From jan-oliver.wagner at intevation.de  Fri Aug  1 09:56:47 2008
From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner)
Date: Fri, 1 Aug 2008 09:56:47 +0200
Subject: [Openvas-distro] Debian freezes and OpenVAS not fully integrated.
Message-ID: <200808010956.50620.jan-oliver.wagner@intevation.de>

Hi,

I've seen the note that Debian freezes for Lenny and no new packages are accepted.

Unfortunately not even openvas-libnasl did make it. We have only openvas-client and
openvas-libraries in Debian.
Thus Debian will continue to ship Nessus instead of OpenVAS and drive
people into a proprietary direction :-(

Best

	Jan

-- 
Dr. Jan-Oliver Wagner                        Intevation GmbH, Osnabr?ck
Amtsgericht Osnabr?ck, HR B 18998             http://www.intevation.de/
Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

From waja at cyconet.org  Mon Aug  4 00:46:51 2008
From: waja at cyconet.org (Jan Wagner)
Date: Mon, 4 Aug 2008 00:46:51 +0200
Subject: [Openvas-distro] Debian freezes and OpenVAS not fully
	integrated.
In-Reply-To: <200808010956.50620.jan-oliver.wagner@intevation.de>
References: <200808010956.50620.jan-oliver.wagner@intevation.de>
Message-ID: <200808040046.54253.waja@cyconet.org>

Hi there,

On Friday 01 August 2008 09:56, Jan-Oliver Wagner wrote:
> I've seen the note that Debian freezes for Lenny and no new packages are
> accepted.

thats true.

> Unfortunately not even openvas-libnasl did make it. We have only
> openvas-client and openvas-libraries in Debian.
> Thus Debian will continue to ship Nessus instead of OpenVAS and drive
> people into a proprietary direction :-(

The point is, the timeframe for the freeze was well known. So whole problem is 
based on the timeframe of maintainers in relationship with sponsors. No need 
to blame the debian project for that fact.
Anyways ... we can try to work on the packages as well into experimental (and 
so going through NEW) and when lenny is released, reupload them into unstable 
and let them migrate to testing. As far as they are there, I'm able to upload 
the packages to backports.org (lenny-backports), which shouldn't such a big 
thing at all. 

With kind regards, Jan.
-- 
Never write mail to <waja at spamfalle.info>, you have been warned!
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE
Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++
------END GEEK CODE BLOCK------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080804/4f811fa9/attachment.pgp

From jan-oliver.wagner at intevation.de  Mon Aug  4 10:10:50 2008
From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner)
Date: Mon, 4 Aug 2008 10:10:50 +0200
Subject: [Openvas-distro] Debian freezes and OpenVAS not fully
	integrated.
In-Reply-To: <200808040046.54253.waja@cyconet.org>
References: <200808010956.50620.jan-oliver.wagner@intevation.de>
	<200808040046.54253.waja@cyconet.org>
Message-ID: <200808041010.52658.jan-oliver.wagner@intevation.de>

On Montag, 4. August 2008, Jan Wagner wrote:
> On Friday 01 August 2008 09:56, Jan-Oliver Wagner wrote:
> > Unfortunately not even openvas-libnasl did make it. We have only
> > openvas-client and openvas-libraries in Debian.
> > Thus Debian will continue to ship Nessus instead of OpenVAS and drive
> > people into a proprietary direction :-(
> 
> The point is, the timeframe for the freeze was well known. So whole problem is 
> based on the timeframe of maintainers in relationship with sponsors. No need 
> to blame the debian project for that fact.

I did not blame Debian.

> Anyways ... we can try to work on the packages as well into experimental (and 
> so going through NEW) and when lenny is released, reupload them into unstable 
> and let them migrate to testing. As far as they are there, I'm able to upload 
> the packages to backports.org (lenny-backports), which shouldn't such a big 
> thing at all. 

yes, we should continue with the .deb packaging. Once in Debian unstable it
is also quite easy to get them over to Ubuntu an their next release which probably
happens earlier than the release that follows Lenny.
Debian backports will help as well.

So, how to proceed from here? There is openvas-libnasl 1.0.0-6 in the NEW section for 2 weeks now.
Is it stalled or will the ftp master pick it up eventually and migrate it to unstable?

Best

	Jan

-- 
Dr. Jan-Oliver Wagner                        Intevation GmbH, Osnabr?ck
Amtsgericht Osnabr?ck, HR B 18998             http://www.intevation.de/
Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

From jfs at computer.org  Tue Aug  5 19:45:26 2008
From: jfs at computer.org (Javier =?iso-8859-1?Q?Fern=E1ndez-Sanguino_Pe=F1a?=)
Date: Tue, 5 Aug 2008 19:45:26 +0200
Subject: [Openvas-distro] openvas-libnasl_1.0.0-5_i386.changes REJECTED
In-Reply-To: <200806301543.35178.jan-oliver.wagner@intevation.de>
References: <E1K4hiU-0004UA-Lv@ries.debian.org>
	<200806241231.01544.waja@cyconet.org>
	<200806241209.01060.timb@nth-dimension.org.uk>
	<200806301543.35178.jan-oliver.wagner@intevation.de>
Message-ID: <20080805174526.GB7265@javifsp.no-ip.org>

On Mon, Jun 30, 2008 at 03:43:32PM +0200, Jan-Oliver Wagner wrote:
> On Dienstag, 24. Juni 2008, Tim Brown wrote:
> > http://mentors.debian.net/debian/pool/main/o/openvas-libnasl/openvas-libnasl_1.0.0-6.dsc, 
> > the only hold up for this has been some toing and froing regarding 
> > debian/copyright, which hopefully I have now resolved.
> 
> so, the blocker is that we need a mentor to approve?

