Nessus patches released

While building Nessus on my Red Hat 8.0 system, I found that the "configure" scripts were outright broken. It turns out that the behavior of bash has changed to more accurately reflect POSIX behavior, and this breaks the configure script such that it won't find GTK.

The behavior in question is expanion of the $IFS shell variable, which is the inter-field separator, and it's best illustrated by example:

PART1=a:b
PART2=Y:Z

IFS=:

for part in $PART1:$PART2
do
        echo "part = $part"
done

On older systems, this shows four lines for a b Y Z, but on newer POSIX shells that only perform IFS expansion during variable interpolation, we get three lines containing a b:Y Z (because the colon separating the two parts is NOT considered for IFS splitting). The latter behavior is the correct one, but it broke the code that searched along a list of directory components.

These patches fix everything as best as I can tell.

nessus-core-1.2.7-config-patch.txt

nessus-core-1.3.4-config-patch.txt

nessus-core-2.0.0-config-patch.txt

Sorry, Jeremy, the patch comments are shorter than the patches themselves

Edit - five minutes after posting this blog entry and sending off my patches, I got the "Nessus 2.0 is out!" announcement over Bugtraq. So much for my timing. But the same patches were required, so I've posted them too. Posted by Steve at February 24, 2003 12:16 PM | TrackBack