Bug#1064376: 1064376-d...@bugs.debian.org

2024-03-03 Thread Marcos Fouces
Hello i changed my mind on this subject. ganglia-web was updated to run on PHP8 [1] so i will (try to) continue to use and maintain ganglia, ganglia-modules-linux and ganglia-web packages. Greetings, Marcos [1] https://github.com/ganglia/ganglia-web/releases/tag/3.7.6

Bug#1064376: RM: ganglia -- ROM; Unmaintained upstream, better alternatives exist

2024-02-20 Thread Marcos Fouces
Package: ftp.debian.org Severity: normal X-Debbugs-Cc: mar...@debian.org User: ftp.debian@packages.debian.org Usertags: remove

Bug#1029317: arp-scan: depends on libtext-csv-perl, only recommends libwww-perl

2023-01-21 Thread Marcos Fouces
Hello Sven, Fixed in: https://salsa.debian.org/pkg-security-team/arp-scan/-/commit/ceee4464afacb8dd522e47bc162ee3325429c198 Greetings, Marcos El sáb, 21-01-2023 a las 11:00 +0100, Sven Joachim escribió: > Package: arp-scan > Version: 1.10.0-1 > Severity: normal > > The latest upload added a

Bug#1029318: arp-scan: /usr/share/doc/arp-scan/NEWS is a dangling symlink

2023-01-21 Thread Marcos Fouces
Hello Sven, Fixed in [1]. Greetings, Marcos [1] https://salsa.debian.org/pkg-security-team/arp-scan/-/commit/bffc303795679fdf86a56eb6a22cb5f0a5662122 El sáb, 21-01-2023 a las 11:12 +0100, Sven Joachim escribió: > Package: arp-scan > Version: 1.10.0-1 > Severity: normal > > , > > $ file

Bug#1029319: arp-scan: should be built with libcap support

2023-01-21 Thread Marcos Fouces
Hi Sven, Thanks for your report! arp-scan is an admin command. It is installed (by default) in /usr/sbin/, this directory is not in the $PATH of a normal user. Personally, I don't think it's a good idea for a non-privileged user to execute administrator commands, although it's a matter of

Bug#1022844: man subsection directories are needed for mandoc(1)

2023-01-06 Thread Marcos Fouces
Hello Alejandro, Debian policy is clear on this point: manual pages should be assigned to man[1..9]/ dirs [1]. Lintian also issues error tags when this behavior is not observed [2]. The desired section expressed through the file extension and the .TH field is not modified. All .so links are

Bug#1023217: manpages: Wrongly sorted man pages

2023-01-06 Thread Marcos Fouces
Hello Helge, The presence of these *.2 and *.3 manpages in the manpages package instead of manpages-dev is to avoid sending broken links in the manpages-dev package. The source package even provides a script [1] to check for this problem and make corrections. There is also an example in the

Bug#1019014: Control: 1019014 retitle ITA: termit -- Simple terminal emulator based on vte library, embedded lua

2022-09-09 Thread Marcos Fouces
Control: 1019014 retitle ITA: termit -- Simple terminal emulator based on vte library, embedded lua

Bug#893879: Seems to be fixed

2021-12-28 Thread Marcos Fouces
Hello i cannot reproduce this bug in 3.7.5+debian-4 release.  Bullseye ships 1.7 release of rrdtool so the gap you mention between 1.4 and 1.5 releases of rrdtool is an old stuff, IMHO. If no further information is provided i'll close this bug. Greetings, Marcos

Bug#1002558: chkrootkit: false positive: knockd

2021-12-28 Thread Marcos Fouces
Hello, i believe that it is not appropriate to hide processes that, we suppose, are legitimate [1]. It is somewhat easy to parse any regular expression, and customize files/directories names of the rootkit that match it, thus avoiding its detection. Please, use etc/chkrootkit/chkrootkit.ignore

Bug#982998: Forwarded to upstream author

2021-08-26 Thread Marcos Fouces
Hello, Sorry for the delay. I forwarded this bug to upstream author. Greetings, Marcos.