Well, the mentor *did* delay this package (almost a month, I made the upload
july the 20th. Sorry for that. The package was accepted into unstable today.

> Perhaps Javier is on vacation or in other way too busy.

Personal life issues.

> What do the Debian people usually do in such cases?

There are mentors available for people that need to upload stuff. The place
to ask for help is the debian-mentors mailing list.

> Is there a procedure how to ask another mentor to
> do the upload?

Yes there is, in absence of a mentor people should turn to  the
debian-mentors mailing list to ask for help there.

Regards

Javier
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080805/9dbf2794/attachment.pgp

From jfs at computer.org  Tue Aug  5 19:46:35 2008
From: jfs at computer.org (Javier =?iso-8859-1?Q?Fern=E1ndez-Sanguino_Pe=F1a?=)
Date: Tue, 5 Aug 2008 19:46:35 +0200
Subject: [Openvas-distro]
	[installer@ftp-master.debian.org:	openvas-libnasl_1.0.0-6_i386.changes
	is NEW]
Message-ID: <20080805174635.GA13891@javifsp.no-ip.org>


FYI openvas-libnasl is now available in Debian unstable. Openvas-server and
openvas-plugins can be packaged now and be uploaded to Debian's NEW queue.

Regards

Javier

----- Forwarded message from Debian Installer <installer at ftp-master.debian.org> -----

From: Debian Installer <installer at ftp-master.debian.org>
Date: Sun, 20 Jul 2008 21:35:09 +0000
To: Tim Brown <timb at nth-dimension.org.uk>, jfs at debian.org
Subject: openvas-libnasl_1.0.0-6_i386.changes is NEW

(new) libopenvasnasl1-dev_1.0.0-6_i386.deb optional libdevel
OpenVAS static libraries and headers
 The OpenVAS Security Scanner is a security auditing tool. It makes
 possible to test security modules in an attempt to find vulnerable
 spots that should be fixed.
 .
 It is made up of two parts: a server, and a client. The server/daemon,
 openvasd, is in charge of the attacks, whereas the client,
 OpenVAS-Client, provides the user a nice X11/GTK+ interface.
 .
 This package contains the required static libraries, headers, and
 the openvas-config script.
(new) libopenvasnasl1_1.0.0-6_i386.deb optional libs
OpenVAS shared libraries
 The OpenVAS Security Scanner is a security auditing tool. It makes
 possible to test security modules in an attempt to find vulnerable
 spots that should be fixed.
 .
 It is made up of two parts: a server, and a client. The server/daemon,
 openvasd, is in charge of the attacks, whereas the client,
 OpenVAS-Client, provides the user a nice X11/GTK+ interface.
 .
 This package contains the required shared libraries.
(new) openvas-libnasl_1.0.0-6.diff.gz optional libs
(new) openvas-libnasl_1.0.0-6.dsc optional libs
(new) openvas-libnasl_1.0.0.orig.tar.gz optional libs
Changes: openvas-libnasl (1.0.0-6) unstable; urgency=low
 .
  * Replaced nasl/lfind.c from upstream's tarball and replaced with
    http://ftp.netbsd.org/pub/NetBSD/NetBSD-release-3-1/src/lib/libc/stdlib/lsearch.c.
    This fixes a problem where the original file was 4-clause BSD
  * Expanded the debian/copyright notice to cover change to nasl/lsearch.c,
    the missing PKT_LICENSE file and the OpenSSL-exemption
  * Minor updates to control file, fixed Build-Depend directive


Override entries for your package:

Announcing to debian-devel-changes at lists.debian.org


Your package contains new components which requires manual editing of
the override file.  It is ok otherwise, so please be patient.  New
packages are usually added to the override file about once a week.

You may have gotten the distribution wrong.  You'll get warnings above
if files already exist in other distributions.

----- End forwarded message -----

From waja at cyconet.org  Tue Aug  5 21:25:36 2008
From: waja at cyconet.org (Jan Wagner)
Date: Tue, 5 Aug 2008 21:25:36 +0200
Subject: [Openvas-distro] openvas-libnasl_1.0.0-5_i386.changes REJECTED
In-Reply-To: <20080805174526.GB7265@javifsp.no-ip.org>
References: <E1K4hiU-0004UA-Lv@ries.debian.org>
	<200806301543.35178.jan-oliver.wagner@intevation.de>
	<20080805174526.GB7265@javifsp.no-ip.org>
Message-ID: <200808052125.39889.waja@cyconet.org>

Hi Javier,

On Tuesday 05 August 2008 19:45, Javier Fern?ndez-Sanguino Pe?a wrote:
> On Mon, Jun 30, 2008 at 03:43:32PM +0200, Jan-Oliver Wagner wrote:
> > On Dienstag, 24. Juni 2008, Tim Brown wrote:
> > > http://mentors.debian.net/debian/pool/main/o/openvas-libnasl/openvas-li
> > >bnasl_1.0.0-6.dsc, the only hold up for this has been some toing and
> > > froing regarding debian/copyright, which hopefully I have now resolved.
> >
> > so, the blocker is that we need a mentor to approve?
>
> Well, the mentor *did* delay this package (almost a month, I made the
> upload july the 20th. Sorry for that. The package was accepted into
> unstable today.

could you have a look into 
http://ftp.cyconet.org/debian/archive/official/openvas-libnasl/1.0.1-1/openvas-libnasl_1.0.1-1.dsc
and if no changes are needed, upload it?

