| Summary: | w3af dependency not met - pybloomfiltermmap | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | Pavel Kreuzt <pkreuzt> |
| Component: | RPM Packages | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | |
| Severity: | normal | ||
| Priority: | Normal | CC: | davidwhodgins, guillomovitch, qa-bugs, stormi-mageia, sysadmin-bugs, tmb, wassi, wilcal.int |
| Version: | 3 | Keywords: | Triaged, validated_update |
| Target Milestone: | --- | ||
| Hardware: | i586 | ||
| OS: | Linux | ||
| Whiteboard: | has_procedure advisory MGA3-32-OK MGA3-64-OK | ||
| Source RPM: | w3af-1.1-2mga3 | CVE: | |
| Status comment: | |||
|
Manuel Hiebel
2013-06-12 23:12:18 CEST
Keywords:
(none) =>
Triaged I tried to install pybloomfiltermmap myself and got linking errors, someone has already submitted a patch on https://github.com/axiak/pybloomfiltermmap/issues/37 for Mageia to work. With this it compiles correctly. I just submitted python-pybloomfiltermmap, and an update release of w3af, in core/updates_testing. Update requested. Suggested advisory: The w3af package released in mageia 3 was missing dependencies against some python libraries. Additionaly, one of these libraries was actually not available in the distribution. Updated packages in core/updates_testing: - w3af-1.1-2.2.mga3 - python-pybloomfiltermmap-0.3.11-1.mga3 Assignee:
guillomovitch =>
qa-bugs Testing mga3 64.
It is asking for tcpdump too, should that be added as a suggest?
Before
------
$ w3af_console
w3af is officially supported under Python 2.6
Your python installation needs the following packages:
pyOpenSSL
On debian based systems:
sudo apt-get install python2.6-dev python-pyopenssl
On a mac with mac ports installed:
sudo port install py26-openssl
Additional information:
pybloomfiltermmap is a required dependency in *nix systems, please install from http://pypi.python.org/pypi/pybloomfiltermmap/0.2.0
After
-----
# urpmi w3af
To satisfy dependencies, the following packages are going to be installed:
Package Version Release Arch
(medium "Core Release")
python-OpenSSL 0.13 2.mga3 x86_64
(medium "Core Updates Testing")
python-pybloomfiltermmap 0.3.11 1.mga3 x86_64
w3af 1.1 2.2.mga3 noarch
$ w3af_console
w3af is officially supported under Python 2.6
WARNING: Failed to execute tcpdump. Check it is installed and in the PATH
w3af>>>
Tested with dnsWildcard, some useful info for testing here:
http://resources.infosecinstitute.com/w3af-tutorial/
claire robinson
2013-08-27 17:39:00 CEST
Whiteboard:
(none) =>
has_procedure mga3-64-ok? feedback A suggestion: this kind of programs (like metasploit) loses utility if it cannot be updated via git. Maybe the git tree could be added to the rpm. Adding Guillaume to CC, been talking to ourselves :) CC:
(none) =>
guillomovitch Using git, or any other way to update a software directly from upstream, means bypassing normal software flow from the distribution. It means negating rpm builtin integrity control (rpm --verify), and eventually result in user reporting bugs to the distribution for software versions different from the one we ship. You're free to do it, of course, but we won't encourage this practice. Especially as we usually even disable those features in many packages (nagios, firefox, etc...). tcpdump, however, seems a good candidate for a soft dependency, I'm having a look. Assigning Guillaume. Please reassign to QA when you've had a chance to take a look. Thanks CC:
(none) =>
qa-bugs I just submitted w3af-1.1-2.3 in updates_testing, with an additional dependency on tcpdump. re-assingning. Assignee:
guillomovitch =>
qa-bugs Testing complete on mga 3, 32 bits. I initially installed w3af through rpmdrake, then used urpmi to update it. w3af now pulls in quite a few new dependencies (see below), but fails to execute tcpdump. (see console output below)
$ w3af_console
w3af is officially supported under Python 2.6
On debian based systems:
sudo apt-get install python2.6-dev
Additional information:
pybloomfiltermmap is a required dependency in *nix systems, please install from http://pypi.python.org/pypi/pybloomfiltermmap/0.2.0
# urpmi w3af
Um die Abhängigkeiten zu erfüllen, werden die folgenden Pakete installiert:
Paket Version Release Arch
(Medium »Core Release (distrib1)«)
libsmi-mibs-std 0.4.8 7.mga3 i586
libsmi2 0.4.8 7.mga3 i586
smi-tools 0.4.8 7.mga3 i586
tcpdump 4.3.0 2.mga3 i586
(Medium »Core Updates Testing (distrib5)«)
python-pybloomfiltermmap 0.3.11 1.mga3 i586
