Web Security Dojo / Bugs / #34 ZAP does not update properly with apt-get upgrade

gi0cann - 2019-11-12

ZAP is not installed using apt-get. Kali has it installed using apt-get because they run their own repos.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

gi0cann - 2019-11-12

status: open --> closed-wont-fix
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

David Rhoades - 2019-11-12

Why can't we install ZAP from official repos?
https://software.opensuse.org/download.html?project=home%3Acabelo&package=owasp-zap

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
- gi0cann - 2019-11-12
  
  Yes we can do this
  
  If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Description has changed:

Diff:

--- old
+++ new
@@ -1,5 +1,4 @@
-After `sudo apt-get update &amp;&amp; sudo apt-get upgrade` ZAP still shows 2.8.0, and Quick Start feature fails to work after running &#34;Update&#34; feature within ZAP (which updates various components).
-So the &#34;latest&#34; ZAP in Dojo cannot use Quick Start (to launch a pre-configured browser) but the latest ZAP in Kala can use Quick Start.  The ZAP in Kali shows v2.8.1 but Dojo only shows v2.8.0.
-It is as if the base ZAP package is not getting updated with `apt-get`.
+Quick Start feature fails to work after running &#34;Update&#34; feature within ZAP (which updates various components).
+The &#34;latest&#34; ZAP in Dojo cannot use Quick Start (to launch a pre-configured browser) but the latest ZAP in Kala can use Quick Start.  The ZAP in Kali shows v2.8.1 but Dojo only shows v2.8.0.

-Please find a way to install core tools, such as ZAP, in a way that allows them to fully update.
+Please find a fix - updating within ZAP should not kill Quick Start.

status: closed-wont-fix --> open

David Rhoades - 2019-11-12

I've re-opened this ticket.
This is a critical bug. User gets Dojo and ZAP is fine out of the box, then ZAP Update and suddenly Quick Start fails. That is not acceptable behavior. We need to find a solution. I really want Quick Start in ZAP to work.

Maybe if we just install ZAP v2.8.1 it will be solved.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

gi0cann - 2020-01-09

status: open --> closed-fixed
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

ZAP does not update properly with apt-get upgrade

Virtual training environment to learn web app ethical hacking.

Group

Searches

Help

#34 ZAP does not update properly with apt-get upgrade

Discussion