← Back to all sparks
G

Greenbone Vulnerability Manager

INFRA · APIS
Velocity5.0

Vulnerability scanning and management service behind the Greenbone security stack

Greenbone's gvmd starts on Active Directory credentials as report exports settle.

vulnerability-managementactive-directoryreportingagentsweb-securityopenvas
◆Current state
26.43.0 on 27 October adds an LDAP/AD credential type, a GMP command to verify it and feature flags for AD integration, plus encryption and anonymization options for agent bundles. The surrounding releases finish the report export work: cancellation in 26.40.0, then reuse of completed exports and repeatable downloads. 26.41.0 also adds executable report formats and validates keys and certificates when credentials are modified.
◆Where it's heading
Report export, the summer's main thread, has reached the fix-and-polish stage. New work is moving toward agents and directory integration: agent OS metadata, group scheduling delay and bundle options sit alongside the AD credential type. The steady memory-leak fixes suggest a code base being tightened as these features land.
◆Prediction
AD integration sits behind feature flags, so expect follow-up releases to complete it. The entries don't say when it will be enabled by default.

◆Recent moves

  1. 10d ago

    gvmd 26.43.0: LDAP/AD credentials and agent-bundle encryption

    The first visible step toward Active Directory integration, with a new credential type and verification command behind feature flags. Agent bundles gain encryption and anonymization options, and report exports become reusable.

    View source ↗
  2. 23d ago

    gvmd 26.42.0: Scan config in report XML, export fixes

    Reports now carry scan config information, and most of the release fixes report export edge cases. Follow-up work on the export feature rather than a new direction.

    View source ↗
  3. 25d ago

    gvmd 26.41.0: Executable report formats, credential validation

    Adds support for executable report format files and validates keys and certificates when credentials change. The credential refactor here appears to prepare the AD type that lands in 26.43.0.

    View source ↗
  4. 1mo ago

    gvmd 26.40.2: Web target and agent error-path fixes

    Memory and error-path fixes for web application targets and agent commands. Maintenance with no new capability.

    View source ↗
  5. 1mo ago

    gvmd 26.40.1: Sensor scanner port handling, leak fixes

    Separates scanner port normalization from validation and fixes small leaks. Maintenance with no new capability.

    View source ↗
  6. 1mo ago

    gvmd 26.40.0: Cancel report exports over GMP

    A cancel_report_export GMP command rounds out the export lifecycle started in the summer. Web App VT files now load only when the feature is on.

    View source ↗