--- openvas-libnasl-2.0.2.orig/debian/README.source +++ openvas-libnasl-2.0.2/debian/README.source @@ -0,0 +1,3 @@ +We use dpatch for patch handling inside our package(s). Please see +/usr/share/doc/dpatch/README.source.gz (if you have installed dpatch) for +documentation about dpatch. --- openvas-libnasl-2.0.2.orig/debian/compat +++ openvas-libnasl-2.0.2/debian/compat @@ -0,0 +1 @@ +5 --- openvas-libnasl-2.0.2.orig/debian/watch +++ openvas-libnasl-2.0.2/debian/watch @@ -0,0 +1,3 @@ +version=3 +http://wald.intevation.org/frs/?group_id=29 \ + /frs/download.php/.*/openvas-libnasl-(.*).tar.gz --- openvas-libnasl-2.0.2.orig/debian/libopenvasnasl2.install +++ openvas-libnasl-2.0.2/debian/libopenvasnasl2.install @@ -0,0 +1 @@ +usr/lib/lib*.so.* --- openvas-libnasl-2.0.2.orig/debian/libopenvasnasl2.dirs +++ openvas-libnasl-2.0.2/debian/libopenvasnasl2.dirs @@ -0,0 +1,2 @@ +usr/lib +usr/share/doc/libopenvasnasl2 --- openvas-libnasl-2.0.2.orig/debian/libopenvasnasl2-dev.install +++ openvas-libnasl-2.0.2/debian/libopenvasnasl2-dev.install @@ -0,0 +1,7 @@ +usr/include/* +usr/lib/lib*.a +usr/lib/lib*.so +usr/share/man/man1/openvas-libnasl-config.1 +usr/share/man/man1/openvas-nasl.1 +usr/bin/openvas-libnasl-config +usr/bin/openvas-nasl --- openvas-libnasl-2.0.2.orig/debian/libopenvasnasl2-dev.dirs +++ openvas-libnasl-2.0.2/debian/libopenvasnasl2-dev.dirs @@ -0,0 +1,2 @@ +usr/lib +usr/include --- openvas-libnasl-2.0.2.orig/debian/control +++ openvas-libnasl-2.0.2/debian/control @@ -0,0 +1,45 @@ +Source: openvas-libnasl +Section: libs +Priority: optional +Maintainer: Debian OpenVAS Maintainers +Uploaders: Tim Brown , Javier Fernandez-Sanguino Pen~a , Jan Wagner +Build-Depends: debhelper (>= 5), autotools-dev, libopenvas2-dev (>= 2.0.4) , libgpgme11-dev (>= 1.1.2), bison, libpcap-dev, libgcrypt11-dev, libgnutls-dev, libglib2.0-dev, dpatch +Homepage: http://www.openvas.org/ +Vcs-Browser: http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-libnasl/packaging/debian/?root=openvas +Vcs-Svn: https://svn.wald.intevation.org/svn/openvas/trunk/openvas-libnasl/packaging/debian/ +Standards-Version: 3.8.3 + +Package: libopenvasnasl2-dev +Section: libdevel +Architecture: any +Depends: libopenvasnasl2 (= ${binary:Version}), ${shlibs:Depends}, libopenvas2-dev (>= 2.0.1) , libgpgme11-dev (>= 1.1.2), libpcap-dev, libgcrypt11-dev, libgnutls-dev +Replaces: libopenvasnasl1-dev +Conflicts: libopenvasnasl1-dev +Description: OpenVAS static libraries and headers + The OpenVAS Security Scanner is a security auditing tool. It makes + possible to test security modules in an attempt to find vulnerable + spots that should be fixed. + . + It is made up of two parts: a server, and a client. The server/daemon, + openvasd, is in charge of the attacks, whereas the client, + OpenVAS-Client, provides the user a nice X11/GTK+ interface. + . + This package contains the required static libraries, headers, and + the openvas-config script. + +Package: libopenvasnasl2 +Section: libs +Architecture: any +Depends: ${shlibs:Depends}, ${misc:Depends} +Replaces: libopenvasnasl1 +Conflicts: libopenvasnasl1 +Description: OpenVAS shared libraries + The OpenVAS Security Scanner is a security auditing tool. It makes + possible to test security modules in an attempt to find vulnerable + spots that should be fixed. + . + It is made up of two parts: a server, and a client. The server/daemon, + openvasd, is in charge of the attacks, whereas the client, + OpenVAS-Client, provides the user a nice X11/GTK+ interface. + . + This package contains