Author: mwiegand Date: 2008-10-15 14:19:26 +0200 (Wed, 15 Oct 2008) New Revision: 1548
Modified: trunk/doc/website/index.htm4 Log: Updated index page with 2.0-beta press release. Modified: trunk/doc/website/index.htm4 =================================================================== --- trunk/doc/website/index.htm4 2008-10-15 10:39:56 UTC (rev 1547) +++ trunk/doc/website/index.htm4 2008-10-15 12:19:26 UTC (rev 1548) @@ -59,59 +59,74 @@ <h2>Project News</h2> -<h3>August 22nd, 2008 - OpenVAS Announces Programming Contest</h3> +<h3>October 15th, 2008 - OpenVAS 2.0 Begins Public Beta Phase</h3> <p> -The OpenVAS Team calls for submission of patches, scripts, converters -or anything else that significantly improves the OpenVAS framework -and extends Open Source Network Vulnerability Testing. Participants have the -chance to win up to 500 Euro, the deadline for submissions is October 15th, -2008. +In late September 2008, the OpenVAS developer team released the 2.0-beta1 +version of OpenVAS, the Open Vulnerability Assessment System for network +security scanning.<br> +The intended audience for this beta release are experienced users interested +in upcoming features as well as developers of vulnerability checks. </p> -<p><a href="openvas-contest.html">Contest Details...</a></p> - -<h3>August 13th, 2008 - OpenVAS Toolchain for Network Vulnerability Tests -Established and Stable</h3> - <p> -<b>OpenVAS Toolchain for Network Vulnerability Tests Established and Stable, -Now Focussing on Tests Development and Documentation</b> +The new version introduces first steps towards support for OVAL, the <a +href="http://oval.mitre.org";>Open Vulnerability and Assessment Language</a>. +OVAL is an international, information security, community standard to promote +open, standardized and publicly available security content.<br> +The OpenVAS server can now execute OVAL files just like its own Network +Vulnerability Tests (NVTs) by using the OVAL definitions interpreter "ovaldi". +While the plain ovaldi tool can only check local systems where it is +installed, the combination with OpenVAS enables it to test any target system +for which OpenVAS has collected information. The beta1 release offers sample +support for Red Hat Enterprise Linux security announcements which are +provided as OVAL definitions. </p> <p> -In July 2008 the OpenVAS developer team finished the update cycle of the 1.0 -release including all four server modules and the client. +Major internal changes include the cleaned and extended protocol for +client-server communication (OTP) and the transition to the new OID-based +scheme for unique IDs of vulnerability tests. The switch from the NTP +inherited from Nessus to OTP was necessary due to security and design +considerations. </p> <p> -The most work during this update cycle went into cleanups and support for RPM -and Debian packagers. -The number of necessary bug-fixes remained pleasingly low. +The OpenVAS (NVTs) remain compatible with both the 1.0 and 2.0 series of +OpenVAS. This also means that the free OpenVAS NVT feed service (which has +recently extended to deliver the full range of NVTs, grown to over 5000 +available NVTs) is also compatible for both release series. The switch from NTP +to OTP does not affect NVTs already in existance. This means NVTs written in +NASL continue to be fully supported by OpenVAS. There is no need to make changes +to your old NASL scripts -- unless you want to use the new features. </p> <p> -OpenVAS installation packages are readily available for various platforms: -OpenSUSE, Fedora, Mandrake, FreeBSD and Gentoo. Packages for Debian and Ubuntu -are in the works. Additionally, OpenVAS-Client is available for Microsoft -Windows operating systems. +The first release candidate of the new OpenVAS Compendium has been made +available in PDF and HTML format for final reviews and as a base for translation +into other languages (a translation to German is already in progress) as well. </p> <p> -The OpenVAS developer team has started creating a comprehensive documentation -for the whole toolchain; the next major challenge for the project is now to -extend the range of the vulnerability tests for present and upcoming security -issues, especially for those reported as CVEs, BIDs etc. +The OpenVAS team is looking forward to feedback for the beta1 release. If you +want to participate in the beta phase by sharing your experience with beta1 or +if you have any questions, please feel free to use the public mailing lists or +visit us in our <a href="http://www.openvas.org/online-chat.html";>IRC online +chat</a>. </p> +<h3>August 22nd, 2008 - OpenVAS Announces Programming Contest</h3> + <p> -It is a fundamental goal of the OpenVAS project team to accompany the Free -Software OpenVAS network security scanner licensed under GNU GPL with a feed of -vulnerability tests being Open Source and readily available for everyone as -well. -Additional contributors are welcome to join the OpenVAS developer team. +The OpenVAS Team calls for submission of patches, scripts, converters +or anything else that significantly improves the OpenVAS framework +and extends Open Source Network Vulnerability Testing. Participants have the +chance to win up to 500 Euro, the deadline for submissions is October 15th, +2008. </p> +<p><a href="openvas-contest.html">Contest Details...</a></p> + <h2>Contact</h2> <p> _______________________________________________ Openvas-commits mailing list [email protected] http://lists.wald.intevation.org/mailman/listinfo/openvas-commits
