-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 17 Jun 2014 20:50:54 +0200 Source: iodine Binary: iodine Architecture: source amd64 Version: 0.6.0~rc1-19 Distribution: unstable Urgency: high Maintainer: gregor herrmann <gregoa@debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Description: iodine - tool for tunneling IPv4 data through a DNS server Closes: 751834 Changes: iodine (0.6.0~rc1-19) unstable; urgency=high . * Add patch 0001-Fix-authentication-bypass-bug.patch from upstream's iodine-0.6.0 branch. . This fixes a security problem where the client could bypass the password check by continuing after getting an error from the server and guessing the network parameters and the server would still accept the rest of the setup and also network traffic. The patch adds checks for normal and raw mode that user has authenticated before allowing any other communication. . Thanks to Salvatore Bonaccorso for the bug report, and Erik Ekman for backporting the fix super fast. (Closes: #751834) . Set urgency=high. . * Declare compliance with Debian Policy 3.9.5. Checksums-Sha1: 52e503284bedb3970c61b50cc3dd32551b2749dc 2064 iodine_0.6.0~rc1-19.dsc fa9a67df80775ba8236132c22818dcd867c8fda7 24328 iodine_0.6.0~rc1-19.debian.tar.xz 3ed28f69a03fe468f61fb24ee67e8e0d6ecc6dc6 86512 iodine_0.6.0~rc1-19_amd64.deb Checksums-Sha256: 3682c0477523ae1e5cc2fc74ac57ce22af661d8b3c1070b890aade7d50c14d98 2064 iodine_0.6.0~rc1-19.dsc 9a91089cbb8d8dcc7b70dbfa995d8f1fcdd36da641d9cec85da6662059d84723 24328 iodine_0.6.0~rc1-19.debian.tar.xz f7ea219c154d3d0cc916c1643eaa719a4e17f70741ad9c776139544b5f497200 86512 iodine_0.6.0~rc1-19_amd64.deb Files: d3c27abe85ac8c21b34ec29606465595 86512 net extra iodine_0.6.0~rc1-19_amd64.deb 400033f8968708f5c6e7aa01fb3704d3 2064 net extra iodine_0.6.0~rc1-19.dsc 7951cf486be2fdb24dbfc958e73a4160 24328 net extra iodine_0.6.0~rc1-19.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQJrBAEBCgBVBQJToI5SThSAAAAAAB0AKGlzc3Vlci1mcHJAZ3BnLmNvbW9kby5w cml2LmF0RDFFMTMxNkU5M0E3NjBBODEwNEQ4NUZBQkIzQTY4MDE4NjQ5QUEwNgAK CRC7OmgBhkmqBqW7D/0QCgwAk5NyjNfgSZT/5gpO6Jtq+TNg66GiGHBl7NOy3Ijz e6GRe7IHqsv2yZT7nmxoxOEq3DASXtU0Gr/a4WxUituhjMwPKyopToVxnzZzE0Rj h5E0TIFSOSWornBcIiiOJL6G4DfXNiCdwM2NyrS8ipkbUNoNsMMkZZxVlJf1Qj+0 w1iPOOZfgqHJrwnNxVrVgzEJGquyL88cXCC+0Lrayjd0eR7SPKtaUwK5mPN1gKKI cl8otdr4vvydRiw/3PozyfvgoZXcFn1tD/CksifCtfRh+zLa174ZctdZ9Ta9WQ1a DKcouGSGI3ftJeKovO3Gh+jbCnaR+n3XKxMr/ZEdUwvtmG4ZgolFjb+n+MsuvYKD OuiAI4UBStlYtNqy3WKJY74lSj9/jStQEseygBnv3ENHy9tpatwvgzGwQ/tCgKL5 7pH3AyEIYwQitlfpbDFtYGoUdo9C5JFr0Ae9giwUuavuJyWF0BLLK49EDjXbg08a XqBbRzYCsE9tJeMDKMfw2PDSMLhd6AvsXu7P2inPFnyxm3pKHqUg4LI3ES4MQv5C ANNzHZZ2B306a74hj4rs9rONY16qt9RjoVNpfDWAh1xT6lpbQ60HM1XeBtcuMOV2 vPTnZdFwmW40XarBarvKA/9lnz6UOePl5OwUiFRlkon+73YW9OytICJMELSGcg== =07A3 -----END PGP SIGNATURE-----