Bug#991444: ganglia-monitor: gmond and gmetric look for /etc/gmond.conf instead of /etc/ganglia/gmond.conf

2021-07-24 Thread Marcos Fouces
Hi Jochen, many thanks for this bug report. I uploaded a fixed release in the git repo [1]. Due to the deep freeze policy, i cannot upload it to unstable until Bullseye comes to life. Greetings, Marcos [1] https://salsa.debian.org/debian/ganglia

Bug#991073: unblock: ganglia-modules-linux/1.3.4-5

2021-07-13 Thread Marcos Fouces
ix multiarch support in *.conf files (Closes: #990808). + + -- Marcos Fouces Mon, 12 Jul 2021 00:22:06 +0200 + ganglia-modules-linux (1.3.6-4) unstable; urgency=medium * Remove version requirement for libganglia1-dev as 3.3.5 is older than diff -Nru ganglia-modules-linux-1.3.6/debian/rules ganglia

Bug#973554: /etc/cron.monthly/acct does not handle missing wtmp.1

2021-01-14 Thread Marcos Fouces
your script look like?  I ran the one installed in > /etc/cron.monthly (with 10.7 buster).  Your output looks like there > are > some differences besides not failing. > > > On 1/13/21 2:16 PM, Marcos Fouces wrote: > > Hello Ellen > > > > I renamed tempor

Bug#973554: /etc/cron.monthly/acct does not handle missing wtmp.1

2021-01-13 Thread Marcos Fouces
Hello Ellen I renamed temporarily wtmp.1 and i run the script with "set-x" to see what is going on: # ./$HOME/Debian/Packages/acct/debian/acct.cron.monthly + test -x /usr/sbin/accton + echo + echo # LOGIN

Bug#975403: RM: knocker -- ROM; unmaintained, better alternatives

2020-11-21 Thread Marcos Fouces
Package: ftp.debian.org Severity: normal Please, remove knocker package. It is unmaintained upstream and it is affected by #957411. Also there are other better network scanners (nmap, hping3...). Also it has a low popcon (72 at the time of writing). Thanks in advance. Marcos.

Bug#964399: Should ganglia be removed?

2020-09-13 Thread Marcos Fouces
Hi Moritz! Yes, i uploaded it to salsa.d.o and i am waiting for Frontdesk aproval to become DD (that should happens in a few days) in order to upload it myself instead of asking for sponsorship. Its new home is here: https://salsa.debian.org/debian/ganglia. Thanks, Marcos El vie, 11-09-2020

Bug#967885: Forwarded to upstream authors

2020-08-11 Thread Marcos Fouces
tags 967885 forwarded thanks

Bug#967205: No python package

2020-08-08 Thread Marcos Fouces
Hi! I think that rfdump package is not related with Python. I think there is a mistake. Greetings, Marcos

Bug#964399: Should ganglia be removed?

2020-07-07 Thread Marcos Fouces
Hello Moritz I did some work time ago on ganglia [1] but i never get this work published due to unactive/unresponsive uploaders. I also done some work on ganglia-web and ganglia-linux-modules packages (also unpublished). I believe that it is still a good piece of software that deserve its place

Bug#919911: Please add enpXsY wlanX wlpXsY to to /etc/cron.daily/chkrootkit Bug#919911

2020-04-24 Thread Marcos Fouces
Hello Witold, i believe that patch implemented for bug #580491, also fixes this issue. Please,check https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=580491. I plan to upload a new chkrootkit release soon. Greetings, Marcos.

Bug#745433: chkrootkit: Allow to choose the start time. Bug#745433

2020-04-24 Thread Marcos Fouces
Hello Frederic, Thanks for your suggestion. I assume that you means using a crontab entry to define the exact start time for this script. I think that this is good for machines that runs continously but not for the rest. Triggering it through a crontab entry, the task will not be executed if

Bug#647962: Cannot reproduce

2020-04-23 Thread Marcos Fouces
tags 647962 unreproducible thank you Hello Christoph I cannot reproduce this bug. Please, could you give me the exact options an arguments you used? Greetings, Marcos.

