newsTiger UNIX security tool - News: New stable release: Tiger 3.2

 
 
Latest News
Tiger 3.2.3 released: bug fix release posted by jfs, Wed 10 Sep 2008 07:44:18 AM UTC
Offline audit scripts now available posted by jfs, Mon 27 Aug 2007 07:31:52 PM UTC
New 3.2.2 release posted by jfs, Mon 27 Aug 2007 07:22:59 PM UTC
Download of releases (temporary) posted by jfs, Tue 27 Apr 2004 06:57:49 PM UTC
Important note related to Savannah compromise posted by jfs, Thu 08 Jan 2004 10:51:45 AM UTC

New stable release: Tiger 3.2

Item posted by Javier Fernandez-Sanguino Peña <jfs> on Fri 09 May 2003 09:20:05 PM UTC.

A new release of Tiger, version 3.2, has recently been published. This release is considered 'stable' (substituting the 2.2.4 version). Tiger 3.2 fixes some security vulnerabilities (a buffer overflow in realpath.c detected by and unsafe use of 'eval' in some of the checks and utils), provides seven more checks and also fixes bugs present in previous releases. Some other new features are:

- an 'ignore' mechanism similar to logcheck's that permits the generation of flexible OS baselines based on regular expressions. (Suggested baselines will be provided in the future)

- a new installation and configuration mechanism to ease the process of installing Tiger

- more documentation, including information on the expected roadmap (in the TODO file) and the information sources used to improve Tiger.

For more information on the fixes and new checks please read the 'CHANGES' file.

Users of previous versions of Tiger are encouraged to upgrade to this new release.

 

Back to the top

Powered by Savane 3.13-02a9.
Corresponding source code