add subdomains to the Sites Tree.</li>
MacOS WebDrivers
MacOS WebDrivers for Firefox and Chrome.
ZAP Dev Team
- 109
- webdrivermacos-release-109.zap
+ 110
+ webdrivermacos-release-110.zap
release
<h3>Changed</h3>
<ul>
-<li>Update ChromeDriver to 130.0.6723.58.</li>
+<li>Update ChromeDriver to 130.0.6723.69.</li>
</ul>
- https://github.com/zaproxy/zap-extensions/releases/download/webdrivermacos-v109/webdrivermacos-release-109.zap
- SHA-256:a3c8ab5e4711b36cd46845c5ebae7e894b0aa71b221c477ad9cba146e94e9f53
+ https://github.com/zaproxy/zap-extensions/releases/download/webdrivermacos-v110/webdrivermacos-release-110.zap
+ SHA-256:a75d779fdcc926e74feec551bcf870a056a53f5efe1440b63dcb25990a0b73d8
https://www.zaproxy.org/docs/desktop/addons/macos-webdrivers/
https://github.com/zaproxy/zap-extensions/
- 2024-10-16
- 23790580
+ 2024-10-23
+ 22915537
2.15.0
webdriverwindows
@@ -3049,19 +3041,19 @@ to find and add subdomains to the Sites Tree.</li>
Windows WebDrivers
Windows WebDrivers for Firefox and Chrome.
ZAP Dev Team
- 109
- webdriverwindows-release-109.zap
+ 110
+ webdriverwindows-release-110.zap
release
<h3>Changed</h3>
<ul>
-<li>Update ChromeDriver to 130.0.6723.58.</li>
+<li>Update ChromeDriver to 130.0.6723.69.</li>
</ul>
- https://github.com/zaproxy/zap-extensions/releases/download/webdriverwindows-v109/webdriverwindows-release-109.zap
- SHA-256:1e8092ea085d307c1b8a6ca97baf89239af1748648774a58e3ffb2fe2095b390
+ https://github.com/zaproxy/zap-extensions/releases/download/webdriverwindows-v110/webdriverwindows-release-110.zap
+ SHA-256:53392c17bd983275db92b620fbe8c745c2bd78905e30171c569c7a947e4f8d9d
https://www.zaproxy.org/docs/desktop/addons/windows-webdrivers/
https://github.com/zaproxy/zap-extensions/
- 2024-10-16
- 19915106
+ 2024-10-23
+ 20400032
2.15.0
websocket