Thanks and with kind regards, Jan.
-- 
Never write mail to <waja at spamfalle.info>, you have been warned!
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE
Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++
------END GEEK CODE BLOCK------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080805/5bd462f9/attachment.pgp

From jan-oliver.wagner at intevation.de  Wed Aug  6 09:25:29 2008
From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner)
Date: Wed, 6 Aug 2008 09:25:29 +0200
Subject: [Openvas-distro]
 =?iso-8859-1?q?=5Binstaller=40_ftp-master=2Edebi?=
 =?iso-8859-1?q?an=2Eorg=3A=09openvas-libnasl=5F1=2E0=2E0-6=5Fi386=2Echang?=
 =?iso-8859-1?q?es_is_NEW=5D?=
In-Reply-To: <20080805174635.GA13891@javifsp.no-ip.org>
References: <20080805174635.GA13891@javifsp.no-ip.org>
Message-ID: <200808060925.31252.jan-oliver.wagner@intevation.de>

On Dienstag, 5. August 2008, Javier Fern?ndez-Sanguino Pe?a wrote:
> FYI openvas-libnasl is now available in Debian unstable. Openvas-server and
> openvas-plugins can be packaged now and be uploaded to Debian's NEW queue.

great :-)

IIRC, Tim and Jan did some work on openvas-server. Is it ready?

Best

	Jan

-- 
Dr. Jan-Oliver Wagner                        Intevation GmbH, Osnabr?ck
Amtsgericht Osnabr?ck, HR B 18998             http://www.intevation.de/
Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

From jan-oliver.wagner at intevation.de  Thu Aug 14 12:05:09 2008
From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner)
Date: Thu, 14 Aug 2008 12:05:09 +0200
Subject: [Openvas-distro]
 =?iso-8859-1?q?=5Binstaller=40_ftp-master=2Edebi?=
 =?iso-8859-1?q?an=2Eorg=3A=09openvas-libnasl=5F1=2E0=2E0-6=5Fi386=2Echang?=
 =?iso-8859-1?q?es_is_NEW=5D?=
In-Reply-To: <200808060925.31252.jan-oliver.wagner@intevation.de>
References: <20080805174635.GA13891@javifsp.no-ip.org>
	<200808060925.31252.jan-oliver.wagner@intevation.de>
Message-ID: <200808141205.12303.jan-oliver.wagner@intevation.de>

On Mittwoch, 6. August 2008, Jan-Oliver Wagner wrote:
> On Dienstag, 5. August 2008, Javier Fern?ndez-Sanguino Pe?a wrote:
> > FYI openvas-libnasl is now available in Debian unstable. Openvas-server and
> > openvas-plugins can be packaged now and be uploaded to Debian's NEW queue.
> 
> great :-)
> 
> IIRC, Tim and Jan did some work on openvas-server. Is it ready?

I noted that libnasl is only in 1.0.0 and thus you can not build
current openvas-server which needs 1.0.1 as minium.

The update should be easy?

Best

	Jan


-- 
Dr. Jan-Oliver Wagner                        Intevation GmbH, Osnabr?ck
Amtsgericht Osnabr?ck, HR B 18998             http://www.intevation.de/
Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

From waja at cyconet.org  Thu Aug 14 12:37:27 2008
From: waja at cyconet.org (Jan Wagner)
Date: Thu, 14 Aug 2008 12:37:27 +0200
Subject: [Openvas-distro]
 =?iso-8859-1?q?=5Binstaller=40_ftp-master=2Edebi?=
 =?iso-8859-1?q?an=2Eorg=3A=09openvas-libnasl=5F1=2E0=2E0-6=5Fi386=2Echang?=
 =?iso-8859-1?q?es_is_NEW=5D?=
In-Reply-To: <200808141205.12303.jan-oliver.wagner@intevation.de>
References: <20080805174635.GA13891@javifsp.no-ip.org>
	<200808060925.31252.jan-oliver.wagner@intevation.de>
	<200808141205.12303.jan-oliver.wagner@intevation.de>
Message-ID: <200808141237.30010.waja@cyconet.org>

On Thursday 14 August 2008 12:05, Jan-Oliver Wagner wrote:
> On Mittwoch, 6. August 2008, Jan-Oliver Wagner wrote:
> > On Dienstag, 5. August 2008, Javier Fern?ndez-Sanguino Pe?a wrote:
> > > FYI openvas-libnasl is now available in Debian unstable. Openvas-server
> > > and openvas-plugins can be packaged now and be uploaded to Debian's NEW
> > > queue.
> >
> > great :-)
> >
> > IIRC, Tim and Jan did some work on openvas-server. Is it ready?
>
> I noted that libnasl is only in 1.0.0 and thus you can not build
> current openvas-server which needs 1.0.1 as minium.
>
> The update should be easy?

I allready asked Javier to upload 
http://ftp.cyconet.org/debian/archive/official/openvas-libnasl/1.0.1-1/openvas-libnasl_1.0.1-1.dsc, 
but it didn't hit the incoming directory yet.

With kind regards, Jan.
-- 
Never write mail to <waja at spamfalle.info>, you have been warned!
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE
Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++
------END GEEK CODE BLOCK------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080814/fa4c67ea/attachment.pgp

From michael.wiegand at intevation.de  Wed Aug 20 16:38:27 2008
From: michael.wiegand at intevation.de (Michael Wiegand)
Date: Wed, 20 Aug 2008 16:38:27 +0200
Subject: [Openvas-distro] Urgent: Packaging for Ubuntu 8.10 (Intrepid Ibex)
Message-ID: <200808201638.27319.michael.wiegand@intevation.de>

Hi,

even though we did not manage to get all OpenVAS packages into Debian Lenny, 
I'd like to direct your attention to the fact that it is still possible to 
get the packages into the Ubuntu repository before they freeze for Intrepid 
which is due for release in October.

The status for Intrepid is that both -client and -libraries are already there 
and have replaced their Nessus counterparts while nessus-libraries, -plugins 
and -core are still present.

I talked to the Ubunto-MOTUs (the people responsible for the packaging there) 
yesterday and they are looking forward to adding the remaining OpenVAS 
packages. The only thing we need to do is to get the packages ready before 
they do the Feature Freeze for Intrepid on *August 28th*.

I'd volunteer to work on that, but since I have very little experience with 
packaging I will need someone with more experience to work with me on that.

We can't afford to lose much time on this if we want OpenVAS to ship with 
Intrepid, so I'd like some feedback (or better yet, help) from you on this 
very soon.

Regards,

Michael

-- 
Michael Wiegand                                   OpenPGP key: D7D049EC
Intevation GmbH, Osnabr?ck                    http://www.intevation.de/
Amtsgericht Osnabr?ck, HR B 18998
Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

From waja at cyconet.org  Wed Aug 20 16:47:33 2008
From: waja at cyconet.org (Jan Wagner)
Date: Wed, 20 Aug 2008 16:47:33 +0200
Subject: [Openvas-distro] Urgent: Packaging for Ubuntu 8.10 (Intrepid
	Ibex)
In-Reply-To: <200808201638.27319.michael.wiegand@intevation.de>
References: <200808201638.27319.michael.wiegand@intevation.de>
Message-ID: <200808201647.36478.waja@cyconet.org>

Hi Michael,

On Wednesday 20 August 2008 16:38, Michael Wiegand wrote:
> even though we did not manage to get all OpenVAS packages into Debian
> Lenny, I'd like to direct your attention to the fact that it is still
> possible to get the packages into the Ubuntu repository before they freeze
> for Intrepid which is due for release in October.
>
> The status for Intrepid is that both -client and -libraries are already
> there and have replaced their Nessus counterparts while nessus-libraries,
> -plugins and -core are still present.
>
> I talked to the Ubunto-MOTUs (the people responsible for the packaging
> there) yesterday and they are looking forward to adding the remaining
> OpenVAS packages. The only thing we need to do is to get the packages ready
> before they do the Feature Freeze for Intrepid on *August 28th*.
>
> I'd volunteer to work on that, but since I have very little experience with
> packaging I will need someone with more experience to work with me on that.
>
> We can't afford to lose much time on this if we want OpenVAS to ship with
> Intrepid, so I'd like some feedback (or better yet, help) from you on this
> very soon.

the first you can do here .... ask if they are willing to upload 
http://ftp.cyconet.org/debian/archive/official/openvas-libnasl/1.0.1-1/openvas-libnasl_1.0.1-1.dsc

I asked jfs to upload it to (Debian) unstable, but no response yet. Since 
Daniel returned yesterday from DebConf I also asked him todo so, but I guess 
he is still busy with regeneratig from a 36h travel trip, working on backlog 
and usual life, so this may take some time.

With kind regards, Jan.
-- 
Never write mail to <waja at spamfalle.info>, you have been warned!
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE
Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++
------END GEEK CODE BLOCK------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080820/e4095a49/attachment.pgp

From jfs at computer.org  Fri Aug 22 00:58:47 2008
From: jfs at computer.org (Javier =?iso-8859-1?Q?Fern=E1ndez-Sanguino_Pe=F1a?=)
Date: Fri, 22 Aug 2008 00:58:47 +0200
Subject: [Openvas-distro] openvas-libnasl_1.0.0-5_i386.changes REJECTED
In-Reply-To: <200808052125.39889.waja@cyconet.org>
References: <E1K4hiU-0004UA-Lv@ries.debian.org>
	<200806301543.35178.jan-oliver.wagner@intevation.de>
	<20080805174526.GB7265@javifsp.no-ip.org>
	<200808052125.39889.waja@cyconet.org>
Message-ID: <20080821225847.GA746@javifsp.no-ip.org>

On Tue, Aug 05, 2008 at 09:25:36PM +0200, Jan Wagner wrote:
> could you have a look into 
> http://ftp.cyconet.org/debian/archive/official/openvas-libnasl/1.0.1-1/openvas-libnasl_1.0.1-1.dsc
> and if no changes are needed, upload it?

I've taken a look at it and uploaded both this and the new version (1.0.2)
of openvas-libraries since it depended on it too.

Regards

Javier
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080822/9dff2e6f/attachment.pgp

From waja at cyconet.org  Fri Aug 22 01:26:04 2008
From: waja at cyconet.org (Jan Wagner)
Date: Fri, 22 Aug 2008 01:26:04 +0200
Subject: [Openvas-distro] openvas-libnasl_1.0.0-5_i386.changes REJECTED
In-Reply-To: <20080821225847.GA746@javifsp.no-ip.org>
References: <E1K4hiU-0004UA-Lv@ries.debian.org>
	<200808052125.39889.waja@cyconet.org>
	<20080821225847.GA746@javifsp.no-ip.org>
Message-ID: <200808220126.07673.waja@cyconet.org>

