Re: Request to join team

2024-06-24 Thread Raphael Hertzog
Hi, On Mon, 24 Jun 2024, Colin Watson wrote: > I'd like to join pkg-security-team on Salsa in order to add some > YubiHSM-related packages there (initially yubihsm-connector); Yubico do > publish Debian packages of these, but they could do with some > integration polish and it would be useful to h

Re: Tons of embedded code copies in library packages under the Debian Security Tools Team's umbrella

2021-10-28 Thread Raphael Hertzog
Hi Axel, this is a clear design choice of upstream and given that all those libraries are maintained by the same person (and that he is not providing any official API stability), I don't think it's really problematic. Also all those libraries are really small. Trying to package them separately wo

Re: Debian Packages

2021-08-03 Thread Raphael Hertzog
Hello, I saw Samuel already replied to the most important points. I want to add the following: - please contribute only packages that you are willing to maintain over some time, we don't want one-time contributions introducing new packages. One-time contributions are fine for bugfixes and ve

Re: Request to join the team

2021-08-03 Thread Raphael Hertzog
Hi, On Mon, 02 Aug 2021, Samuel Henrique wrote: > So to try to summarize our approach to the salsa group/org: We can add > people to it once they have made a few contributions and we're > confident that they can have permissions to push to any repo we own. Yes. > > See https://salsa.debian.org/h

Re: Request to join the team

2021-08-01 Thread Raphael Hertzog
Hello Samuel & Guilherme, Welcome in the team Guilherme! On Sat, 31 Jul 2021, Samuel Henrique wrote: > I have created the repo and gave you Salsa's maintainer role: > https://salsa.debian.org/pkg-security-team/seclists > > Can you also apply to join the org on Salsa? > https://salsa.debian.org/p

Re: Request for review/upload of regripper 3.0-1

2021-06-16 Thread Raphael Hertzog
Hi, On Sat, 12 Jun 2021, Jan Gru wrote: > Thank you again for reviewing the package and providing detailed feedback as > well as hints on the solution of the issues. > I already submitted a merge request containing my changes [5]. I hope, I > have addressed all issues in an adequate manner. I mer

Re: Request for review/upload of regripper 3.0-1

2021-06-08 Thread Raphael Hertzog
Hello, I have looked at regripper. Here are my comments/questions: In the README I see this: > The following Perl module files have been modified, and the modified versions > are > provided as part of this repo: > C:\Perl\site\lib\Parse\Win32Registry\WinNT\File.pm > C:\Perl\site\lib\Parse\Win32R

Re: Request to join the team

2021-04-26 Thread Raphael Hertzog
Hello Arnaud, On mar., 27 avril 2021, Arnaud Rebillout wrote: > I'd like to join. > > I've been working as a Kali Linux developer for a few months now. Part of my > job includes maintaining packages. Welcome in the team! You have been added to the pkg-security-team in salsa.debian.org. Cheers,

Re: Intro + Re: Heads up: Bug#981055: O: john -- active password cracking tool

2021-01-27 Thread Raphael Hertzog
Hi Axel, On Wed, 27 Jan 2021, Axel Beckert wrote: > Will wait a bit more for feedback from him before moving the john git > repo under the pkg-security-team umbrella. Ok. > So please add me to pkg-security-team on Salsa. Done. > > E.g. there is at least one RC bug (https://bugs.debian.org/9768

Re: Better communication and co-ordination for GVM (OpenVAS)

2021-01-27 Thread Raphael Hertzog
Hello Björn, On Wed, 20 Jan 2021, Björn Ricks wrote: > First of all let me introduce myself. I am long time free software > developer. For example at the German free software consulting company > Intevation at some KDE/Kolab project. Since five years I am working at > Greenbone and have become the

Re: Request to review and upload librtr 0.6.3-2

2021-01-18 Thread Raphael Hertzog
On Sat, 16 Jan 2021, Francisco Vilmar Cardoso Ruviaro wrote: > That's right Peter, pkg-config was missing, thanks! > > I think librtr[1] is now ready for review and upload. Uploaded. Thank you! -- ⢀⣴⠾⠻⢶⣦⠀ Raphaël Hertzog ⣾⠁⢠⠒⠀⣿⡁ ⢿⡄⠘⠷⠚⠋The Debian Handbook: https://debian-handbook.i

Re: Request to review and upload librtr 0.6.3-2

2021-01-08 Thread Raphael Hertzog
Hi, On Thu, 24 Dec 2020, Francisco Vilmar Cardoso Ruviaro wrote: > I fixed an RC bug [0] in librtr [1]. > > Please, review and upload. Adrian Bunk pointed out that your fix is clearly incorrect. Can you at least revert your change please ? It would be nice if you tried to understand your changes