Bug#633926: Seems fixed

2020-04-23 Thread Marcos Fouces
Hello I am testing it on 2.4b1+debian-29 and *-26 too and it does not fail. Please, tell me if this is your case so i could close this bug or do some testing. Greetings, Marcos.

Bug#953234: Fix pending in Git repo

2020-04-16 Thread Marcos Fouces
El jue, 16-04-2020 a las 13:50 +0200, Marcos Fouces escribió: > tags 953234 pending > thanks > > Hello > > An updated release is on salsa.d.o repo: > > https://salsa.debian.org/pkg-security-team/recon-ng > > Just needs a sponsor review. > > Greetings, > Marcos. > >

Bug#617918: False positives in chkrootkit

2020-04-14 Thread Marcos Fouces
Hello Samuel False positives always fall on the safe vs. sorry argument. Please, check https://salsa.debian.org/pkg-security-team/chkrootkit/-/blob/debian/master/debian/README.FALSE-POSITIVES You can always use the "-e" option or an exclude file (defined in /etc/chkrootkit.conf) to avoid this

Bug#754711: Bug seems solved.

2020-04-13 Thread Marcos Fouces
Hello I cannot test this o-o-stable kernel, but searching this particular chunk i found that this test is no more performed this way but: KALLSYMS="/proc/kallsyms" [ -f /proc/ksysm ] && KALLSYMS="/proc/$KALLSYMS" So kernel release is no more relevant. I believe that this bug is fixed. Could

Bug#750629: wrong mail options in /etc/chkrootkit.conf

2020-04-13 Thread Marcos Fouces
Hello Enrico In fact, you have to escape quotas in the argments you supply to the RUN_DAILY_OPTS variable. It should be posible to insert needed escape characters in debconf (i suppose that you configured it that way) but i suggest that let cron daemon send the mail for you. IMHO, this is not a

Bug#586897: Debian Bugs information: detailed logs for Bug#586897

2020-04-13 Thread Marcos Fouces
Hello Jean Baptiste Thanks for your bug report. I will improve the info in the manpage and in the "-h" output but the help display if user set an erroneous value on any option has to be dealt upstream. I will close the bug as soon as i upload a new revision with this improvements and i forward

Bug#934486: Debian Bugs information: detailed logs for Bug#934486

2020-04-11 Thread Marcos Fouces
Hello Peter Thanks for pointing this out! As you stated, this was a simple oversight and i upload a fix in no time. Greetings, Marcos

Bug#956153: ITP: fierce -- Domain DNS scanner

2020-04-07 Thread Marcos Fouces
Package: wnpp Severity: wishlist Owner: Marcos Fouces * Package name: fierce Version : 1.4.0 Upstream Author : Mschwager <https://github.com/mschwager/> * URL : https://github.com/mschwager/fierce * License : GPL Programming Lang: Python Descr

Bug#924362: Failure upgrading chkrootkit

2020-04-01 Thread Marcos Fouces
Hello If no more information is provided, i will close this bug in a few days. Greetings, Marcos. El mar, 24-03-2020 a las 23:21 +0100, Marcos Fouces escribió: > Hello Adam > > I am trying to reproduce the bug with current version of chkrootkit > but > i obtain a different resu

Bug#348991: Confirm for iotop behavior

2020-04-01 Thread Marcos Fouces
Hello If no more informartion is provided, i will close this bug in a few days. Greetings, Marcos

Bug#936188: bbqsql: Python2 removal in sid/bullseye

2020-03-27 Thread Marcos Fouces
Hello Moritz I believe that bbqsql could be removed. It has a very low popcon and i didn't see any repo on Github taking over from Neophasis. Greetings, Marcos. El jue, 26-03-2020 a las 23:05 +0100, Moritz Mühlenhoff escribió: > On Fri, Aug 30, 2019 at 07:11:19AM +, Matthias Klose wrote:

Bug#937521: pyrit: Python2 removal in sid/bullseye

2020-03-27 Thread Marcos Fouces
a Python3 pyrit in a timely manner. Greetings, Marcos. El jue, 26-03-2020 a las 23:55 -0400, Sandro Tosi escribió: > Hey Marcos, > > On Thu, Mar 19, 2020 at 7:33 AM Marcos Fouces < > marcos.fou...@gmail.com> wrote: > > Hello Sandro > > > > Upstream seem

Bug#576470: chkrootkit: false positives for libsmlnj-smlnj

2020-03-25 Thread Marcos Fouces
Hello Norman I checked this package (ibsmlnj-smlnj) in Debian testings (upcoming Bullseye) and still contains the files you mention and that triggers this false positive. I believe that chkrootkit's nature is very trigger-happy and i tend to consider this behaviour more like a feature rater than

Bug#566687: chkrootkit False Positives

2020-03-25 Thread Marcos Fouces
Hello chkrootkit is certainly very "trigger-happy" but IMHO this is a feature not a bug. Quoting the README.FALSE-POSITIVES file included with the package: "bindshell listens on a lot of ports. these ports are also used by other legitimate programs. chkrootkit's detection algorithm cannot

Bug#924362: Failure upgrading chkrootkit

2020-03-24 Thread Marcos Fouces
Hello Adam I am trying to reproduce the bug with current version of chkrootkit but i obtain a different result: # sudo /usr/share/debconf/frontend /var/lib/dpkg/info/chkrootkit.postinst configure 0.53-1; echo $? # 0 I used a (still unreleased) 0.53-2 version and it seems to be correctly

Bug#937521: Attempt to migrate pyrit to Python3

2020-03-24 Thread Marcos Fouces
Hi, I tried to use a patch from kimocoder to migrate Pyrit to Python3 but the result was unsucesfull as the package FTBFS. I created a separate branch (Python3Migration) in order to work on that [0]. Upstream stated that is rewriting pyrit from scratch but he still didn't react to this pull

Bug#771266: chkrootkit: hangs on checking lkm and causes system load to increase by ~1.0

2020-03-24 Thread Marcos Fouces
Hi Ximin! I will close this bug if i don't receive more info in the next days. Greetings, Marcos

Bug#937521: pyrit: Python2 removal in sid/bullseye

2020-03-19 Thread Marcos Fouces
Hello Sandro Upstream seems a bit stalled but there is a patch (by Kimocoder from aircrack project) to migrate it. You can see it here: https://github.com/JPaulMora/Pyrit/pull/593 As i have some time these days,i will try to test it a see if it is a valid approach. Greetings, Marcos El

Bug#348991: Confirm for iotop behavior

2020-03-18 Thread Marcos Fouces
Hello Gerrit Could you confirm the behavior of iotop? These are my results: $ sudo iostat ALL Linux 5.4.0-4-amd64 (debian)18/03/20_x86_64_(4 CPU) avg-cpu: %user %nice %system %iowait %steal %idle 23,390,098,692,080,00 65,74 Device

Bug#922533: Review of proposed move of /var/log/account to /var/account

2020-03-18 Thread Marcos Fouces
: > Thank you for the feedback. I'm quite happy for the change not to > happen. It's certainly less work that way. > > From: Marcos Fouces > Sent: Tuesday, March 17, 2020 18:48 > To: 922...@bugs.debian.org > Cc: Sergio Gelato > Subject: Re:

Bug#922533: Review of proposed move of /var/log/account to /var/account

2020-03-17 Thread Marcos Fouces
Hello Sergio I am considering the fact that this change could do more harm than good. The path for pacct* files was changed a long time ago and every Debian user of acct is aware of it. The submiter himself has finally some doubts about it, so i believe that it is pointless. I can't see any

Bug#949782: ITP: python-ezcolor -- Python colorizing strings library (Python 3)

2020-01-24 Thread Marcos Fouces
Package: wnpp Severity: wishlist Owner: Marcos Fouces * Package name: python-ezcolor Version : 0.7 Upstream Author : Fardin Allahverdinazhand <0x0ptim...@gmail.com> * URL : https://github.com/0x0ptim0us/ezcolor * License : MIT Programming Lang:

Bug#939260: websploit: Python2 removal in sid/bullseye

2020-01-21 Thread Marcos Fouces
Hello Fardin I am the uploader of websploit in Debian distro. I am trying to package your new release but AFAIK one of the dependencies (python-wifi) is only for python2. Currently we cannot package new python2 modules in Debian. Please, let me know if i am wrong because i am all for packaging

Bug#944432: ITP: python-rq -- Simple job queues for Python 3

2019-11-09 Thread Marcos Fouces
Package: wnpp Severity: wishlist Owner: Marcos Fouces * Package name: python-rq Version : 1.1.0 Upstream Author : Vincent Driessen * URL : https://python-rq.org/ * License : BSD Programming Lang: Python Description : Simple job queues for Python 3 RQ

Bug#944430: ITP: python-flasgger -- Extract swagger specs from your flask project

2019-11-09 Thread Marcos Fouces
Package: wnpp Severity: wishlist Owner: Marcos Fouces * Package name: python-flasgger Version : 0.9.3 Upstream Author : Bruno Rocha * URL : https://github.com/flasgger/flasgger/ * License : Expat Programming Lang: Python Description : Extract swagger

Bug#944129: arp-scan: not returning any results

2019-11-05 Thread Marcos Fouces
Hello I just uploaded a new release of arp-scan to git [0]. I tested it and it works well on my machine (Debian testing). Could some DD review and upload the package? Greetings, Marcos [0] https://salsa.debian.org/pkg-security-team/arp-scan El lun, 04-11-2019 a las 18:42 +0100, Reiner

Bug#935042: Privacy Breach is not in policy

2019-10-13 Thread Marcos Fouces
Hello Similar issues were discussed in: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726998 You could also find that Lintian folks uses several levels of error tags to describe this problem, for instance: * https://lintian.debian.org/tags/privacy-breach-statistics-website.html. It is

Bug#935042: Privacy on Debian

2019-10-01 Thread Marcos Fouces
Hello Michael, I am aware of the configuration option you mention but i decided to create a patch changing the CheckUpdates() function because i don't know if it is used in another part of the software. I also can understand your desire to know where and when an Lynis audit is performed but it

Bug#348991: What needs to be done to kernel to collect disk I/O statistics?

2019-05-07 Thread Marcos Fouces
Hello I can confirm that the problem persists with the kernel i use(Linux  4.19.0-4-amd64). I am inclined to close this bug because it has nothing to do with acct but with the kernel. Greetings, Marcos

Bug#680263: Illegal number - maybe already fixed

2019-05-03 Thread Marcos Fouces
Hello Vincent, i believe that we should don't care about bugs that affect kernels before oldstable release. In this case, the script test the existence of /proc/ksyms and set the variable KALLSYMS to /proc/kallsyms only if it doesn't exist so the kernel version should not be relevant. AFAIK, the

Bug#680263: Illegal number - maybe already fixed

2019-05-03 Thread Marcos Fouces
Hello Since 0.50 release, the test to check the name of the file (ksysm or kallsyms) is the following:  KALLSYMS="/proc/kallsyms"  [ -f /proc/ksysm ] && KALLSYMS="/proc/$KALLSYMS" so i believe that it is not a problem anymore. Anyway I cannot test it with an kernel older enough to use

Bug#922533: please document location of accounting file

2019-02-22 Thread Marcos Fouces
On 22/2/19 16:55, Marc Haber wrote: > I am not sure whether this was a brilliant idea, many local mechanisms > on existing installations might be looking for the file in the old > place. Also, migration probably needs a gazillion of tests to make sure > that nothing breaks. For how long has the

Bug#922533: please document location of accounting file

2019-02-21 Thread Marcos Fouces
o continue handling all those places in other > distributions. > > Greetings > Marc > > > On Tue, Feb 19, 2019 at 11:44:39PM +0100, Marcos Fouces wrote: >> From: Marcos Fouces >> Subject: Re: Bug#922533: please document location of accounting file >> To: Marc Habe

Bug#922533: please document location of accounting file

2019-02-19 Thread Marcos Fouces
Hi Marc In Debian, the pacct file is located in /var/log/account/pacct while in Fedora it is in /var/account/pacct. I don't see the reason to be less parsable in that location. What is your suggestion? Greetings, Marcos On 17/2/19 20:50, Marc Haber wrote: > Package: acct > Version: 6.6.4-2 >

Bug#788851: Patch for acct

2019-01-30 Thread Marcos Fouces
Hello Dominique Thanks for your report. I also believe that is not a acct bug as you admit ("...so the cause may be the kernel having an open file handle.") BTW. i cannot reproduce this bug myself. Could you please check if the problem persist with a newer kernel? If no more info is provided i

Bug#3251: Any reason to keep a wontfix bug opened for years?

2019-01-29 Thread Marcos Fouces
Hello I also believe that this bug report is useless. As today (January 2019) it is almost 23 years old! Upstream is dead and, as far as i know, nobody took over upstream maintenance. For this reason i close this bug now. Greetings, Marcos

Bug#916977: snoopy w/ ld preload enabled breaks "apt upgrade" jessie-to-buster

2019-01-19 Thread Marcos Fouces
Hello, I use testing and updated hundreds of package without any trouble. Please, could you give an example of a package that fails to upgrade? Greetings, Marcos. On 11/1/19 18:52, Adrian Bunk wrote: > On Thu, Dec 20, 2018 at 05:26:25PM -0500, deb...@mailinator.com wrote: >> Package: snoopy

Bug#915718: RFS: arno-iptables-firewall/2.0.3-1 [ITA]

2018-12-06 Thread Marcos Fouces
Hello Sven As Adam stated, you should reconsider this change. I cannot see any reason no to be backward compatible with sysvinit. There is also some Lintian informative and pedantic tags that are triggered. I found most of them reasonable, so it should also a good idea to address them. BTW:

Bug#913191: override: libnids1.21/libs

2018-11-07 Thread Marcos Fouces
Package: ftp.debian.org Please move the libnids1.21 package to "libs" section. It was wrongly tagged as "libdevel". d/control file has already been updated and the proper package had also been uploaded. Greetings, Marcos

Bug#904200: RM: acccheck -- ROM; Insecure, unmaintained, better alternatives

2018-07-23 Thread Marcos Fouces
d at > the code more closely, it's literaly riddled with shell injection > vulnerabilities and it would be time-consuming to fix them all. > > PS: I'm requesting this as a member of the pkg-security packaging team > even though I'm not listed in Uploaders of the package. I have put Marcos > Fouces in copy of the bug. >

Bug#613000: Convert Hardening Debian to XML

2018-05-06 Thread Marcos Fouces
group? > This way, all DD has access. > > https://wiki.debian.org/Salsa/Doc > >> On Sun, Apr 16, 2017 at 03:16:24PM +0200, Marcos Fouces wrote: >> >> Hello >> >> I would be glad to (try my best to) convert this book to XML. I have >&g

Bug#613000: Convert Hardening Debian to XML

2018-05-05 Thread Marcos Fouces
. Marcos [1] https://anonscm.debian.org/cgit/ddp/securing-debian-howto.git/log/ > On Sun, Apr 16, 2017 at 03:16:24PM +0200, Marcos Fouces wrote: >> Hello >> >> I would be glad to (try my best to) convert this book to XML. I have a >> personal interest in it because (t

Bug#890635: chkrootkit: Errors when trying to exclude known false positives

2018-02-18 Thread Marcos Fouces
Hello Lorenzo and Maxim, It also works fine with me. Maxim, could you please try 0.52 release and see if it works fine? Greetings, Marcos > On 02/18/2018 03:10 PM, Lorenzo "Palinuro" Faletra wrote: >> On 02/17/2018 02:35 AM, Maxim Biro wrote: >> Package: chkrootkit >> Version: 0.50-4+b2 >>