Hi Javier,

On Friday 22 August 2008 00:58, Javier Fern?ndez-Sanguino Pe?a wrote:
> On Tue, Aug 05, 2008 at 09:25:36PM +0200, Jan Wagner wrote:
> > could you have a look into
> > http://ftp.cyconet.org/debian/archive/official/openvas-libnasl/1.0.1-1/op
> >envas-libnasl_1.0.1-1.dsc and if no changes are needed, upload it?
>
> I've taken a look at it and uploaded both this and the new version (1.0.2)
> of openvas-libraries since it depended on it too.

thanks, but regarding openvas-libraries you are surprising me :) :

$ rmadison openvas-libraries
openvas-libraries |    1.0.2-1 |       testing | source
openvas-libraries |    1.0.2-1 |      unstable | source

Thanks and with kind regards, Jan.
-- 
Never write mail to <waja at spamfalle.info>, you have been warned!
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE
Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++
------END GEEK CODE BLOCK------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080822/42fbc9fb/attachment.pgp

From jfs at computer.org  Fri Aug 22 02:50:44 2008
From: jfs at computer.org (Javier =?iso-8859-1?Q?Fern=E1ndez-Sanguino_Pe=F1a?=)
Date: Fri, 22 Aug 2008 02:50:44 +0200
Subject: [Openvas-distro] openvas-libnasl_1.0.0-5_i386.changes REJECTED
In-Reply-To: <200808220126.07673.waja@cyconet.org>
References: <E1K4hiU-0004UA-Lv@ries.debian.org>
	<200808052125.39889.waja@cyconet.org>
	<20080821225847.GA746@javifsp.no-ip.org>
	<200808220126.07673.waja@cyconet.org>
Message-ID: <20080822005044.GA16859@javifsp.no-ip.org>

On Fri, Aug 22, 2008 at 01:26:04AM +0200, Jan Wagner wrote:
> thanks, but regarding openvas-libraries you are surprising me :) :
> 
> $ rmadison openvas-libraries
> openvas-libraries |    1.0.2-1 |       testing | source
> openvas-libraries |    1.0.2-1 |      unstable | source

Who uploaded this version? I don't remember doing it...

Regards

Javier


From jfs at computer.org  Fri Aug 22 05:07:27 2008
From: jfs at computer.org (Javier =?iso-8859-1?Q?Fern=E1ndez-Sanguino_Pe=F1a?=)
Date: Fri, 22 Aug 2008 05:07:27 +0200
Subject: [Openvas-distro] Uploading openvas-server and openvas-plugins
	packages to Debian
Message-ID: <20080822030726.GA5941@javifsp.no-ip.org>


After uploading updated versions of openvas-libnasl and openvas-libraries
(although this has been already uploaded) I have worked extensively in
openvas-server and openvas-plugins to try to get some packages out into NEW.

I have commited many changes to SVN which were needed to package these two
properly. Feel free to comment on any of the (many changes) I've made.
Hopefully the SVN commit logs are self-explanatory.find_service.nes

I've built the packages and tested them locally with openvas-client and
user/password connections work OK and receive all the plugins from the server
(3504 plugins actually). If I try a run, however, I get a SIGSEGV right after
the find_service.nes plugin finishes and the first plugin starts. (!)

In any case, I'm right now uploading openvas-server (1.0.1-1) and
openvas-plugins (1.0.2-1) to Debian, with all the changes I've introduced.
Even though they might not get accepted through NEW the first time this way
we can keep the ball rolling...

Regards

Javier
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080822/3e1ed984/attachment.pgp

From waja at cyconet.org  Fri Aug 22 08:17:55 2008
From: waja at cyconet.org (Jan Wagner)
Date: Fri, 22 Aug 2008 08:17:55 +0200
Subject: [Openvas-distro] openvas-libnasl_1.0.0-5_i386.changes REJECTED
In-Reply-To: <20080822005044.GA16859@javifsp.no-ip.org>
References: <E1K4hiU-0004UA-Lv@ries.debian.org>
	<200808220126.07673.waja@cyconet.org>
	<20080822005044.GA16859@javifsp.no-ip.org>
Message-ID: <200808220817.58874.waja@cyconet.org>

Hi Javier,

On Friday 22 August 2008 02:50, Javier Fern?ndez-Sanguino Pe?a wrote:
> On Fri, Aug 22, 2008 at 01:26:04AM +0200, Jan Wagner wrote:
> > thanks, but regarding openvas-libraries you are surprising me :) :
> >
> > $ rmadison openvas-libraries
> > openvas-libraries |    1.0.2-1 |       testing | source
> > openvas-libraries |    1.0.2-1 |      unstable | source
>
> Who uploaded this version? I don't remember doing it...

Daniel Baumann was so keen. :)

With kind regards, Jan.
-- 
Never write mail to <waja at spamfalle.info>, you have been warned!
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE
Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++
------END GEEK CODE BLOCK------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080822/09e6c97b/attachment.pgp

From jan-oliver.wagner at intevation.de  Fri Aug 22 08:46:27 2008
From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner)
Date: Fri, 22 Aug 2008 08:46:27 +0200
Subject: [Openvas-distro] Uploading openvas-server and openvas-plugins
	packages to Debian
In-Reply-To: <20080822030726.GA5941@javifsp.no-ip.org>
References: <20080822030726.GA5941@javifsp.no-ip.org>
Message-ID: <200808220846.30637.jan-oliver.wagner@intevation.de>

Hello Javier,

On Freitag, 22. August 2008, Javier Fern?ndez-Sanguino Pe?a wrote:
> After uploading updated versions of openvas-libnasl and openvas-libraries
> (although this has been already uploaded) I have worked extensively in
> openvas-server and openvas-plugins to try to get some packages out into NEW.
> 
> I have commited many changes to SVN which were needed to package these two
> properly. Feel free to comment on any of the (many changes) I've made.
> Hopefully the SVN commit logs are self-explanatory.find_service.nes
> 
> I've built the packages and tested them locally with openvas-client and
> user/password connections work OK and receive all the plugins from the server
> (3504 plugins actually). If I try a run, however, I get a SIGSEGV right after
> the find_service.nes plugin finishes and the first plugin starts. (!)

the fortcoming release of openvas-server should solve this.
 