Re: Help needed with plaso/dfvfs and their dependencies

2020-12-21 Thread Raphael Hertzog
On Mon, 21 Dec 2020, Francisco Vilmar Cardoso Ruviaro wrote: > I hastened and created the libcerror project [1], sorry. > Could you please delete it? Done. Cheers, -- ⢀⣴⠾⠻⢶⣦⠀ Raphaël Hertzog ⣾⠁⢠⠒⠀⣿⡁ ⢿⡄⠘⠷⠚⠋The Debian Handbook: https://debian-handbook.info/get/ ⠈⠳⣄ Debian Long

Re: Request to review and upload sleuthkit 4.10.1+dfsg-1~exp1

2020-12-20 Thread Raphael Hertzog
Hi, On Sat, 19 Dec 2020, Francisco Vilmar Cardoso Ruviaro wrote: > Dear security tools team, > > I prepared a new version of sleuthkit [1], release 4.10.1+dfsg. > > The version 4.10.1+dfsg introducing the ABI change (SONAME bump), > /usr/lib/*/libtsk.so.19.1.2 > /usr/lib/*/libtsk.so.19.1.3. It'

Re: Request to review and upload libvhdi_20201018-1

2020-12-15 Thread Raphael Hertzog
On Fri, 27 Nov 2020, Samuel Henrique wrote: > For reference, this was the ticket: > https://github.com/libyal/libvhdi/issues/15 > > I thought about this, as we have the option of performing the upload > without a transition. My conclusion is that we should get the opinion of > the release team on

Re: Help needed with plaso/dfvfs and their dependencies

2020-12-11 Thread Raphael Hertzog
Hello, On Thu, 10 Dec 2020, Francisco Vilmar Cardoso Ruviaro wrote: > Thanks for the clarification, this occurred because I downloaded another > file that does not contain the bundled libraries [1]. Unlike the file you > used [2]. > > [1] https://github.com/libyal/libluksde/archive/20200205.tar.g

Re: applying for salsa access to pkg-security-team

2020-12-07 Thread Raphael Hertzog
Hello, On Tue, 08 Dec 2020, Mo Zhou wrote: > Could you please add me (lumin) into the pkg-security-team? Done. Note that our packaging conventions are documented in https://wiki.debian.org/Teams/pkg-security > I'm interested in maintaining the "ImHex" hex editor within this team. An hex editor

Re: joining the team? want to let at least capstone to go

2020-12-07 Thread Raphael Hertzog
ll about, I don't really participated in any security-related > activities at least within Debian. > > What prompted me to join security-tools team is a suggestion by Raphael > Hertzog, after my email asking for a state of capstone package. Welcome in the team! The few conventions th

Re: Help needed with plaso/dfvfs and their dependencies

2020-12-06 Thread Raphael Hertzog
Hello Francisco, On Mon, 30 Nov 2020, Francisco Vilmar Cardoso Ruviaro wrote: > I raised some requirements for packaging libluksde, > > >* python3-libluksde: https://github.com/libyal/libluksde > > I worked on libcerror, if it is satisfactory, please review and upload, > thanks! > 1- https:

Help needed with plaso/dfvfs and their dependencies

2020-11-30 Thread Raphael Hertzog
Hello, I wanted to help a little bit to fix #971311 & #971308 related to the deprecation of PyCrypto but I have opened a can of worms. We need to package new upstream releases of dfvfs and plaso to fix those (and other RC bugs like #971149). But the new dfvfs requires 4 new packages: * python3-

Switch to KGB

2020-11-27 Thread Raphael Hertzog
Hello, the irker bot that we were using for IRC notifications has been down for a while so I switched all our repositories to use KGB (I used the script from https://salsa.debian.org/pkg-security-team/pkg-security-team). I updated the team's wiki page accordingly. Thanks to Unit193 for the sugge

Re: Request to join the team

2020-10-27 Thread Raphael Hertzog
Hello Francisco, On Fri, 23 Oct 2020, Francisco Vilmar Cardoso Ruviaro wrote: > having talked to Samuel Henrique, he has been my mentor and helped me > introduce > some packages to the team (bruteforce-wallet and stegcracker), so I would like > to join the team to help in any way possible, > > i

Re: Request to review and upload dfdatetime_20200824-1

2020-10-21 Thread Raphael Hertzog
Hello, On Sun, 18 Oct 2020, Samuel Henrique wrote: > Now if anybody tells me they're fine with advocating someone solely > based on the activity on this list, without sponsoring their uploads, > I can continue doing the reviews and we move the discussions to here. I'm fine with this. I would howe

Re: RFS: bully/1.4.00-1 [ITP] -- Implementation of the WPS brute force attack, written in C

2020-09-04 Thread Raphael Hertzog
Hi, I'm rather busy but I have noted to look into it if Samuel or someone else doesn't look into it soon. Cheers, On Wed, 02 Sep 2020, Karthik కార్తిక్ wrote: > Package: sponsorship-requests > Severity: wishlist > > Dear mentors, > > I am looking for a sponsor for my package "bully": > > * P

Re: help with sleuthkit symbols

2020-07-30 Thread Raphael Hertzog
On Wed, 29 Jul 2020, Eriberto wrote: > IMHO "is hard to maintain" is not a good argument. However... FWIW I agree with Samuel that there's a trade-off to consider and maintainability is among them. I wrote the symbols file support for dpkg and I agree that it's not necessarily a good idea to use i

Re: Bug#964399: Should ganglia be removed?

2020-07-28 Thread Raphael Hertzog
Hi, On Tue, 07 Jul 2020, Marcos Fouces wrote: > I also done some work on ganglia-web and ganglia-linux-modules packages > (also unpublished). > > I believe that it is still a good piece of software that deserve its > place on Debian so i would like to step up as uploader (co-uploaders > welcome!)

Re: Intro and Intent to Package

2020-07-03 Thread Raphael Hertzog
Hi, On Fri, 03 Jul 2020, Christian Blichmann wrote: > I understand that I first need to become a "Sponsored Maintainer" and that > my packaging will need thorough review before being considered for inclusion > in Debian. > Would the proper next steps be to file an ITP and request a Git repo on > S

Re: Request to join team

2020-06-16 Thread Raphael Hertzog
Hello, On Mon, 15 Jun 2020, constantine wrote: > To whom it may concern, > > I want to join to your precious security team for helping(any help) You will have to find out by yourself ways to help... it's not too hard if you are willing to do some research: https://wiki.debian.org/Teams/pkg-secur

Granting janitor bot direct commit rights ?

2020-04-28 Thread Raphael Hertzog
Hello, I have been approving more and more merge requests of the janitor bot[1] and I read recently that it's possible to grant commit rights to the bot so that I don't have to approve them manually. [1] example: https://salsa.debian.org/pkg-security-team/ccrypt/-/merge_requests/1 While I didn'

volatility3 in Debian?

2020-04-10 Thread Raphael Hertzog
Hello Eriberto, in https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=938797#46 you said that you were working on volatility3. Can you give us some updates? While Debian dropped volatility, we have kept it in Kali as we hoped to have volatility3 available as replacement soon. Can we help in some

Re: Bug#937521: pyrit: Python2 removal in sid/bullseye

2020-03-30 Thread Raphael Hertzog
On Mon, 30 Mar 2020, Sandro Tosi wrote: > great, thanks! (if you could grant me access to the Debian Security > Tools Packaging Team i could commit some of my changes directly, like > the upcoming drop of python-scapy) Done. Your access will expire at the end of May. Cheers, -- ⢀⣴⠾⠻⢶⣦⠀ Rapha

Re: Bug#937521: pyrit: Python2 removal in sid/bullseye

2020-03-30 Thread Raphael Hertzog
Hi, On Sun, 29 Mar 2020, Sandro Tosi wrote: > so maybe it's time to drop pyrit and it's only reverse dependency > wifite? Ack for pyrit. I requested the removal of the package from unstable. However, wifite works without pyrit. I uploaded a new version dropping the build-dependency and the sugge

Re: DD Ping - New release of websploit migrated to Python 3

2020-03-30 Thread Raphael Hertzog
Hi, On Sat, 21 Mar 2020, Marcos Fouces wrote: > I just uploaded a new release of websploit [0]. Upstream migrated it to > Python 3. > > Please, check and review (and give me upload rights if you want). Looks like SZ Lin took care of the upload. Cheers, -- ⢀⣴⠾⠻⢶⣦⠀ Raphaël Hertzog ⣾⠁⢠⠒⠀⣿⡁

Re: DD ping [ledger-wallets-udev]

2020-03-28 Thread Raphael Hertzog
Hi, On Fri, 27 Mar 2020, Stéphane Neveu wrote: > I made a new release of ledger-wallets-udev. Could you please review it ? > https://salsa.debian.org/pkg-security-team/ledger-wallets-udev Sorry for the delay. Reviewed and uploaded. What about trying to become a DM so that you can maintain that p

Re: Bug#922533: Review of proposed move of /var/log/account to /var/account

2020-03-28 Thread Raphael Hertzog
Hi, On Wed, 18 Mar 2020, Marcos Fouces wrote: > Any DD available for review and upload this new release. Uploaded! Cheers, -- ⢀⣴⠾⠻⢶⣦⠀ Raphaël Hertzog ⣾⠁⢠⠒⠀⣿⡁ ⢿⡄⠘⠷⠚⠋The Debian Handbook: https://debian-handbook.info/get/ ⠈⠳⣄ Debian Long Term Support: https://deb.li/LTS

Re: Requesting access to the team (and sharing my packages too!)

2020-03-27 Thread Raphael Hertzog
Hello Javier, On Fri, 27 Mar 2020, Javier Fernandez-Sanguino wrote: > I would like to request access to the pkg-security team and would also > like to add the security packages that I currently maintain (see > below) so they are managed by the overall team. Welcome in the team! You have been add

Re: DD ping [new release of polenum]

2020-02-11 Thread Raphael Hertzog
Hi, On Fri, 07 Feb 2020, Marcos Fouces wrote: > Hi team! > > I packaged a new release of polenum [0]. Could you review and upload? Uploaded it yesterday. Thanks. -- ⢀⣴⠾⠻⢶⣦⠀ Raphaël Hertzog ⣾⠁⢠⠒⠀⣿⡁ ⢿⡄⠘⠷⠚⠋The Debian Handbook: https://debian-handbook.info/get/ ⠈⠳⣄ Debian Long

Re: Joining to the Team

2020-02-05 Thread Raphael Hertzog
Hi, sorry for the delay in my answer. On Sun, 26 Jan 2020, eamanu wrote: > I would like join to the team :-) Nice, welcome ! > I plan help on Python 2 support remove and import Kali package  to Debian. > Also, I would like to package new security related tools. > > My salsa user is @eamanu-gue

Re: request to join the team

2020-02-03 Thread Raphael Hertzog
Hi Andrej, On Sun, 02 Feb 2020, Andrej Shadura wrote: > Having chatted with Sebastian at FOSDEM, I thought I could help maintain > radare and friends, so I’d like to join the team for this purpose. Welcome! You have been added to the salsa group. Have a look at https://wiki.debian.org/Teams/pkg-s

Re: Our policy around gbp.conf

2020-02-03 Thread Raphael Hertzog
On Thu, 30 Jan 2020, Samuel Henrique wrote: > Just a heads up that I will be pushing this before the end of FOSDEM. Thanks. It would be nice to have a script to configure our repositories with that kind of change. In Kali I have this: https://gitlab.com/kalilinux/tools/packaging/blob/master/bin/a

Re: Request to join the Salsa

2020-01-28 Thread Raphael Hertzog
Hello Fardin, On Tue, 28 Jan 2020, Optimous Prime wrote: > I'm Fardin Allahverdinazhand, developer of the "websploit framework" > project. > > I'd like to join the team to do some maintenance on "websploit", Marcos has > helped me > > to build my own package and we are in touch now. > > My Sal

Re: Access to Salsa please? Maintaining pyrit(-opencl)

2020-01-28 Thread Raphael Hertzog
Hello Dmitry, On Tue, 28 Jan 2020, Dmitry Smirnov wrote: > I'd like to join the team to eventually do some maintenance on "pyrit" > package as my package "pyrit-opencl" has been incorporated into "pyrit" > upstream. You have been added to the salsa group. Have a look a the few team rules: https

Re: Request to review and upload libpff_20180714-2

2020-01-24 Thread Raphael Hertzog
Hi, On Mon, 20 Jan 2020, Aleksey Kravchenko wrote: > I've fixed libpff dependency on Python 2 (Closes #936901) and lintian > warnings, > > producing the libpff_20180714-2 package [1]. > > Please review it and upload! Done. I just dropped the "--with autoreconf" which is no longer required with

Re: Request to review and upload ssldump_1.1-1

2020-01-24 Thread Raphael Hertzog
Hi, On Wed, 22 Jan 2020, Aleksey Kravchenko wrote: > I've prepared ssldump package [1] with new upstream release. > > Please review it and upload. Done. I have no special comments to make, good job. Cheers, -- ⢀⣴⠾⠻⢶⣦⠀ Raphaël Hertzog ⣾⠁⢠⠒⠀⣿⡁ ⢿⡄⠘⠷⠚⠋The Debian Handbook: https://debi

Re: Like to join

2020-01-22 Thread Raphael Hertzog
Hello, On Wed, 22 Jan 2020, factoreal wrote: > I would like to join to this team and work on some things like testing, > debugging, and building for some packages.  Please guide me. Thanks for your interest but this a bit too vague for us to help you. You can have a look at https://tracker.debian

Re: Joining the team

2020-01-22 Thread Raphael Hertzog
Hi Balint, On Wed, 22 Jan 2020, Bálint Réczey wrote: > I'd like to join the team to do QA-like work on some packages. You have been added to the salsa group. Can you say a bit more about your plans? Cheers, -- ⢀⣴⠾⠻⢶⣦⠀ Raphaël Hertzog ⣾⠁⢠⠒⠀⣿⡁ ⢿⡄⠘⠷⠚⠋The Debian Handbook: https://debia

About your NMUs on pkg-security packages

2020-01-21 Thread Raphael Hertzog
Hello Adrian, I saw all the delayed NMUs that you prepared for packages in the pkg-security team. Thanks for this. Please go ahead and reschedule them so that they are uploaded immediately. Bonus points if you can apply your patches to the git repositories: I granted you access to the team (acce

Re: Our policy around gbp.conf

2019-12-30 Thread Raphael Hertzog
Hi, On Mon, 30 Dec 2019, SZ Lin (林上智) wrote: > I'm curious about the benefit of putting gbp.conf in each package > instead of using ~/.gbp.conf. It's painful to have to update this file > once the team decided to change the default configuration afterward, and > I didn't see any extraordinary sett