the required shared libraries. --- openvas-libnasl-2.0.2.orig/debian/copyright +++ openvas-libnasl-2.0.2/debian/copyright @@ -0,0 +1,110 @@ +This package was debianized by Tim Brown on +Tue, 05 Feb 2008 23:29:47 +0000. + +It was downloaded from http://www.openvas.org/ + +Upstream Author: OpenVAS + +Copyright: + + - Libnasl library: + * Copyright (C) 1999 Renaud Deraison + * Copyright (C) 2002 - 2004 Michel Arboi and Renaud Deraison + * Copyright (C) 2002 - 2005 Tenable Network Security + * Copyright (C) 2004 Michel Arboi + * Copyright (C) 2006 Free Software Foundation, Inc. [regex] + * Copyright (C) 2007 Intevation GmbH [nasl_signature] + * Copyright (C) Andrew Tridgell 1992-2000 [hmacmd5] + * Copyright (C) Luke Kenneth Casson Leighton 1996-2000 [hmacmd5] + +Other copyrights: + + - Autoconf: + Copyright (C) 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, + 2000, 2001, 2002, 2003, 2004, 2005, 2006 Free Software Foundation, + Inc. + +Authors: + + - Libnasl library: + + * Renaud Deraison + * Michael Arboi + * Jan-Oliver Wagner + * Andrew Tridgell + * Luke Kenneth Casson Leighton + * Bernhard Herzog + * Chandrashekhar B + * Javier Fernandez-Sanguino + * Michael Wiegand + * Tim Brown + +License: + +This package holds software with three different licenses: + +- GNU General Public License version 2 or later: the build scripts, hmacmd5 + and nasl_signature source +- GNU General Public License version 2: the regex source +- GNU General Public License version 2 with an OpenSSL linking exemption: + the majority of the library itself + +The following text explains which licenses apply to which parts of the code. In +case of doubt the interested party should review the copyright headers of the +affected files. + +The license for most of the software in this package is the following: + + This software is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 2 of the License. + + This software is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this package; if not, write to the Free Software + Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA + +Notice that some parts of the software (source code files) are available +at a GPL version 2 or (at your choice) a later version, as described above. + +On Debian systems, the complete text of the GNU General +Public License can be found in `/usr/share/common-licenses/GPL-2'. + +In addition, as a special exception, the copyright holders give +permission to link the code of portions of this program with the +OpenSSL library under certain conditions as described in each +individual source file, and distribute linked combinations +including the two. + +The Debian package is not compiled using this library but uses the GnuTLS +library available in the Debian archive (libgnutls26). This is because +the OpenSSL library linking exemption was not uniformly applied to all +parts of the original pre-fork Nessus code base, but only nessus-client +and libnasl2 despite the aggregate work needing SSL support. + +You must obey the GNU General Public License in all respects +for all of the code used other than OpenSSL. If you modify +file(s) with this exception, you may extend this exception to your +version of the file(s), but you are not obligated to do so. If +you do not wish to do so, delete this exception statement from your +version. If you delete this exception statement from all source +files in the program, then also delete it here. + +include/config.h.in make reference to PKT_LICENSE. This file was not +present in Nessus and the file not shipped with Nessus either. The +PKT_LICENSE was not found via Internet search engines nor is found +the software "pkt_forge" which seems to be origin. In fact it is said +that pkt_forge formed a part of NASL. Thus we do believe it is a +accidental left-over, but we do not have a clearifing statement by the +author. + +The Debian packaging is licensed under the GPL-3, and + Copyright (c) 2007, Tim Brown + Copyright (c) 2008, 2009 Jan Wagner + +On Debian systems, the complete text of the GNU General +Public License version 3 can be found in `/usr/share/common-licenses/GPL-3'. --- openvas-libnasl-2.0.2.orig/debian/changelog +++ openvas-libnasl-2.0.2/debian/changelog @@ -0,0 +1,146 @@ +openvas-libnasl (2.0.2-2.1) unstable; urgency=low + + * Non-maintainer upload. + * Stop shipping libtool la files in binary packages. Closes: #610154 + http://wiki.debian.org/ReleaseGoals/LAFileRemoval + + -- Andreas Metzler Sat, 09 Apr 2011 13:50:52 +0200 + +openvas-libnasl (2.0.2-2) unstable; urgency=low + + * Add README.source + * add 10_fix_gpgme.dpatch to prevent openvasd to secfault when using gpgme + with revent versions + + -- Jan Wagner Thu, 17 Sep 2009 10:11:00 +0200 + +openvas-libnasl (2.0.2-1) unstable; urgency=low + + * New upstream release + * Raise build-dep of libopenvas2-dev to (>= 2.0.4) + * relicense packaging to GPL-3 + * Bump Standards-Version to 3.8.3, no changes needed + + -- Jan Wagner Wed, 19 Aug 2009 13:52:04 +0200 + +openvas-libnasl (2.0.1-2) unstable; urgency=low + + [ Javier Fernandez-Sanguino ] + * Add debian/watch to detect when a new version is available at + wald.intevation.org + + [ Jan Wagner ] + * Bump Standards-Version to 3.8.2, no changes needed + + -- Jan Wagner Tue, 28 Jul 2009 02:27:41 +0200 + +openvas-libnasl (2.0.1-1) unstable; urgency=low + + [ Jan Wagner ] + * New upstream release + * Update the changelog + * include dpatch infrastructure + * add 10_fix_gcrypt.dpatch + + [ Michael Wiegand ] + * Build-Depend on libpcap-dev instead of libpcap0.8-dev and rais to + libopenvas2-dev (>= 2.0.1) + * Set the value for sysconfdir to /etc + + -- Jan Wagner Sat, 09 May 2009 13:00:40 +0200 + +openvas-libnasl (2.0.0-2) unstable; urgency=low + + * Brown paper bug upload: restore changes introduced since 1.0.1-1 + * Make proper versioned binary packages for this library + * Add a Conflicts: vs libopenvasnasl1-dev + + -- Javier Fernandez-Sanguino Pen~a Thu, 15 Jan 2009 22:25:42 +0100 + +openvas-libnasl (2.0.0-1) unstable; urgency=low + + * New upstream release + + -- Javier Fernandez-Sanguino Pen~a Fri, 02 Jan 2009 01:21:09 +0100 + +openvas-libnasl (2.0.0.beta2-1) UNRELEASED; urgency=low + + * New upstream release + + -- Tim Brown Sat, 15 Nov 2008 17:09:58 +0000 + +openvas-libnasl (2.0.0.beta1-1) UNRELEASED; urgency=low + + * New upstream release + * Refreshed auto* (aclocal && libtoolize --copy --force) as libraries were + being created with *no* extension + * Cleaned up the rules + * Updated copyright + + -- Tim Brown Sun, 12 Oct 2008 19:53:32 +0100 + +openvas-libnasl (1.0.1-1) unstable; urgency=low + + * New upstream release + * Set Debian Maintainers Mailing List as Maintainer + * Add Tim and myself to Uploaders + * Add Vcs-Headers + * Bump Standards Version to 3.8.0, no changes needed + * Setting version build dependency of libopenvas1-dev to (>= 1.0.2) + * Remove trailing whitespaces from EOL and EOF in debian/* + * Also depend on libopenvas1-dev (>= 1.0.2) , libgpgme11-dev (>= 1.1.5), + libpcap0.8-dev, libgcrypt11-dev, libgnutls-dev for -dev + * Remove