-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 05 Apr 2014 13:54:24 +0200 Source: pen Binary: pen Architecture: source amd64 Version: 0.22.1-1 Distribution: unstable Urgency: medium Maintainer: Vincent Bernat <bernat@debian.org> Changed-By: Vincent Bernat <bernat@debian.org> Description: pen - Load balancer for "simple" tcp based protocols Closes: 741370 Changes: pen (0.22.1-1) unstable; urgency=medium . * New upstream release. + No more hard-coded path for statistics. + Control socket can now be an Unix socket. Moreover, pen will be reluctant to use it as root. This is documented in the manpage. The user is therefore expected to know what he is doing when using this feature. * Don't ship the CGI script, even as an example. It is outdated and insecure. * The three above items fix CVE-2014-237. Closes: #741370. * Update manpage patch. Checksums-Sha1: 960685f34698157c3373aea3184de6ec040f2dee 1849 pen_0.22.1-1.dsc bcd2979270fdf563a014b9dc8c82f90a128af146 169808 pen_0.22.1.orig.tar.gz 5dcc3b076c45746d459e9ace9e3c8e8d007065bd 3572 pen_0.22.1-1.debian.tar.xz 5c18c05bae9bcc343b81d8e39eebd2369191545e 53992 pen_0.22.1-1_amd64.deb Checksums-Sha256: b2da06aacfa99087970a7b11db9d8d432d68c3e2de1c9252e127186765f69d9b 1849 pen_0.22.1-1.dsc 58b07a2ce4a4c8a877c1f06a3b15c37588b1be2c020e88b2e8605b96e71c7288 169808 pen_0.22.1.orig.tar.gz 495b12482966fc36d41d3ee054b10968b8bac4b9eec78711160f150f647a5d2a 3572 pen_0.22.1-1.debian.tar.xz c0ca988c40f879b276ef90602f376bd68732107b54d1bf4ed90309c654332605 53992 pen_0.22.1-1_amd64.deb Files: 1f847d843a227a37f5ae71533c220259 1849 net optional pen_0.22.1-1.dsc f8c669d149ced5bfdfede52fa9f15d6d 169808 net optional pen_0.22.1.orig.tar.gz e275d8b1239c1c005d0fa475df770e30 3572 net optional pen_0.22.1-1.debian.tar.xz 82c1c05a5abda901bece0505512e8b77 53992 net optional pen_0.22.1-1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJTP/DfAAoJEJWkL+g1NSX5tu8QAIsVijNikKIy1zINmgqQsMZR bGOzFIqDCXqT5hAPu4GkE8MaIho5HNGTqQRiAlEGi5UVM/CJ6JpPG5aFRRzuSnta QeB9c/Mi+CczPSAIodm95puVmD/J2F+AyGmZt6jtvR+jXIAmSA9gQUX9KtFR0RWW a+tZdIZqzzfskjDoEYWgZDUWThfF1HK/BPRtxnoIaQ9xZl7AwVnSZVOLqp7DuYxB ca3pQhyXOVDRnKuHdvRoxFQ70YzNdRo7dDUV+JVTFHM2/Xp52UzZYN7R9GPnNvD8 vWTqI7tdw8KJ2eYtov/Ksg3feS/l49GzmclXRWUVSgfaVMIJU6R9PNLo6/25kaUx lrkOGJ40JOdobpQWsbUC5aIYvJJILes5ya7M7yBdPk141ZWj4HPvqaSPtS1dCfj9 Bbtoy2qSyu8cs9wmEbAw/DwH88lZfS0C8AR83aQlUHMYkrZ3VY6jaamPUbFCWAIi WUCUnzSJo41me1ccCsxfTCH2EBNYSQif8prDSoSxL8IE1AfsE4dFYe1yB8ITn48X dESaKfvzFmd9EqGM5jmkcunDHSxFNYdsbbHQwCytrYf+rQLK9xQuer7PM3BObhgB MrDQ5A2EgYlWAb11AG1RTqRpltvl0LVeCbrShq1nkSa1oXMi6Z2qYgLyThvTUJus qJ0eGcse1KIbOkrCQ8xC =MmJV -----END PGP SIGNATURE-----