Bug#1004374: [Pkg-privacy-maintainers] Bug#1004374: obfs4proxy: Traffic is trivially distinguishable (Elligator2 public key representative leak)

2022-01-27 Thread Ana Custura
Hi, I've been in touch with Debian Security last week, they suggested an update to unstable first. I'm now working on packaging the dependencies for version 0.0.11 and shipping an update. Thanks, Ana On 26/01/2022 07:00, intrigeri wrote: Package: obfs4proxy Version: 0.0.8-1+b6 Severity:

Bug#1004374: obfs4proxy: Traffic is trivially distinguishable (Elligator2 public key representative leak)

2022-01-25 Thread intrigeri
Package: obfs4proxy Version: 0.0.8-1+b6 Severity: important Tags: security Hi, Please see https://lists.torproject.org/pipermail/anti-censorship-team/2022-January/000213.html tl;dr: > All existing versions prior to the migration to the new code […] are > fatally broken, and trivial to