Bug#682918: sshuttle: New upstream fork
Hi, Ondrej Grover wrote: Hi, I would like to point out that there appears to be a new semi-official upstream fork https://github.com/sshuttle/sshuttle It is actively developed and maintained by a community of users whereas the original upstream hasn't received an update since 2012. See this thread for details https://groups.google.com/forum/#!topic/sshuttle/pipk8HV7rw4 Interesting read. So this is a quite recent fork. So it would be nice to see sshuttle to change the upstream sources and homepage header for the Stretch release. On https://github.com/sshuttle/sshuttle/releases there's a new upstream release 0.71 from just a week ago. If you decide to package this version, please note that the README.md is cluttered in the new upstream repo and does not reflect the dependencies very well. Specifically, PyXAPI is optional and used only with --method=tproxy. Autossh also isn't required at all, only the README.md and some ugly debian build script mentions it and it is not used anywhere in the actual code. Very ugly, indeed. It hardcodes an ancient version (0.2) and i386 as architecture even though sshuttle doesn't seem to have any C code in there. (The one in Debian clearly doesn't.) Stumbled upon this bug report because someone on the sshuttle mailing list used a package built from that horrible script and wrecked his desktop because installing it on amd64 removed python (and installed python:i386 via multiarch). Why can't people learn that .deb packages must be built with the proper tools and not some hacked shell script using cp and friends? *sigh* Thanks for maintaining sshuttle in Debian! (And hence for having an excuse to not use such scripts! ;-) P.S.: Was there a reason to not package the last release from the original author, 0.61? It seemed to be released just a few weeks after 0.54 which Debian currently has. Regards, Axel -- ,''`. | Axel Beckert a...@debian.org, http://people.debian.org/~abe/ : :' : | Debian Developer, ftp.ch.debian.org Admin `. `' | 4096R: 2517 B724 C5F6 CA99 5329 6E61 2FF9 CD59 6126 16B5 `-| 1024D: F067 EA27 26B9 C3FC 1486 202E C09E 1D89 9593 0EDE -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#682918: sshuttle: New upstream fork
Package: sshuttle Version: 0.54-2 Followup-For: Bug #682918 Hi, I would like to point out that there appears to be a new semi-official upstream fork https://github.com/sshuttle/sshuttle It is actively developed and maintained by a community of users whereas the original upstream hasn't received an update since 2012. See this thread for details https://groups.google.com/forum/#!topic/sshuttle/pipk8HV7rw4 I would also like to point out that the new version includes some interesting features from a security perspective: the current version in Debian (0.54-2) doesn't catch signals like SIGINT, SIGPIPE, SIGTERM, etc. leaving the firewall silently open and still redirecting traffic after failure. I'm not sure this alone would warrant a security update for Jessie, but it's worth considering. If you decide to package this version, please note that the README.md is cluttered in the new upstream repo and does not reflect the dependencies very well. Specifically, PyXAPI is optional and used only with --method=tproxy. Autossh also isn't required at all, only the README.md and some ugly debian build script mentions it and it is not used anywhere in the actual code. Kind regards, Ondřej Grover -- System Information: Debian Release: 8.0 APT prefers testing-updates APT policy: (500, 'testing-updates'), (500, 'testing'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages sshuttle depends on: ii iptables 1.4.21-2+b1 ii openssh-client [ssh-client] 1:6.7p1-3 ii python 2.7.9-1 Versions of packages sshuttle recommends: ii sudo 1.8.10p3-1+deb8u2 sshuttle suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