w3af 1.1 2.3.mga3 noarch
15MB zusätzlicher Speicher werden benötigt
18MB an Paketen werden geholt
Fortfahren mit der Installation der 6 Pakete? (J/n) j
$MIRRORLIST: media/core/release/libsmi-mibs-std-0.4.8-7.mga3.i586.rpm
$MIRRORLIST: media/core/release/libsmi2-0.4.8-7.mga3.i586.rpm
$MIRRORLIST: media/core/release/smi-tools-0.4.8-7.mga3.i586.rpm
$MIRRORLIST: media/core/release/tcpdump-4.3.0-2.mga3.i586.rpm
$MIRRORLIST: media/core/updates_testing/python-pybloomfiltermmap-0.3.11-1.mga3.i586.rpm
$MIRRORLIST: media/core/updates_testing/w3af-1.1-2.3.mga3.noarch.rpm
libsmi-mibs-std-0.4.8-7.mga3.i586.rpm smi-tools-0.4.8-7.mga3.i586.rpm libsmi2-0.4.8-7.mga3.i586.rpm w3af-1.1-2.3.mga3.noarch.rpm python-pybloomfiltermmap-0.3.11-1.mga3.i586.rpm tcpdump-4.3.0-2.mga3.i586.rpm von /var/cache/urpmi/rpms wird installiert
Vorbereiten ⦠#############################################
1/6: smi-tools #############################################
2/6: libsmi-mibs-std #############################################
3/6: libsmi2 #############################################
4/6: tcpdump #############################################
5/6: python-pybloomfiltermmap
#############################################
6/6: w3af #############################################
1/1: w3af-1.1-2.mga3.noarch wird entfernt
#############################################
$ w3af_console
w3af is officially supported under Python 2.6
WARNING: Failed to execute tcpdump. Check it is installed and in the PATHCC:
(none) =>
wassi
user7
2014-01-05 12:58:33 CET
Whiteboard:
has_procedure =>
has_procedure feedback Re-assigning. See comment 12 please Guillaume. Assignee:
qa-bugs =>
guillomovitch The warning message is quite explicit: 'Check it is installed and in the PATH'. As tcpdump is installed under /usr/sbin, it is not part of user PATH. And even if it was, it requires admin privileges for capturing traffic. No reason to block the pending update here. Assignee:
guillomovitch =>
qa-bugs (In reply to Guillaume Rousse from comment #14) > No reason to block the pending update here. It's obvious to you, not to us, thus the feedback status. Thanks for the answer, process can continue. CC:
(none) =>
stormi In VirtualBox, M3, KDE, 32-bit Package(s) under test: w3af default install of w3af [root@localhost wilcal]# urpmi w3af Package w3af-1.1-2.mga3.noarch is already installed Errors described in Description appear install w3af from updates_testing [root@localhost wilcal]# urpmi w3af Package w3af-1.1-2.3.mga3.noarch is already installed Both w3af_console and w3af_gui launch. I am not familiar with this package but both launche so I'd say this is fixed. Test platform: Intel Core i7-2600K Sandy Bridge 3.4GHz GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB RTL8111/8168B PCI Express 1Gbit Ethernet DRAM 16GB (4 x 4GB) Mageia 4 64-bit, Nvidia driver VirtualBox 4.3.6-1.mga4.x86_64.rpm CC:
(none) =>
wilcal.int In VirtualBox, M3, KDE, 64-bit Package(s) under test: w3af default install of w3af [root@localhost wilcal]# urpmi w3af Package w3af-1.1-2.mga3.noarch is already installed Errors described in Description appear install w3af from updates_testing [root@localhost wilcal]# urpmi w3af Package w3af-1.1-2.3.mga3.noarch is already installed Both w3af_console and w3af_gui launch. I am not familiar with this package but both launch so I'd say this is fixed here too. Test platform: Intel Core i7-2600K Sandy Bridge 3.4GHz GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB RTL8111/8168B PCI Express 1Gbit Ethernet DRAM 16GB (4 x 4GB) Mageia 4 64-bit, Nvidia driver VirtualBox 4.3.6-1.mga4.x86_64.rpm Whiteboard:
has_procedure MGA3-32-OK =>
has_procedure MGA3-32-OK MGA3-64-OK I'd say this is a go. Any other wrinkles should probably be another BUG. Advisory uploaded. Validating. Could sysadmin please push to 3 updates Thanks Keywords:
(none) =>
validated_update Update pushed: http://advisories.mageia.org/MGAA-2014-0053.html Status:
NEW =>
RESOLVED |
Description of problem: w3af_console refuses to start claiming this: [pkreuzt@myhost]$ w3af_console w3af is officially supported under Python 2.6 On debian based systems: sudo apt-get install python2.6-dev Additional information: pybloomfiltermmap is a required dependency in *nix systems, please install from http://pypi.python.org/pypi/pybloomfiltermmap/0.2.0 Version: w3af-1.1-2mga3 How reproducible: Start w3af_console or w3af_gui from a console and see Reproducible: Steps to Reproduce: