Format: 1.8 Date: Fri, 22 Nov 2019 23:13:14 +0000 Binary: secnet Source: secnet Architecture: amd64 source Version: 0.5.1 Distribution: unstable Urgency: medium Maintainer: Ian Jackson Changed-By: Ian Jackson Description: secnet - VPN software for distributed networks Changes: secnet (0.5.1) unstable; urgency=medium . POTENTIALLY INCOMPATIBLE CHANGE. Some security implications. . * make-secnet-sites: Prefix names when writing secnet sites.conf file. . make-secnet-sites must copy names (vpn, location and site names) from the input sites file (which is not wholly trusted) to the secnet config file. Prior to this release, naming a location or site the same as a secnet predefined name could generate a broken sites.conf which secnet would reject. (With the existing featureset, malfunctions other than rejection, eg privilege escalation, are not possible.) . make-secnet-sites now adds a prefix to these names when writing sites.conf. This will not affect configurations which use the make-secnet-sites-provided `all-sites' key, as is usual. Other configurations will break unless the references in the static part of the config are adjusted. . Previous behaviour can be restored with the --no-conf-key-prefix option. (Planned future enhancements to secnet are likely to make use of that option, with untrusted input, dangerously insecure.) . other changes to make-secnet-sites: * Fix argument parsing. Fixes a regression affecting -P in 0.5.0, and also fixes new facilities introduced in 0.5.0. * Sort the properties on output (and adjust the test case expected outputs). Tests now pass on (at least) Python 2.7.13, 3.5.3, 3.7.5. * Delete some unused code. . secnet: * Change one idiom to avoid a warning from GCC9. No functional change. . build system - MAJOR CHANGES: * Fix out-of-tree builds. (Broken in 0.5.0) * Replace recursive make with use of the new subdirmk system. This represents a fairly comprehensive overhaul of the makefiles. Several bugs (esp. involving dependencies between files in different directories) are fixed. * Drop `make check' from `make all'. (Otherwise there is no way to ask for `all' without `check'.) * Suppress two unhelpful new compiler warnings from GCC9. * Release checklist update. . documentation: * Creit Mark Wooding properly in CREDITS. * Include DEVELOPER-CERTIFICATE. . tests: * Locations now have different names to sites. * Somewhat better debugging output from mtest. * Do not run msgcode-test except with `make fullcheck'. * Other minor bugfixes and improvments. * stest: Suppress unhelpful -Wno-unused-result (needed for stretch). Checksums-Sha1: 7b98c4309a87ef046207e88ceba1c9bf21bb2761 679 secnet_0.5.1.dsc be27cdb2dc4be355b69280b39577f7a9baf595a2 328512 secnet_0.5.1.tar.gz 2bb6e75835352048159a1de887bf4286978f0257 317192 secnet-dbgsym_0.5.1_amd64.deb 7ecdb89af0e056429556262bddfcdda449aad088 5966 secnet_0.5.1_amd64.buildinfo fd1ad6e3f89351a651c286094673031e4f035e25 153626 secnet_0.5.1_amd64.deb Checksums-Sha256: 71e4a9b408a9bc8b5bc8a850cd91085ea3a3ea3215af2abdb70763bcbe8a3fd5 679 secnet_0.5.1.dsc e15e21e72f4989558ddadc0f05a4ca144025085fcf653fb685dca67fbd0cca9b 328512 secnet_0.5.1.tar.gz 613322c94d6279c205d8735880093f3b1394e0b94a8f2d4860de878746de15d7 317192 secnet-dbgsym_0.5.1_amd64.deb 8b0bc0d83619174e7758ad941a90aec954a9cad93305315e76f100f4894e3d68 5966 secnet_0.5.1_amd64.buildinfo 26b6e1c7516dfe2bda4b3f1ac88579ca8cb963bfc73a4b7524ddb46fd8740a1c 153626 secnet_0.5.1_amd64.deb Files: 93a3dee2440fcc857f47524928c7d1c9 679 net extra secnet_0.5.1.dsc 54307380e276f9dca89b5253831000b6 328512 net extra secnet_0.5.1.tar.gz 6a8ad21654146044675fa52bfb85d65d 317192 debug extra secnet-dbgsym_0.5.1_amd64.deb 00027ea6f22b2a9f53dc4be7d7bca2c7 5966 net extra secnet_0.5.1_amd64.buildinfo 28a1d9048cee649d4a5996d2121198b3 153626 net extra secnet_0.5.1_amd64.deb