I am never sure where the correct place to share this info is so hopefully I have it right this time.
We found an error in one of the Vulnerability scan scripts.
I found the script in
In the section that tests winVista:3, win2008:3, it is looking for file version 6.0.6002.23000-7.0.6002.23639
I think it should be 6.0.6002.23000-6.0.6002.23639
I changed it locally, but we have not tried to re-scan yet. I don't know if I need to update the file gb_ms15-031.nasl.asc also or if it will be overwritten by later updates. Is there a place to go to report these upstream? Do I need to report it to the OpenVAS instead?