Bug#887832: [arp-scan] Segmentation fault at launch

2018-01-20 Thread Marcos Fouces
Hello Manu I believe that is the same problem as described in bug #881125. It is solved in 1.9-3 release in the Debian testing Could you install the package from testing and check if it works for you? If so, i will close this bug. Many thanks for your report. Greetings. Marcos El 20/01/18

Bug#844303: Working on it porting ncrack to OpenSSL 1.1

2017-12-12 Thread Marcos Fouces
Hello Hilko! Great news! El 11/12/17 a las 01:14, Hilko Bengen escribió: > Hi, > > just a heads-up: I am working on porting ncrack to OpenSSL 1.1. There > are two main causes of issues: > > (1) OpenSSL-related checks in opensshlib/configure.ac are broken, they use > old SSLeay_* APIs, this is

Bug#866843: New maintainer for chkrootkit

2017-08-29 Thread Marcos Fouces
Hello I close this bug as chkrootkit is currently maintained by the Debian pkg-security tools team.

Bug#715646: Processed: Bug#715646 marked as pending

2017-05-11 Thread Marcos Fouces
, Marcos Fouces wrote: control: severity -1 grave This could lead to DOS or, even worst, remote code execution. Following Hilko Bengen's advice: i re-adjust the severity. Hi Marcos, thanks a lot for fixing this bug as well as the similar #716355, #716457 and #716458 in dsniff for stretch

Bug#860611: dsniff: FTBFS: ld: cannot find -lmissing

2017-04-19 Thread Marcos Fouces
Hello Lukas Maybe you should create a "debian/stretch" branch from 2.4b1+debian-24 tag and commit your patch here. If you want, you can add yourself as uploader and tag it as "2.4b1+debian-25" release. Later we will merge it with "debian/master" branch. I hope there's some DD willing to

Bug#613000: Convert Hardening Debian to XML

2017-04-16 Thread Marcos Fouces
Hello I would be glad to (try my best to) convert this book to XML. I have a personal interest in it because (time ago) i learn a lot from it. I already did a clean and complete (hopefully...) of its SVN repo to git and asked for write access on alioth ddp repo. Greetings, Marcos

Bug#857577: unblock: dsniff/2.4b1+debian-24

2017-03-12 Thread Marcos Fouces
++ 31_sysconf_clocks.patch ++ 32_rpc_segfault.patch (Closes: #855869) + * Polish, reorder and refresh patches. + * Add 33_sshcrypto_DES.patch + + -- Marcos Fouces <mfou...@yahoo.es> Wed, 15 Feb 2017 23:42:16 +0100 + dsniff (2.4b1+debian-23) unstable; urgency=medium * Assign to pkg-securit

Bug#716355: Processed: Bug#716355 marked as pending

2017-03-12 Thread Marcos Fouces
control: severity -1 grave This could lead to DOS or, even worst, remote code execution. Following Hilko Bengen's advice: i re-adjust the severity. El 03/03/17 a las 00:27, Debian Bug Tracking System escribió: Processing commands for cont...@bugs.debian.org: tag 716355 pending Bug #716355

Bug#716457: Processed: Bug#716457 marked as pending

2017-03-12 Thread Marcos Fouces
control: severity -1 grave This could lead to DOS or, even worst, remote code execution. Following Hilko Bengen's advice: i re-adjust the severity. El 03/03/17 a las 00:27, Debian Bug Tracking System escribió: Processing commands for cont...@bugs.debian.org: tag 716457 pending Bug #716457

Bug#715646: Processed: Bug#715646 marked as pending

2017-03-12 Thread Marcos Fouces
control: severity -1 grave This could lead to DOS or, even worst, remote code execution. Following Hilko Bengen's advice: i re-adjust the severity. El 03/03/17 a las 00:27, Debian Bug Tracking System escribió: Processing commands for cont...@bugs.debian.org: tag 715646 pending Bug #715646

Bug#716458: Processed: Bug#716458 marked as pending

2017-03-11 Thread Marcos Fouces
control: severity -1 grave This could lead to DOS or, even worst, remote code execution. Following Hilko Bengen's advice: i re-adjust the severity.

Bug#855869: Processed: Re: Bug#855869: dsniff: segfaults on portmapper messages

2017-03-11 Thread Marcos Fouces
Anyone? El 09/03/17 a las 15:33, Marcos Fouces escribió: Hello Hilko I pushed a "debian/stretch" branch [1] to the repo without all changes i've made so far bug the patch that fixes this bug. It is still posible to get sniff in shape for stretch? If so, could you sponsor it

Bug#855869: Processed: Re: Bug#855869: dsniff: segfaults on portmapper messages

2017-03-09 Thread Marcos Fouces
Hello Hilko I pushed a "debian/stretch" branch [1] to the repo without all changes i've made so far bug the patch that fixes this bug. It is still posible to get sniff in shape for stretch? If so, could you sponsor it or tell me what else to do? Thanks, Marcos [1]

Bug#856300: ITA: swatch -- Log file viewer with regexp matching,

2017-03-04 Thread Marcos Fouces
Hello I already uploaded a new revision of swatch to the pkg-security team repo: https://anonscm.debian.org/cgit/pkg-security/swatch.git Greetings, Marcos

Bug#706766: Diff for this fix

2017-02-28 Thread Marcos Fouces
Hello João Could you create a patch and post it in this thread? Thank you very much for the fix! Greetings, Marcos

Bug#851060: libnids 1.23-2.1 NMU

2017-02-26 Thread Marcos Fouces
Control: tags -1 patch pending Hi, On 25/02/17 18:00, James Cowgill wrote: On 23/02/17 22:44, Marcos Fouces wrote: I am agree with you, when i fix these bugs i will create a separate git branch, cherry-pick only freeze-allowed changes and try to get a package ready for stretch. Ok. Since I can

Bug#851060: New dsniff revision

2017-02-23 Thread Marcos Fouces
Hi James, El 23/02/17 a las 12:57, James Cowgill escribió: Hi, On 22/02/17 23:16, Marcos Fouces wrote: Hello I uploaded to repo a first attempt of libnids1.24 package wich aims to close its two critical bugs: #855602: fixed upstream in 1.24 release. As I wrote in the bugreport, the fix

Bug#851060: marked as pending

2017-02-19 Thread Marcos Fouces
to armhf machines so testing should not be an issue. Unfortunately, i can do it myself. Greetings, Marcos El 17/02/17 a las 00:41, Axel Beckert escribió: Hi Marcos, Marcos Fouces wrote: +dsniff (2.4b1+debian-24) UNRELEASED; urgency=medium + + * Add -fno-strict-aliasing compiler flag

Bug#828287: dsniff: FTBFS with openssl 1.1.0

2016-12-20 Thread Marcos Fouces
A new revision of the package is hosted at pkg-security team. I did some improvements (i also add your patch) and the package is hopefully ready for upload. Just need a sponsor. Check it here: https://anonscm.debian.org/cgit/pkg-security/dsniff.git/ Cheers, Marcos El 20/12/16 a las 15:37,

Bug#847505: retitle 847505 ITA: dsniff -- Various tools to sniff network traffic for cleartext insecurities

2016-12-09 Thread Marcos Fouces
retitle 847505 ITA: dsniff -- Various tools to sniff network traffic for cleartext insecurities Second try... Hope that works...

Bug#847505: retitle 847505 ITA: dsniff -- Various tools to sniff network traffic for cleartext insecurities

2016-12-09 Thread Marcos Fouces
retitle847505 ITA: dsniff -- Various tools to sniff network traffic for cleartext insecurities I am interesed in this package. I already uploaded a new revision here: https://anonscm.debian.org/cgit/pkg-security/dsniff.git/ I will be maintained under the