RE: Nessus to be removed from Debian, please switch to OpenVAS - possibly in Non-Free repositories?

2009-08-04 Thread Joseph Abbotts
esday, August 04, 2009 8:51 AM To: Joseph Abbotts Cc: debian-security@lists.debian.org Subject: Re: Nessus to be removed from Debian, please switch to OpenVAS - possibly in Non-Free repositories? 2009/8/4 Joseph Abbotts : > I'm all for having more tools to help settle my healthy paranoi

Re: Nessus to be removed from Debian, please switch to OpenVAS - possibly in Non-Free repositories?

2009-08-04 Thread Gerardo Castillo Alvarado
ak PR noise to keep it great. > > > -Original Message- > From: Javier Fernandez-Sanguino [mailto:jav...@gmail.com] On Behalf Of Javier > Fernández-Sanguino Peña > Sent: Sunday, August 02, 2009 2:03 PM > To: Debian Security > Cc: openvas-distro-...@wald.intevation.org &

Re: Nessus to be removed from Debian, please switch to OpenVAS - possibly in Non-Free repositories?

2009-08-04 Thread Javier Fernandez-Sanguino
2009/8/4 Joseph Abbotts : > I'm all for having more tools to help settle my healthy paranoia but I'm not > seeing the server package: Because, as I said in my email, this is only available in Unstable. Openvas-server did not get released with Debian lenny (stable) and, in any case, Nessus will no

RE: Nessus to be removed from Debian, please switch to OpenVAS - possibly in Non-Free repositories?

2009-08-04 Thread Joseph Abbotts
Javier Fernandez-Sanguino [mailto:jav...@gmail.com] On Behalf Of Javier Fernández-Sanguino Peña Sent: Sunday, August 02, 2009 2:03 PM To: Debian Security Cc: openvas-distro-...@wald.intevation.org Subject: Nessus to be removed from Debian, please switch to OpenVAS Dear All, I've rece

Re: [Openvas-distro-deb] Nessus to be removed from Debian, please switch to OpenVAS

2009-08-03 Thread Stephen Frost
* Javier Fernandez-Sanguino (j...@debian.org) wrote: > Actually, I rather not have Nessus shipped with any other Debian > stable release as it is in the best interest of Debian and its users > to only provide software that is actively being maintained upstream. If someone picked it up to maintain

Re: [Openvas-distro-deb] Nessus to be removed from Debian, please switch to OpenVAS

2009-08-03 Thread Javier Fernandez-Sanguino
2009/8/3 Simon Ward : > I wasn’t meaning to put pressure on a single person.  Sure, if there is > enough demand, someone else, maybe me (although unlikely) could pick up > package maintenance.  I was merely expressing my opinion that there is > still a need for Nessus 2 for a little while longer.

Re: [Openvas-distro-deb] Nessus to be removed from Debian, please switch to OpenVAS

2009-08-03 Thread Javier Fernandez-Sanguino
2009/8/3 Stephen Frost : > * Tim Brown (t...@nth-dimension.org.uk) wrote: >> I don't see what there is to gain by asking Javier to split his efforts in >> continuing to maintain Nessus when he has expressed a preference to allow >> OpenVAS to take its place and has made significant contributions to

Re: [Openvas-distro-deb] Nessus to be removed from Debian, please switch to OpenVAS

2009-08-02 Thread Simon Ward
On Mon, Aug 03, 2009 at 01:38:03AM +0100, Tim Brown wrote: > 1) To the best of our knowledge OpenVAS is backwards compatible with Nessus > 2, > 3 and 4 feeds although legally use of the commercial feeds on anything other > than Tenable's product is a grey area Indeed, and because of that grey a

Re: Re: Nessus to be removed from Debian, please switch to OpenVAS

2009-08-02 Thread Grant Kwok
I am away from the office until Aug 4, 2009. If this is an emergency, please contact Philip Young at pjyo...@dowco.com. Thanks. -- To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Re: Nessus to be removed from Debian, please switch to OpenVAS

2009-08-02 Thread Felipe Augusto van de Wiel (faw)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 02-08-2009 17:14, Cyril Brulebois wrote: > Javier Fernández-Sanguino Peña (02/08/2009): >> I encourage people that are looking for an alternative to Nessus to switch to >> OpenVAS (Open Vulnerability Assessment Scanner) which is a Nessus fork (ba

Re: [Openvas-distro-deb] Nessus to be removed from Debian, please switch to OpenVAS

2009-08-02 Thread Stephen Frost
* Tim Brown (t...@nth-dimension.org.uk) wrote: > I don't see what there is to gain by asking Javier to split his efforts in > continuing to maintain Nessus when he has expressed a preference to allow > OpenVAS to take its place and has made significant contributions to make that > possible. Whi

Re: [Openvas-distro-deb] Nessus to be removed from Debian, please switch to OpenVAS

2009-08-02 Thread Tim Brown
(Speaking as a Debian package maintainer, OpenVAS project initiator and professional penetration tester.) On Monday 03 August 2009 00:18:57 Simon Ward wrote: > The last time I looked at OpenVAS, admittedly several months ago, it had > nowhere near enough coverage in tests for remote vulnerabilit

Re: Nessus to be removed from Debian, please switch to OpenVAS

2009-08-02 Thread Simon Ward
On Sun, Aug 02, 2009 at 08:03:06PM +0200, Javier Fernández-Sanguino Peña wrote: > I've recently requested Debian Ftp maintainers [1] to remove from the archive > Nessus and all its related packages (nessus-core, nessus-libraries, libnasl > and nessus-plugins). The main reason for this is that upstr

Re: Nessus to be removed from Debian, please switch to OpenVAS

2009-08-02 Thread Cyril Brulebois
Javier Fernández-Sanguino Peña (02/08/2009): > I encourage people that are looking for an alternative to Nessus to switch to > OpenVAS (Open Vulnerability Assessment Scanner) which is a Nessus fork (based > on the 2.2.x branch) that is actively being maintained and is now available > in Debian. I

Nessus to be removed from Debian, please switch to OpenVAS

2009-08-02 Thread Javier Fernández-Sanguino Peña
Dear All, I've recently requested Debian Ftp maintainers [1] to remove from the archive Nessus and all its related packages (nessus-core, nessus-libraries, libnasl and nessus-plugins). The main reason for this is that upstream is more focused in maintaining it's non-free version of Nessus (labele