dependency on libopenvas1 for libopenvasnasl1 and make use of + ${misc:Depends} + * Remove debian/*.dirs since unneeded + + -- Jan Wagner Fri, 04 Jul 2008 14:45:39 +0200 + +openvas-libnasl (1.0.0-6) unstable; urgency=low + + * Replaced nasl/lfind.c from upstream's tarball and replaced with + http://ftp.netbsd.org/pub/NetBSD/NetBSD-release-3-1/src/lib/libc/stdlib/lsearch.c. + This fixes a problem where the original file was 4-clause BSD + * Expanded the debian/copyright notice to cover change to nasl/lsearch.c, + the missing PKT_LICENSE file and the OpenSSL-exemption + * Minor updates to control file, fixed Build-Depend directive + + -- Tim Brown Fri, 13 Jun 2008 09:40:16 +0100 + +openvas-libnasl (1.0.0-5) unstable; urgency=low + + * Expand the debian/copyright information based on a deep review of the + copyright notices of all the source code + + -- Tim Brown Fri, 23 May 2008 13:27:14 +0100 + +openvas-libnasl (1.0.0-4) unstable; urgency=low + + * Minor updates to control file to fix issues highlighted by jfs in regard + to the priority + + -- Tim Brown Wed, 30 Apr 2008 23:26:14 +0100 + +openvas-libnasl (1.0.0-3) unstable; urgency=low + + * Modify nasl/Makefile to make it clean properly the openvasl-nasl binary + file. + * Modify Makefile and nasl/Makefile to restore the DESTDIR definitions so + that the binaries can be properly installed from within the package + + -- Javier Fernandez-Sanguino Pen~a Wed, 16 Apr 2008 14:37:44 +0200 + +openvas-libnasl (1.0.0-2) unstable; urgency=low + + * Minor updates to control file, now lists jfs as uploader, fixed deprecated + ${Source-Version} substvar, Build-Depends directive + * Minor update to rules file, DH_COMPAT environment variable no longer required + * Minor update to libopenvas1-dev.install + + -- Tim Brown Wed, 16 Apr 2008 07:13:14 +0100 + +openvas-libnasl (1.0.0-1) unstable; urgency=low + + * Initial release + + -- Tim Brown Tue, 05 Feb 2008 23:29:47 +0000 --- openvas-libnasl-2.0.2.orig/debian/rules +++ openvas-libnasl-2.0.2/debian/rules @@ -0,0 +1,99 @@ +#!/usr/bin/make -f +# -*- makefile -*- +# Sample debian/rules that uses debhelper. +# This file was originally written by Joey Hess and Craig Small. +# As a special exception, when this file is copied by dh-make into a +# dh-make output file, you may use that output file without restriction. +# This special exception was added by Craig Small in version 0.37 of dh-make. + +# Uncomment this to turn on verbose mode. +#export DH_VERBOSE=1 + + +# These are used for cross-compiling and for saving the configure script +# from having to guess our platform (since we know it already) +DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) +DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) +ifneq ($(DEB_HOST_GNU_TYPE),$(DEB_BUILD_GNU_TYPE)) +CROSS= --build $(DEB_BUILD_GNU_TYPE) --host $(DEB_HOST_GNU_TYPE) +else +CROSS= --build $(DEB_BUILD_GNU_TYPE) +endif + + +include /usr/share/dpatch/dpatch.make + +# shared library versions, option 1 +version=2.0.5 +major=2 +# option 2, assuming the library is created as src/.libs/libfoo.so.2.0.5 or so +#version=`ls src/.libs/lib*.so.* | \ +# awk '{if (match($$0,/[0-9]+\.[0-9]+\.[0-9]+$$/)) print substr($$0,RSTART)}'` +#major=`ls src/.libs/lib*.so.* | \ +# awk '{if (match($$0,/\.so\.