Register | Log in

shadowsocks-libev

lightweight and secure socks5 proxy

Choose email to subscribe with

general

source: shadowsocks-libev (main)
version: 3.3.5+ds-1
maintainer: Debian Bridges Team (DMD)
uploaders: Boyuan Yang [DMD] – Roger Shimizu [DMD] – Max Lv [DMD]
arch: any
std-ver: 4.5.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 2.6.3+ds-3+deb9u1
old-sec: 2.6.3+ds-3+deb9u1
old-bpo: 3.2.5+ds-1~bpo9+1
old-bpo-sl: 3.3.5+ds-1~bpo9+1
stable: 3.2.5+ds-1
stable-bpo: 3.3.5+ds-1~bpo10+1
testing: 3.3.5+ds-1
unstable: 3.3.5+ds-1

versioned links

2.6.3+ds-3+deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.2.5+ds-1~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.2.5+ds-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.3.5+ds-1~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.3.5+ds-1~bpo10+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.3.5+ds-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libshadowsocks-libev-dev
libshadowsocks-libev2
shadowsocks-libev (3 bugs: 0, 3, 0, 0)

action needed

5 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 47cc6cfc5971266f35ef6c1383cfe88bf19a0c19
Author: Roger Shimizu <rosh@debian.org>
Date:   Sun Sep 20 14:34:54 2020 +0900

    d/gitlab-ci.yml: Disable autopkgtest

commit e2b017f577a6e5666399369af249e5f701e1f7a0
Author: Roger Shimizu <rosh@debian.org>
Date:   Sun Sep 20 14:32:35 2020 +0900

    Revert previous 2 commits
    
    "d/tests/control: Add Restrictions: isolation-container"
    "d/tests/control: Add Restrictions: needs-internet"
    
    This reverts commit:
    - 17033989c965b946ac5ea261d534f2e60e57bf98
    - 7e44a5439de219738ebed28cba40a8de37f63901

commit 17033989c965b946ac5ea261d534f2e60e57bf98
Author: Roger Shimizu <rosh@debian.org>
Date:   Sun Sep 20 01:35:59 2020 +0900

    d/tests/control: Add Restrictions: isolation-container

commit 7e44a5439de219738ebed28cba40a8de37f63901
Author: Roger Shimizu <rosh@debian.org>
Date:   Sun Sep 20 01:23:28 2020 +0900

    d/tests/control: Add Restrictions: needs-internet

commit 8909281fb3a9e73be0d5f168d1efa9fef668059a
Author: Roger Shimizu <rosh@debian.org>
Date:   Sun Sep 20 01:00:30 2020 +0900

    Add debian/gitlab-ci.yml

Created: 2020-09-19 Last update: 2020-10-22 03:57

2 ignored security issues in stretch low

There are 2 open security issues in stretch.

2 issues skipped by the security teams:

CVE-2019-5163: An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher and a local_address, arbitrary UDP packets can cause a FATAL error code path and exit. An attacker can send arbitrary UDP packets to trigger this vulnerability.
CVE-2019-5164: An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2. Specially crafted network packets sent to ss-manager can cause an arbitrary binary to run, resulting in code execution and privilege escalation. An attacker can send network packets to trigger this vulnerability.

Please fix them.

Created: 2019-12-02 Last update: 2020-09-21 05:22

2 ignored security issues in buster low

There are 2 open security issues in buster.

2 issues skipped by the security teams:

CVE-2019-5163: An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher and a local_address, arbitrary UDP packets can cause a FATAL error code path and exit. An attacker can send arbitrary UDP packets to trigger this vulnerability.
CVE-2019-5164: An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2. Specially crafted network packets sent to ss-manager can cause an arbitrary binary to run, resulting in code execution and privilege escalation. An attacker can send network packets to trigger this vulnerability.

Please fix them.

Created: 2019-12-02 Last update: 2020-09-21 05:22

news

[2020-09-22] Accepted shadowsocks-libev 3.3.5+ds-1~bpo9+1 (source i386) into stretch-backports-sloppy->backports-policy, stretch-backports-sloppy (Debian FTP Masters) (signed by: Roger Shimizu)
[2020-09-21] Accepted shadowsocks-libev 3.3.5+ds-1~bpo10+1 (source) into buster-backports (Roger Shimizu)
[2020-09-21] shadowsocks-libev 3.3.5+ds-1 MIGRATED to testing (Debian testing watch)
[2020-09-19] Accepted shadowsocks-libev 3.3.5+ds-1 (source) into unstable (Roger Shimizu)
[2020-08-01] shadowsocks-libev 3.3.4+ds-5 MIGRATED to testing (Debian testing watch)
[2020-07-23] Accepted shadowsocks-libev 3.3.4+ds-5 (source) into unstable (Roger Shimizu)
[2020-06-04] Accepted shadowsocks-libev 3.3.4+ds-4~bpo9+1 (source) into stretch-backports-sloppy->backports-policy, stretch-backports-sloppy (Debian FTP Masters) (signed by: Roger Shimizu)
[2020-05-23] Accepted shadowsocks-libev 3.3.4+ds-4~bpo10+1 (source) into buster-backports (Roger Shimizu)
[2020-05-23] shadowsocks-libev 3.3.4+ds-4 MIGRATED to testing (Debian testing watch)
[2020-05-20] Accepted shadowsocks-libev 3.3.4+ds-4 (source) into unstable (Roger Shimizu)
[2020-04-06] Accepted shadowsocks-libev 3.3.4+ds-3~bpo9+1 (source) into stretch-backports-sloppy->backports-policy, stretch-backports-sloppy (Debian FTP Masters) (signed by: Roger Shimizu)
[2020-04-02] Accepted shadowsocks-libev 3.3.4+ds-3~bpo10+1 (source) into buster-backports (Roger Shimizu)
[2020-04-02] shadowsocks-libev 3.3.4+ds-3 MIGRATED to testing (Debian testing watch)
[2020-03-29] Accepted shadowsocks-libev 3.3.4+ds-3 (source) into unstable (Roger Shimizu)
[2020-02-26] shadowsocks-libev 3.3.4+ds-2 MIGRATED to testing (Debian testing watch)
[2020-02-23] Accepted shadowsocks-libev 3.3.4+ds-2 (source) into unstable (Boyuan Yang)
[2020-01-18] Accepted shadowsocks-libev 3.3.4+ds-1~bpo9+1 (source) into stretch-backports-sloppy->backports-policy, stretch-backports-sloppy (Roger Shimizu)
[2020-01-16] Accepted shadowsocks-libev 3.3.4+ds-1~bpo10+1 (source) into buster-backports (Roger Shimizu)
[2020-01-14] shadowsocks-libev 3.3.4+ds-1 MIGRATED to testing (Debian testing watch)
[2020-01-11] Accepted shadowsocks-libev 3.3.4+ds-1 (source) into unstable (Roger Shimizu)
[2019-12-13] Accepted shadowsocks-libev 3.3.3+ds-3~bpo9+1 (source) into stretch-backports-sloppy->backports-policy, stretch-backports-sloppy (Roger Shimizu)
[2019-12-07] Accepted shadowsocks-libev 3.3.3+ds-3~bpo10+1 (source) into buster-backports (Roger Shimizu)
[2019-12-07] shadowsocks-libev 3.3.3+ds-3 MIGRATED to testing (Debian testing watch)
[2019-12-04] Accepted shadowsocks-libev 3.3.3+ds-3 (source) into unstable (Roger Shimizu)
[2019-12-03] shadowsocks-libev 3.3.3+ds-2 MIGRATED to testing (Debian testing watch)
[2019-12-01] Accepted shadowsocks-libev 3.3.3+ds-2 (source) into unstable (Roger Shimizu)
[2019-11-26] Accepted shadowsocks-libev 3.3.3+ds-1~bpo9+1 (source) into stretch-backports-sloppy->backports-policy, stretch-backports-sloppy (Roger Shimizu)
[2019-11-25] Accepted shadowsocks-libev 3.3.3+ds-1~bpo10+1 (source) into buster-backports (Roger Shimizu)
[2019-11-25] shadowsocks-libev 3.3.3+ds-1 MIGRATED to testing (Debian testing watch)
[2019-11-23] Accepted shadowsocks-libev 3.3.3+ds-1 (source) into unstable (Roger Shimizu)

1
2

bugs [bug history graph]

all: 4
RC: 0
I&N: 4
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, clang, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 3.3.4+ds-5

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing