Package: sshuttle Version: 0.54-2 Followup-For: Bug #682918 Hi, I would like to point out that there appears to be a new semi-official upstream fork https://github.com/sshuttle/sshuttle It is actively developed and maintained by a community of users whereas the original upstream hasn't received an update since 2012. See this thread for details https://groups.google.com/forum/#!topic/sshuttle/pipk8HV7rw4
I would also like to point out that the new version includes some interesting features from a security perspective: the current version in Debian (0.54-2) doesn't catch signals like SIGINT, SIGPIPE, SIGTERM, etc. leaving the firewall silently open and still redirecting traffic after failure. I'm not sure this alone would warrant a security update for Jessie, but it's worth considering. If you decide to package this version, please note that the README.md is cluttered in the new upstream repo and does not reflect the dependencies very well. Specifically, PyXAPI is optional and used only with --method=tproxy. Autossh also isn't required at all, only the README.md and some ugly debian build script mentions it and it is not used anywhere in the actual code. Kind regards, Ondřej Grover -- System Information: Debian Release: 8.0 APT prefers testing-updates APT policy: (500, 'testing-updates'), (500, 'testing'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages sshuttle depends on: ii iptables 1.4.21-2+b1 ii openssh-client [ssh-client] 1:6.7p1-3 ii python 2.7.9-1 Versions of packages sshuttle recommends: ii sudo 1.8.10p3-1+deb8u2 sshuttle suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