> In any case, I'm right now uploading openvas-server (1.0.1-1) and
> openvas-plugins (1.0.2-1) to Debian, with all the changes I've introduced.
> Even though they might not get accepted through NEW the first time this way
> we can keep the ball rolling...

thank you so much for all your efford!

Best

	Jan


-- 
Dr. Jan-Oliver Wagner                        Intevation GmbH, Osnabr?ck
Amtsgericht Osnabr?ck, HR B 18998             http://www.intevation.de/
Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

From waja at cyconet.org  Fri Aug 22 09:35:14 2008
From: waja at cyconet.org (Jan Wagner)
Date: Fri, 22 Aug 2008 09:35:14 +0200
Subject: [Openvas-distro] Uploading openvas-server and openvas-plugins
	packages to Debian
In-Reply-To: <200808220846.30637.jan-oliver.wagner@intevation.de>
References: <20080822030726.GA5941@javifsp.no-ip.org>
	<200808220846.30637.jan-oliver.wagner@intevation.de>
Message-ID: <200808220935.17795.waja@cyconet.org>

On Friday 22 August 2008 08:46, Jan-Oliver Wagner wrote:
> On Freitag, 22. August 2008, Javier Fern?ndez-Sanguino Pe?a wrote:
> > I've built the packages and tested them locally with openvas-client and
> > user/password connections work OK and receive all the plugins from the
> > server (3504 plugins actually). If I try a run, however, I get a SIGSEGV
> > right after the find_service.nes plugin finishes and the first plugin
> > starts. (!)
>
> the fortcoming release of openvas-server should solve this.

Is there a isolated patch solving this issue available, which we can use to 
get this fixed in the package?

With kind regards, Jan.
-- 
Never write mail to <waja at spamfalle.info>, you have been warned!
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE
Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++
------END GEEK CODE BLOCK------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080822/9f17a532/attachment.pgp

From bitdealer at gmail.com  Sun Aug 24 17:07:35 2008
From: bitdealer at gmail.com (Stephan Kleine)
Date: Sun, 24 Aug 2008 17:07:35 +0200
Subject: [Openvas-distro] Plugins aren't executed anymore
Message-ID: <bd0803d70808240807m3bfe24c6se118844c90c715bf@mail.gmail.com>

Hi folks.

My apologgies for the late report but I just recognized that the
plugins aren't executed during a scan.

More verbose: The plugins get successfully downloaded & listed when
the client connects to the server but when one starts a scan it only
scans the ports and doesn't use the plugins although all are selected.

I'm sure that this worked with the official openvas-libraries 1.0.2
version but I apparently forgot to test it with the SVN version we
used to get it building again on Fedora and Mandriva (SVN revision
1023).

Therefore I would like to ask you to investigate this and to release a
new version which executes the plugins again.

best regards
Stephan

From michael.wiegand at intevation.de  Mon Aug 25 08:32:50 2008
From: michael.wiegand at intevation.de (Michael Wiegand)
Date: Mon, 25 Aug 2008 08:32:50 +0200
Subject: [Openvas-distro] Plugins aren't executed anymore
In-Reply-To: <bd0803d70808240807m3bfe24c6se118844c90c715bf@mail.gmail.com>
References: <bd0803d70808240807m3bfe24c6se118844c90c715bf@mail.gmail.com>
Message-ID: <200808250832.51127.michael.wiegand@intevation.de>

Stephan,

this sounds like the SIGSEGV issue that was present in the -server 1.0.1.

Could you confirm you are using -server 1.0.1 and maybe check the last few 
lines of the openvasd.messages log file? In this case, the bug most likely 
does not originate from the -libraries version and is already fixed in the 
upcoming -server 1.0.2 release.

Regards,

Michael

Am Sonntag, 24. August 2008 17:07:35 schrieb Stephan Kleine:
> Hi folks.
>
> My apologgies for the late report but I just recognized that the
> plugins aren't executed during a scan.
>
> More verbose: The plugins get successfully downloaded & listed when
> the client connects to the server but when one starts a scan it only
> scans the ports and doesn't use the plugins although all are selected.
>
> I'm sure that this worked with the official openvas-libraries 1.0.2
> version but I apparently forgot to test it with the SVN version we
> used to get it building again on Fedora and Mandriva (SVN revision
> 1023).
>
> Therefore I would like to ask you to investigate this and to release a
> new version which executes the plugins again.
>
> best regards
> Stephan
> _______________________________________________
> Openvas-distro mailing list
> Openvas-distro at wald.intevation.org
> http://lists.wald.intevation.org/mailman/listinfo/openvas-distro


-- 
Michael Wiegand                                   OpenPGP key: D7D049EC
Intevation GmbH, Osnabr?ck                    http://www.intevation.de/
Amtsgericht Osnabr?ck, HR B 18998
Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

From michael.wiegand at intevation.de  Mon Aug 25 14:33:31 2008
From: michael.wiegand at intevation.de (Michael Wiegand)
Date: Mon, 25 Aug 2008 14:33:31 +0200
Subject: [Openvas-distro] Uploading openvas-server and openvas-plugins
	packages to Debian
In-Reply-To: <200808220935.17795.waja@cyconet.org>
References: <20080822030726.GA5941@javifsp.no-ip.org>
	<200808220846.30637.jan-oliver.wagner@intevation.de>
	<200808220935.17795.waja@cyconet.org>
Message-ID: <200808251433.31915.michael.wiegand@intevation.de>

> > > server (3504 plugins actually). If I try a run, however, I get a
> > > SIGSEGV right after the find_service.nes plugin finishes and the first
> > > plugin starts. (!)
> >
> > the fortcoming release of openvas-server should solve this.
>
> Is there a isolated patch solving this issue available, which we can use to
> get this fixed in the package?