Re: Our policy around gbp.conf

2019-12-30 Thread Raphael Hertzog
Hi, On Mon, 30 Dec 2019, Samuel Henrique wrote: > In the section "Git packaging tool and repository layout", regarding the > suggestion to use ~/.gbp.conf, I wish to propose us to have a default > debian/gbp.conf in debian/master of all of our packages. Yeah, we should do that. > B) cleaner = /b

Re: Request to review and upload rhash_1.3.9-1

2019-12-28 Thread Raphael Hertzog
Hi, On Tue, 17 Dec 2019, Aleksey Kravchenko wrote: > Hello team, > > I've prepared package with RHash new release v1.3.9 [1]. > > Please review and upload it! Done! I'd like to point out that your git commit messages are often not following the usual conventions: first line should be a summary,

Re: Status of libewf, transition to handle

2019-12-03 Thread Raphael Hertzog
On Sat, 30 Nov 2019, Aleksey Kravchenko wrote: > Your help will be greatly appreciated ;) So I forced pushed debian/master to match unstable and I made further cleanups and changes and I uploaded the result. I also force pushed the upstream branch to match the latest state of debian/master. I lef

Re: Status of libewf, transition to handle

2019-11-29 Thread Raphael Hertzog
On Fri, 29 Nov 2019, Aleksey Kravchenko wrote: > The work in libewf salsa repository was interrupted by upstream > maintainer Joachim Metz. Do you have any pointer to this discussion? > He was against publishing libewf-experimental-20171104 [1] into debian > unstable and insisted on using legacy

Status of libewf, transition to handle

2019-11-28 Thread Raphael Hertzog
Hello, I wanted to upload all the packages that still have a bad maintainer field (old list) and libewf is among them. But there's a new upstream version available in experimental. That version was prepared in debian/experimental (note that the tag has not been pushed) but in parallel I see other

Re: DD Ping - New arp-scan release

2019-11-27 Thread Raphael Hertzog
Hi, On Sat, 16 Nov 2019, Marcos Fouces wrote: > Could any DD review and upload? Done. Cheers, -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: https://www.freexian.com/services/debian-lts.html Learn to master Debian: https://debian-handbook.info/get/

Re: DD Ping - New recon-ng release

2019-11-27 Thread Raphael Hertzog
Hi, On Sat, 16 Nov 2019, Marcos Fouces wrote: > I packaged a new release of recon-ng [0]. It should not be uploaded > directly due to new python modules dependencies that i also packaged > [1] [2]. > > Could any DD review and upload them: > > [0] https://salsa.debian.org/pkg-security-team/recon-

Re: [request-for-help] o-saft maintenance and openssl

2019-11-06 Thread Raphael Hertzog
Hi, On Sun, 13 Oct 2019, Samuel Henrique wrote: > You see, o-saft needs an old version of openssl to be able to check for > old ssl things (ciphers etc.). > > I know there has been some talk about getting an "openssl-insecure" > package for the testssl.sh[0] package for the same reason. I think w

Re: Objections to enable salsa-ci in our packages?

2019-09-30 Thread Raphael Hertzog
Hi, On Sun, 29 Sep 2019, Samuel Henrique wrote: > If nobody objects, I will be enabling and pushing salsa-ci.yml to all of > our packages soon. I'm fine with it, but please make sure to skip the CI for the initial push. Otherwise you will have grumpy salsa admins. They asked the python team to no

Re: Fwd: reducing volument of KGB notifications on IRC

2019-08-18 Thread Raphael Hertzog
Hi, On Sun, 18 Aug 2019, Samuel Henrique wrote: > What do you say we do the same on our channel? We are not using KGB but irker and it's not so verbose... it's already showing a limited number of commits for each push (3 currently). And for now, we haven't enabled salsa-ci on our repositories so

Re: Upload to experimental for dnsrecon

2019-04-25 Thread Raphael Hertzog
Hi, On Mon, 15 Apr 2019, Samuel Henrique wrote: > Perfect, if by that time I haven't written an advocacy for your > application, ping me and I will look into that, I reckon Raphaël is gonna > write one already but you will need two. > I have some stuff from DebConf19 to work on during the followin

Re: Upload to experimental for dnsrecon

2019-04-12 Thread Raphael Hertzog
Hi, On Fri, 05 Apr 2019, Marcos Fouces wrote: > Sophie showed interest to include the new dnrecon [0] release in Kali. > Could any DD review and upload it to experimental? Done, but I uploaded it to unstable. The chances of having to deal with an RC bug on this package are low and it's a leaf pac

Re: DD ping - Marcos Ourense Clave

2019-03-14 Thread Raphael Hertzog
Hi, On Sun, 24 Feb 2019, Marcos Fouces wrote: > Hellos Samuel > > When i sent this email, i still did not fixed the bug you refer > (#922563) but only the first one (#864242). I share your concern about this. > > Create a separate branch without this change would be a good idea? We're now too l

Re: tomb: RC bug fixed, please review and upload

2019-03-14 Thread Raphael Hertzog
Hello Sven, On Sun, 10 Mar 2019, Sven Geuer wrote: > I fixed bug #924042 in tomb [1]. Please review and upload. Unfortunately we're now in deep freeze and we should only upload mimimal set of changes. You have made more changes than just adding the missing recommends/suggests so the package can't

Re: pyrit package

2019-02-07 Thread Raphael Hertzog
Hi, On Thu, 07 Feb 2019, Sophie Brun wrote: > > On 6/2/19 17:57, Christian Kastner wrote: > >> On 2019-02-05 16:27, Sophie Brun wrote: > Please note that the problem itself is with the autopkgtest of the > package, build is ok, you will only spot it if you enable such tests. > That

Re: pyrit package

2019-02-04 Thread Raphael Hertzog
Hi, On Sun, 03 Feb 2019, Christian Kastner wrote: > Seeing as master is only a few hours old, and hasn't been tagged yet > (and probably not even seen yet), I'd even consider rebasing master back > to 0.4.0-8 and starting the merge over, on a separate branch, and > > (1) Carrying out the upstre

Re: RFS: arno-iptables-firewall/2.0.3-1 [ITA]

2019-01-02 Thread Raphael Hertzog
Hi, On Mon, 31 Dec 2018, Sven Geuer wrote: > Regarding joining the group I seem to miss the obvious. I didn't see > how to do so on [2]. Please advice. I have added you to the team (there's no button to request to join, you have to ask here, I just clarified this on the wiki page). Cheers, -- R

Script to checkout all repositories

2018-11-25 Thread Raphael Hertzog
Hello, I created a new "pkg-security-team" git repository with some helper scripts to manage our repositories. $ git clone g...@salsa.debian.org:pkg-security-team/pkg-security-team.git $ sudo apt install mr $ bin/setup-team-repos Most notably bin/setup-team-repos will install the "mrconfig" file

Re: DD Ping (II)

2018-11-23 Thread Raphael Hertzog
Hi, On Thu, 22 Nov 2018, Marcos Fouces wrote: > I did some housekeeping on nmapsi4 package [1]. > > Any DD could review and upload it? (if appropiate) Done. Cheers, -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: https://www.freexian.com/services/debian-lts.html Learn to master Debi

Re: DD Ping

2018-11-23 Thread Raphael Hertzog
Hi, On Wed, 21 Nov 2018, Marcos Fouces wrote: > I did some work on ncrack package [1] mostly based on nmap packaging > done by Lukas. > > Any DD could review and upload it? (if appropiate) Done and uploaded. I just tweaked the copyright file a little bit to add a comment in its proper place (ins

Re: Orphaning outguess

2018-11-08 Thread Raphael Hertzog
Hi Eriberto, On Thu, 25 Oct 2018, Eriberto Mota wrote: > I am considering orphaning outguess. There are two bugs breaking the > package (#882538 and #909442). > > Do you have some objection? It looks like the issues have been solved in the mean time and this request is no longer relevant, right?

Re: [nmap] polkit on Recommends vs Depends

2018-11-01 Thread Raphael Hertzog
On Wed, 31 Oct 2018, Samuel Henrique wrote: > I think it's safe to downgrade to Recommends, as most users install > recommends anyway. > > I will do it soon if there isn't any objections to this. Yeah, fine for me. Cheers, -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: https://www.f

Re: Working as a team, let's take care of all problems

2018-10-25 Thread Raphael Hertzog
Hi, On Thu, 25 Oct 2018, Aleksey Kravchenko wrote: > One problem is apt-cache rdepends shows that only forensics-all depends > on libpff packages. May be apt-cache skipped some contrib packages. > Should we continue to support it? Bug 764527 [4] says that some people > need it. The source package

Re: librtr: Request for review / upload (Re: Git repository for librtr)

2018-10-24 Thread Raphael Hertzog
Hi, On Mon, 22 Oct 2018, Samuel Henrique wrote: > d/copyright: > * it looks like there are two template lines on the file, #9 and #10 > * there are files not listed on d/copyright, I noticed at least two > of them: scripts/checkpatch.pl and cmake/modules/FindGcov.cmake, > please do a general rev

Re: DD Ping - New t50 release

2018-09-28 Thread Raphael Hertzog
Hi, On Tue, 25 Sep 2018, Marcos Fouces wrote: > I packaged a new upstream release of t50. Please, could you review and > upload if appropiate?. Done. Note that I switched the watch file to use sourceforge.net so that we can use the upstream PGP signature. Cheers, -- Raphaël Hertzog ◈ Debian Dev

Re: Removing lcrack from Debian ?

2018-09-17 Thread Raphael Hertzog
Hello Tiago, do you still intend to take care of this removal request ? Cheers, On Tue, 28 Aug 2018, Raphael Hertzog wrote: > Hi Tiago, > > On Sat, 25 Aug 2018, Tiago Bortoletto Vaz wrote: > > Let me know if you want me to ask for removal + update forensics-extra > > packa

Re: Is "pipemeter" a team maintained package?

