Wednesday, July 6, 2011

OpenVAS DevCon #3 : Starting tomorrow

Already for the third time the OpenVAS team meets in real life to discuss and plan next features of the OpenVAS framework. OpenVAS devcon #3 takes place in Osnabruck in Germany from 7th to 9th of July, 2011. Greenbone Networks GmbH kindly hosts the developer conference at their offices:
Neuer Graben 17
49074 Osnabrück
Germany

Anyone being active as OpenVAS developer, tester, packager or user is welcome. Check out official devcon page. You can also still submit lightning talks, more info here.

Monday, January 17, 2011

OpenVAS Administrator 1.0.1 released

The OpenVAS developers are happy to announce the first maintenance release for the 1.0 series of the Administrator module for the Open Vulnerability Assessment System (OpenVAS).

It improves LDAP-based authentication and adds self-documentation feature for the OpenVAS Administration Protocol (OAP) 1.0.

Many thanks to everyone who has contributed to this release: Matthew Mundell, Michael Wiegand, Jan-Oliver Wagner and Felix Wolfsteller.

Main changes since 1.0.0:
* Fixed behaviour for ldap-based authentication for Admin role.
* Added protocol documentation for OAP (html and rnc format,
can be build with "make doc").
* Code hardening at compile time is now the default.
* Harmonized output of "--version" with other modules.

The source tarball for this release is available for download from the OpenVAS website at http://www.openvas.org/. Binary packages for major GNU/Linux distributions by third parties are expected in the following weeks.

Sunday, October 31, 2010

openvas-libraries 3.1.4 released

The OpenVAS developers are happy to announce the release of openvas-libraries 3.1.4. This release includes the results of further code analysis and cleanup, which resulted in the removal of more than 3,500 lines of unused code. It also includes a fix for a memory management issue and for superfluous log messages.

Many thanks to everyone who has contributed to this release: Matthew Mundell, Jan-Oliver Wagner and Michael Wiegand.

Main changes compared to 3.1.3:
* Further code cleanup has lead to the removal of more than 3,500 lines of
unused code.
* A bug which tried to free memory that was not allocated before under some
circumstances has been fixed.
* Superfluous log messages regarding file uploads have been removed.

The source tarball for this release is available for download from the OpenVAS website at http://www.openvas.org/. Binary packages for major GNU/Linux distributions by third parties are expected in the following weeks.

openvas-cli 1.0.1 released

The OpenVAS developers are happy to announce the release of openvas-cli 1.0.1. This release improves the handling of special characters in OMP commands.

Many thanks to everyone who has contributed to this release: Matthew Mundell, Michael Wiegand and Felix Wolfsteller.

Main changes compared to 1.0.0:
* Special characters in OMP commands (like umlauts) are now handled correctly.
* The documentation has been improved; source code documentation can now be
generated using the "make doc" and "make doc-full" commands.

The source tarball for this release is available for download from the OpenVAS website at http://www.openvas.org/. Binary packages for major GNU/Linux distributions by third parties are expected in the following weeks.

openvas-manager 1.0.3 released

The OpenVAS developers are happy to announce the release of openvas-manager 1.0.3. This release is the third maintenance release for the 1.0 series of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS).

It fixes two bugs which caused to manager to fail to reply properly on certain request and improves the PDF report generation.

Many thanks to everyone who has contributed to this release: Matthew Mundell and Michael Wiegand.

Main changes since 1.0.2:
* Two bugs which caused the manager to fail to give adequate replies on
certain
report and scan config requests have been fixed.
* A bug which caused PDF reports to be unavailable for reports which contained
certain unicode character has been fixed.

The source tarball for this release is available for download from the OpenVAS website at http://www.openvas.org/. Binary packages for major GNU/Linux distributions by third parties are expected in the following weeks.

gsa 1.0.3 released

The OpenVAS developers are happy to announce the release of gsa 1.0.3. This is the third maintenance release for the 1.0 series of GSA (Greenbone Security Assistant), an OMP web client for the Open Vulnerability Assessment System (OpenVAS).

It addresses a number of issues in the user interface and improves stability during XSL transformations. GSA now builds with the latest libmicrohttpd release (0.9.2) as well.

Many thanks to everyone who has contributed to this release: Matthew Mundell, Jan-Oliver Wagner and Michael Wiegand.

Main changes since 1.0.2:
* When creating new credentials, password authentication is now the default.
* A bug which caused the "Pause" button not to work under certain
circumstances has been fixed.
* The handling of errors during the XSL transformation has been improved.
* The handling of long lines in the XSL transformation has been improved.
* The range of characters allowed for LSC passwords has been extended.
* An issue which prevented gsa from building with libmicrohttpd 0.9.2 has been
fixed.

The source tarball for this release is available for download from the OpenVAS website at http://www.openvas.org/. Binary packages for major GNU/Linux distributions by third parties are expected in the following weeks.

Friday, September 10, 2010

openvas-libraries 3.1.3 released

The OpenVAS developers are happy to announce the release of openvas-libraries 3.1.3.

It fixes primarily a significant memory leak that will improve high load performance by about 40%.

This release is recommended for anyone using OpenVAS for large scans to improve performance.

Many thanks to everyone who has contributed to this release: Chandrashekhar B, Matthew Mundell, Thomas Reinke(the memory leak fixes), Michael Wiegand.

Main changes compared to 3.1.1:
* Significant memory leaks are closed.
* Bug fix for handling shared file descriptors that now prevents unnecessary use of new file descriptors under certain circumstances.
* Little fix in the nasl wmi api.

The source tarball for this release is available for download from the OpenVAS website at http://www.openvas.org/. Binary packages for major GNU/Linux distributions by third parties are expected to follow