I just released the -server 1.0.2 version a few ours ago, which should solve 
the issue.

Jan, Javier: Could you package this version and check if it is working? If 
those packages work, we could upload them to Ubuntu as well, couldn't we?

Regards,

Michael

-- 
Michael Wiegand                                   OpenPGP key: D7D049EC
Intevation GmbH, Osnabr?ck                    http://www.intevation.de/
Amtsgericht Osnabr?ck, HR B 18998
Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

From waja at cyconet.org  Mon Aug 25 14:51:41 2008
From: waja at cyconet.org (Jan Wagner)
Date: Mon, 25 Aug 2008 14:51:41 +0200
Subject: [Openvas-distro] Uploading openvas-server and openvas-plugins
	packages to Debian
In-Reply-To: <200808251433.31915.michael.wiegand@intevation.de>
References: <20080822030726.GA5941@javifsp.no-ip.org>
	<200808220935.17795.waja@cyconet.org>
	<200808251433.31915.michael.wiegand@intevation.de>
Message-ID: <200808251451.44484.waja@cyconet.org>

Hi Michael,

On Monday 25 August 2008 14:33, Michael Wiegand wrote:
> Jan, Javier: Could you package this version and check if it is working? If
> those packages work, we could upload them to Ubuntu as well, couldn't we?

I don't know how the way goes at ubuntu. The only thin I know is, that if the 
package is in Debian, it maybe also get shipped in Ubuntu.

With kind regards, Jan.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080825/17a8ae1e/attachment.pgp

From michael.wiegand at intevation.de  Mon Aug 25 16:30:26 2008
From: michael.wiegand at intevation.de (Michael Wiegand)
Date: Mon, 25 Aug 2008 16:30:26 +0200
Subject: [Openvas-distro] Uploading openvas-server and openvas-plugins
	packages to Debian
In-Reply-To: <200808251451.44484.waja@cyconet.org>
References: <20080822030726.GA5941@javifsp.no-ip.org>
	<200808251433.31915.michael.wiegand@intevation.de>
	<200808251451.44484.waja@cyconet.org>
Message-ID: <200808251630.26581.michael.wiegand@intevation.de>

Am Montag, 25. August 2008 14:51:41 schrieb Jan Wagner:
> I don't know how the way goes at ubuntu. The only thin I know is, that if
> the package is in Debian, it maybe also get shipped in Ubuntu.

Yes, they do sync with Sid when putting together a new release; that is how 
the -client package got there.

But they also do their own packaging; their workflow is detailed in

https://wiki.ubuntu.com/UbuntuDevelopment/NewPackages
https://wiki.ubuntu.com/MOTU/Packages/REVU
http://revu.ubuntuwire.com/

for example. Maybe you (or Javier) could have a look at those documents and 
let me know if that would be feasible with the Debian packages we already 
have?

Regards,

Michael

-- 
Michael Wiegand                                   OpenPGP key: D7D049EC
Intevation GmbH, Osnabr?ck                    http://www.intevation.de/
Amtsgericht Osnabr?ck, HR B 18998
Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

From bitdealer at gmail.com  Mon Aug 25 17:32:45 2008
From: bitdealer at gmail.com (Stephan Kleine)
Date: Mon, 25 Aug 2008 17:32:45 +0200
Subject: [Openvas-distro] Plugins aren't executed anymore
In-Reply-To: <200808250832.51127.michael.wiegand@intevation.de>
References: <bd0803d70808240807m3bfe24c6se118844c90c715bf@mail.gmail.com>
	<200808250832.51127.michael.wiegand@intevation.de>
Message-ID: <bd0803d70808250832g3b52724fm7244f52d651b8d67@mail.gmail.com>

Moin Michael,

you were right. I updated the server to 1.0.2 and the plugins run just
fine now again except the bunch that depends on smb_nt.inc,
url_func.inc et al.

Do you guys have any plans to replace those with GPL-ed replacements?
I'm just asking cause it seems to render quite a bunch of them useless
since they seem to rely on them.

regards,
Stephan

From jan-oliver.wagner at intevation.de  Tue Aug 26 09:09:58 2008
From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner)
Date: Tue, 26 Aug 2008 09:09:58 +0200
Subject: [Openvas-distro] Plugins aren't executed anymore
In-Reply-To: <bd0803d70808250832g3b52724fm7244f52d651b8d67@mail.gmail.com>
References: <bd0803d70808240807m3bfe24c6se118844c90c715bf@mail.gmail.com>
	<200808250832.51127.michael.wiegand@intevation.de>
	<bd0803d70808250832g3b52724fm7244f52d651b8d67@mail.gmail.com>
Message-ID: <200808260910.00605.jan-oliver.wagner@intevation.de>

On Montag, 25. August 2008, Stephan Kleine wrote:
> you were right. I updated the server to 1.0.2 and the plugins run just
> fine now again except the bunch that depends on smb_nt.inc,
> url_func.inc et al.

smb_nt.inc has been added to SVN recently.
Some others will as well. See a recent post on this on openvas-discuss.
Not sure about url_funcs.inc.
But yes, replacements are planned. Not sure when this happens though.