2018-09-06 Thread Raphael Hertzog
Hi, On Thu, 06 Sep 2018, SZ Lin (林上智) wrote: > I saw "pipemeter" [1] was listed in team tracker website [2]; however, > there is no "Debian Security Tools" in Maintainer field and I don't > think this package which shows the speed of data moving from input to > output is related to pkg-security. >

Re: Getting sandsifter in Debian

2018-09-06 Thread Raphael Hertzog
Hi, On Thu, 06 Sep 2018, SZ Lin (林上智) wrote: > Please feel free to review or modify this, I will upload the package > before the end of the week if there is no any issues. > > [1] https://salsa.debian.org/pkg-security-team/sandsift/ > [2] https://github.com/rigred/sandsifter/issues/3 I left a co

Re: [pkg][dhcpig] ready for review

2018-09-03 Thread Raphael Hertzog
Hi, On Mon, 03 Sep 2018, p...@reseau-libre.net wrote: > I've updated dhcpig to suppress the dependency to go-md2man. This > allows the build on non-linux hosts (hurd, kfreebsd...). If any of the > DDs have some time to review the update ? Done and uploaded. Cheers, -- Raphaël Hertzog ◈ Debian D

Re: Removing lcrack from Debian ?

2018-08-28 Thread Raphael Hertzog
Hi Tiago, On Sat, 25 Aug 2018, Tiago Bortoletto Vaz wrote: > Let me know if you want me to ask for removal + update forensics-extra > package. Sure, please go ahead. I have plenty to do with the upload of all our packages... Cheers, -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: htt

Re: Working as a team, let's take care of all problems

2018-08-25 Thread Raphael Hertzog
Hi, On Sat, 25 Aug 2018, Giovani Ferreira wrote: > With the merging of forensics-devel and pkg-security I got lost within the > changes in the communication and stopped receiving some notifications about > my packages. Due to my job being quite hard in recent months I left my > packages in back

Re: Please push missing commits for forensics-extra and hashrat

2018-08-25 Thread Raphael Hertzog
Hi, On Sat, 25 Aug 2018, Giovani Ferreira wrote: > > There are similar problems with the hashrat package that you uploaded > > too. > > I think these 2 commits will be lost, is there a way to fix this? It depends on what you have to do. If you worked in git to prepare your last upload and and h

Please push missing changes grr-client-templates/libevt/nmap

2018-08-25 Thread Raphael Hertzog
Hello Hilko, the git repositories of grr-client-templates, libevt and nmap are lacking the changes (and tags) corresponding to your last upload(s). Can you push them? Thank you. -- Raphaël Hertzog ◈ Writer/Consultant ◈ Debian Developer Discover the Debian Administrator's Handbook: → https://de

Removing lcrack from Debian ?

2018-08-25 Thread Raphael Hertzog
Hello, I would like to suggest to remove lcrack from Debian. The software has not evolved since 2004 and upstream website has disappeared. There are better alternatives to crack passwords such as hashcat and john. However forensics-extra does depend on it, it would have to be updated first. Are

Please push missing commits for forensics-extra and hashrat

2018-08-25 Thread Raphael Hertzog
Hello Giovani, it looks like that you forgot to push your changes from your git repository for the forensics-extra 1.13 upload: https://salsa.debian.org/pkg-security-team/forensics-extra Beware there are two commits on top of 1.12 and it's unlikely that you have them in your history since they we

Please push missing commits to chaosreader git repository

2018-08-25 Thread Raphael Hertzog
Hello Joao, I noticed that the last update of chaosreader 0.96-3 was not committed/pushed to the git repository. Can you fix that? http://salsa.debian.org/pkg-security-team/chaosreader Beware there are two commits on top of 0.96-2 and it's unlikely that you have them in your history since they w

Re: Working as a team, let's take care of all problems

2018-08-25 Thread Raphael Hertzog
s you should use By preparing the package I mean: - building the package - fixing lintian errors/warnings - maybe handling easy open bugs - testing the updated package - finalizing the changelog entry - submitting your pull request Cheers, > On Fri, Aug 24, 2018 at 2:28 AM Raphael Hertzog wrote: &

Working as a team, let's take care of all problems

2018-08-23 Thread Raphael Hertzog
Hello everybody, I know that most teams in Debian are understaffed but I have the feeling that we are not doing very well with our packages. There are a few maintainers who are taking good care of their own packages but we are not enough persons caring about the long tail of packages that have no

Re: DD ping - New arp-scan release

2018-08-21 Thread Raphael Hertzog
Hello Marcos, On Thu, 02 Aug 2018, Marcos Fouces wrote: > I uploaded a new package with a newer upstream release of arp-scan [0]. > > Could you check it? I fixed some lintian errors (see below) and I uploaded the result. I: arp-scan source: out-of-date-standards-version 4.1.5 (released 2018-07-

Re: ccrypt 1.11-1

2018-08-21 Thread Raphael Hertzog
Hi, On Fri, 17 Aug 2018, Alexander Kulak wrote: > For ccrypt 1.11, I believe upload after 20th is ok. Done. > It would be nice if you had time before the buster froze. We still have until end of the year for this :) Cheers, -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: https://ww

Re: ccrypt 1.11-1

2018-08-11 Thread Raphael Hertzog
Hi, On Fri, 10 Aug 2018, Alexander Kulak wrote: > > please consider uploading ccrypt 1.11-1. > > Changes: > >new upstream version, > >autotools and man formatting patches are no longer necessary, > >updated to latest standards. > > Is there any problems with this release? I don't thi

Re: Openscap-daemon: python3.7 incompatibility

2018-07-25 Thread Raphael Hertzog
On Wed, 25 Jul 2018, p...@reseau-libre.net wrote: > The package has been updated. build, lintian and piuparts are ok. I've > updated the salsa repository for review. If you ok with this I can upload > this evening. Ah, I forgot to push my changes, sorry. Anyway your changes are OK, here are the on

Re: Openscap-daemon: python3.7 incompatibility

2018-07-25 Thread Raphael Hertzog
Hi, On Wed, 25 Jul 2018, p...@reseau-libre.net wrote: > I took a look on current upstream release, the bug is already patched in the > future 0.1.11. > We just have to wait for this release. You don't have to wait. You can just apply the relevant patch via debian/patches/: https://github.com/Open

Re: Openscap-daemon: python3.7 incompatibility

2018-07-25 Thread Raphael Hertzog
Hi Phil, moving the discussion to the mailing list (instead of the tracker team). On Wed, 25 Jul 2018, p...@reseau-libre.net wrote: > After review of the OpenSCAP Daemon bug (#904371), which is an > incompatibility of it with the python 3.7 version. I have 2 questions: > > - the associated bug o

Re: Salsa template

2018-07-23 Thread Raphael Hertzog
On Sun, 22 Jul 2018, Samuel Henrique wrote: > Has anybody had a look at what we could do with these? If we could > generate a template for our team with all the hooks ready? > I'm not sure what kind of things can be set up with a template. > > I can give a further look if nobody has done so. I ha

Re: ccrypt 1.10-7

2018-07-21 Thread Raphael Hertzog
Hello, On Fri, 13 Jul 2018, Alexander Kulak wrote: > please consider uploading ccrypt 1.10-7. > Change: > fix removing obsoleted conffile (closes: #893687). Done, uploaded. Cheers, -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: https://www.freexian.com/services/debian-lts.html L

Re: Removal request of ~broken~ repositories

2018-07-21 Thread Raphael Hertzog
Hi, On Fri, 20 Jul 2018, Samuel Henrique wrote: > Could somebody with Owner role remove the following repositories? > > https://salsa.debian.org/pkg-security-team/cowpatty-REMOVE > https://salsa.debian.org/pkg-security-team/wpscan-remove Done. Cheers, -- Raphaël Hertzog ◈ Debian Developer Sup

Re: brutespray / curvedns / ledger-wallets-udev updates

2018-07-08 Thread Raphael Hertzog
Hello Stéphane, On Sat, 07 Jul 2018, Stéphane Neveu wrote: > Hi all ! > I've updated brutespray, curvedns to correct bugs 903076 and 903064 > and also ledger-wallets-udev (updated Build-Depends: ruby-ronn -> > ronn) Thanks for this. A few comments: * the changelog entries that you added were mal

Re: Broken URL for setting tagpending integration on salsa

2018-06-19 Thread Raphael Hertzog
Hello Samuel, On Sun, 10 Jun 2018, Samuel Henrique wrote: > >URL: https://webhook.salsa.debian.org/tagpending/ > >(replace by the name of the source package) > > > But that URL does not work, for example: > https://webhook.salsa.debian.org/tagpending/mdk3 > gives me: > > Not Found Why d

Re: Update openscap-daemon

2018-05-25 Thread Raphael Hertzog
On Fri, 25 May 2018, Pierre Chifflier wrote: > Indeed, the patch is part of openscap, and the files are now present in > libopenscap8 (starting from 1.2.16-2): Ok, I got the details wrong but the initial problem is still present. The autopkgtest tests are not passing: https://ci.debian.net/data/au

Re: Update openscap-daemon

2018-05-25 Thread Raphael Hertzog
expecting you to grab this patch and include it in the package. But from a cursory look your last two commits do not include such a change. Can you fix this please ? Thank you in advance. > Le 24/05/2018 à 20:40, Raphael Hertzog a écrit : > > Hello Philippe, > > > > can

Re: Update openscap-daemon

2018-05-24 Thread Raphael Hertzog
Hello Philippe, can we get the bug fixed in the Debian package and get a release out before the package gets removed from testing ? TIA. On Thu, 03 May 2018, p...@reseau-libre.net wrote: > Thanks Pierre ! > > This should resolve the openscap-daemon bug. I'll check that oscapd works > properly.

  1   2   >