[0-9]+$$/)) print substr($$0,RSTART+4)}'` + +config.status: patch-stamp configure + dh_testdir + # Add here commands to configure the package. +ifneq "$(wildcard /usr/share/misc/config.sub)" "" + cp -f /usr/share/misc/config.sub config.sub +endif +ifneq "$(wildcard /usr/share/misc/config.guess)" "" + cp -f /usr/share/misc/config.guess config.guess +endif + ./configure $(CROSS) --sysconfdir=/etc --prefix=/usr --mandir=\$${prefix}/share/man --infodir=\$${prefix}/share/info --localstatedir=/var CFLAGS="$(CFLAGS)" LDFLAGS="-Wl,-z,defs" + + +build: build-stamp +build-stamp: config.status + dh_testdir + + # Add here commands to compile the package. + $(MAKE) + touch $@ + +clean: unpatch + dh_testdir + dh_testroot + rm -f build-stamp + + # Add here commands to clean up after the build process. + touch nasl.tmpl + [ ! -f Makefile ] || $(MAKE) distclean + rm -f config.sub config.guess + + dh_clean + +install: build + dh_testdir + dh_testroot + dh_clean -k + dh_installdirs + + # Add here commands to install the package into debian/tmp + $(MAKE) prefix=$(CURDIR)/debian/tmp/usr install + +# Build architecture-independent files here. +binary-indep: build install +# We have nothing to do by default. + +# Build architecture-dependent files here. +binary-arch: build install + dh_testdir + dh_testroot + dh_installdocs + dh_install --sourcedir=debian/tmp + ( cd debian/libopenvasnasl2-dev/usr/share/doc/ ; rm -rf libopenvasnasl2-dev; ln -s libopenvasnasl2 libopenvasnasl2-dev; ) + dh_installchangelogs ChangeLog + dh_strip + dh_compress + dh_fixperms + dh_makeshlibs -V + dh_installdeb + dh_shlibdeps + dh_gencontrol + dh_md5sums + dh_builddeb + +binary: binary-indep binary-arch +.PHONY: build clean binary-indep binary-arch binary install --- openvas-libnasl-2.0.2.orig/debian/patches/10_fix_gcrypt.dpatch +++ openvas-libnasl-2.0.2/debian/patches/10_fix_gcrypt.dpatch @@ -0,0 +1,18 @@ +#! /bin/sh /usr/share/dpatch/dpatch-run +## 10_fix_gcrypt.dpatch by Jan Wagner +## +## DP: add gcrypt to flags + +@DPATCH@ +diff -urNad openvas-libnasl-2.0.1~/nasl/Makefile openvas-libnasl-2.0.1/nasl/Makefile +--- openvas-libnasl-2.0.1~/nasl/Makefile 2009-01-26 08:24:46.000000000 +0100 ++++ openvas-libnasl-2.0.1/nasl/Makefile 2009-05-05 09:46:46.000000000 +0200 +@@ -24,7 +24,7 @@ + + include ../nasl.tmpl + NESSUS_CFLAGS= -I../include $(OPTIMIZE) `$(LIBOPENVASCONFIG) --cflags` `$(GPGME_CONFIG) --cflags` -DNESSUS_EXTENSIONS $(GLIB_CFLAGS) +-NESSUS_LIBS = $(LIBS) `$(LIBOPENVASCONFIG) --libs` `$(GPGME_CONFIG) --libs` $(GLIB_LIBS) ++NESSUS_LIBS = $(LIBS) -lgcrypt `$(LIBOPENVASCONFIG) --libs` `$(GPGME_CONFIG) --libs` $(GLIB_LIBS) + + NESSUS_INCLUDE = $(NESSUS_CFLAGS) $(include) $(DEFS) + --- openvas-libnasl-2.0.2.orig/debian/patches/10_fix_gpgme.dpatch +++ openvas-libnasl-2.0.2/debian/patches/10_fix_gpgme.dpatch @@ -0,0 +1,22 @@ +#! /bin/sh /usr/share/dpatch/dpatch-run +## 10_fix_gpgme.dpatch by Jan Wagner +## +## DP: check gpgme version + +@DPATCH@ +diff -urNad openvas-libnasl-2.0.2~/nasl/nasl_signature.c openvas-libnasl-2.0.2/nasl/nasl_signature.c +--- openvas-libnasl-2.0.2~/nasl/nasl_signature.c 2009-08-18 10:06:59.000000000 +0200 ++++ openvas-libnasl-2.0.2/nasl/nasl_signature.c 2009-09-17 09:55:02.000000000 +0200 +@@ -171,7 +171,12 @@ + gpgme_ctx_t ctx = NULL; + char * gpghome = determine_gpghome(); + ++ /* Calls seem to be necessary for certain versions of gpgme (for ++ initialization). Note that we could check the version number here, but do so ++ in configure. */ ++ gpgme_check_version (NULL); + err = gpgme_engine_check_version(GPGME_PROTOCOL_OpenPGP); ++ + if (err) + { + print_gpgme_error("gpgme_engine_check_version", err); --- openvas-libnasl-2.0.2.orig/debian/patches/00list +++ openvas-libnasl-2.0.2/debian/patches/00list @@ -0,0 +1,2 @@ +10_fix_gcrypt.dpatch +10_fix_gpgme.dpatch