Best

	Jan

-- 
Dr. Jan-Oliver Wagner                        Intevation GmbH, Osnabr?ck
Amtsgericht Osnabr?ck, HR B 18998             http://www.intevation.de/
Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

From bchandra at secpod.com  Tue Aug 26 11:31:01 2008
From: bchandra at secpod.com (Chandrashekhar B)
Date: Tue, 26 Aug 2008 15:01:01 +0530
Subject: [Openvas-distro] Plugins aren't executed anymore
In-Reply-To: <200808260910.00605.jan-oliver.wagner@intevation.de>
References: <bd0803d70808240807m3bfe24c6se118844c90c715bf@mail.gmail.com><200808250832.51127.michael.wiegand@intevation.de><bd0803d70808250832g3b52724fm7244f52d651b8d67@mail.gmail.com>
	<200808260910.00605.jan-oliver.wagner@intevation.de>
Message-ID: <007901c9075e$7744d610$0201a8c0@mahesh>

We'll work on url_func.inc soon...

Chandra.

-----Original Message-----
From: openvas-distro-bounces at wald.intevation.org
[mailto:openvas-distro-bounces at wald.intevation.org] On Behalf Of Jan-Oliver
Wagner
Sent: Tuesday, August 26, 2008 12:40 PM
To: openvas-distro at wald.intevation.org
Subject: Re: [Openvas-distro] Plugins aren't executed anymore

On Montag, 25. August 2008, Stephan Kleine wrote:
> you were right. I updated the server to 1.0.2 and the plugins run just
> fine now again except the bunch that depends on smb_nt.inc,
> url_func.inc et al.

smb_nt.inc has been added to SVN recently.
Some others will as well. See a recent post on this on openvas-discuss.
Not sure about url_funcs.inc.
But yes, replacements are planned. Not sure when this happens though.

Best

	Jan

-- 
Dr. Jan-Oliver Wagner                        Intevation GmbH, Osnabr?ck
Amtsgericht Osnabr?ck, HR B 18998             http://www.intevation.de/
Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner
_______________________________________________
Openvas-distro mailing list
Openvas-distro at wald.intevation.org
http://lists.wald.intevation.org/mailman/listinfo/openvas-distro


From jfs at computer.org  Tue Aug 26 12:13:36 2008
From: jfs at computer.org (Javier =?iso-8859-1?Q?Fern=E1ndez-Sanguino_Pe=F1a?=)
Date: Tue, 26 Aug 2008 12:13:36 +0200
Subject: [Openvas-distro] Uploading openvas-server and
	openvas-plugins	packages to Debian
In-Reply-To: <200808251630.26581.michael.wiegand@intevation.de>
References: <20080822030726.GA5941@javifsp.no-ip.org>
	<200808251433.31915.michael.wiegand@intevation.de>
	<200808251451.44484.waja@cyconet.org>
	<200808251630.26581.michael.wiegand@intevation.de>
Message-ID: <20080826101336.GB15826@javifsp.no-ip.org>

On Mon, Aug 25, 2008 at 04:30:26PM +0200, Michael Wiegand wrote:
> for example. Maybe you (or Javier) could have a look at those documents and 
> let me know if that would be feasible with the Debian packages we already 
> have?

Sorry, I don't have the time to look how Ubuntu uploads go. If you want to
ship 1.0.2 server packages there and you cannot wait for them to sync with
Debian you'll have to do it.

As for the 1.0.2 release, let's first see if the ftpmasters allow the package
(it currently is in the NEW queue). As soon as that is done we can upload a
new package upgrading the version in Debian to 1.0.2.

If the FTPmasters see any issue with the package and deny the entry to the
1.0.1 release then we should fix those and re-upload but this time using the
1.0.2 release.

Regards

Javier
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080826/6075e305/attachment.pgp

From michael.wiegand at intevation.de  Wed Aug 27 10:41:46 2008
From: michael.wiegand at intevation.de (Michael Wiegand)
Date: Wed, 27 Aug 2008 10:41:46 +0200
Subject: [Openvas-distro] Uploading openvas-server and openvas-plugins
	packages to Debian
In-Reply-To: <200808251451.44484.waja@cyconet.org>
References: <20080822030726.GA5941@javifsp.no-ip.org>
	<200808251433.31915.michael.wiegand@intevation.de>
	<200808251451.44484.waja@cyconet.org>
Message-ID: <200808271041.47295.michael.wiegand@intevation.de>

Am Montag, 25. August 2008 14:51:41 schrieb Jan Wagner:
> I don't know how the way goes at ubuntu. The only thin I know is, that if
> the package is in Debian, it maybe also get shipped in Ubuntu.

I researched this a little more and just finished talking to the Ubuntu MOTUs 
on freenode/#ubuntu-motu.

They are entering Feature Freeze tomorrow, but it sounds like they are willing 
to grant us a Feature Freeze Exception and to pick up -server and -plugins 
once they pass the Debian NEW queue.

Regards,

Michael

-- 
Michael Wiegand                                   OpenPGP key: D7D049EC
Intevation GmbH, Osnabr?ck                    http://www.intevation.de/
Amtsgericht Osnabr?ck, HR B 18998
Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner