1 iodine (0.6.0~rc1-19) unstable; urgency=high
3 * Add patch 0001-Fix-authentication-bypass-bug.patch from upstream's
6 This fixes a security problem where the client could bypass the password
7 check by continuing after getting an error from the server and guessing
8 the network parameters and the server would still accept the rest of the
9 setup and also network traffic. The patch adds checks for normal and raw
10 mode that user has authenticated before allowing any other communication.
12 Thanks to Salvatore Bonaccorso for the bug report, and Erik Ekman for
13 backporting the fix super fast.
18 * Declare compliance with Debian Policy 3.9.5.
20 -- gregor herrmann <gregoa@debian.org> Tue, 17 Jun 2014 20:50:54 +0200
22 iodine (0.6.0~rc1-18) unstable; urgency=low
24 * debian/control: use iproute2 in Suggests instead of the transitional
27 -- gregor herrmann <gregoa@debian.org> Mon, 30 Sep 2013 14:30:03 +0200
29 iodine (0.6.0~rc1-17) unstable; urgency=low
31 * Build-depend on check >= 0.9.10-3 which fixes #712140.
34 -- gregor herrmann <gregoa@debian.org> Sat, 06 Jul 2013 17:53:26 +0200
36 iodine (0.6.0~rc1-16) unstable; urgency=low
38 * Re-enable tests after check seems to be fixed (cf. #712140).
39 * Add patch to add linker flags to test; build-depend on pkg-config.
41 -- gregor herrmann <gregoa@debian.org> Wed, 26 Jun 2013 21:16:56 +0200
43 iodine (0.6.0~rc1-15) unstable; urgency=low
45 * Temporarily turn off tests. We can add the missing -lm and -lrt but
46 then we still run into check's pthread problems (cf. #712140).
49 -- gregor herrmann <gregoa@debian.org> Sat, 22 Jun 2013 23:29:48 +0200
51 iodine (0.6.0~rc1-14) unstable; urgency=low
53 * debian/postinst: use perl and fancy regex delimiters instead of sed
54 for updating the configuration file.
55 The typical `sed -e s///' breaks if IODINED_ARGS contains slashes.
56 Thanks to Pierre Ynard for the bug report. (Closes: #708187)
58 -- gregor herrmann <gregoa@debian.org> Tue, 14 May 2013 17:16:31 +0200
60 iodine (0.6.0~rc1-13) unstable; urgency=low
62 * New version of iodine-client-start (1.0.5), pulled from upstream git
63 (d50ae59): Use either fping or oping or no ping.
64 * Add oping as an alternative to fping in Suggests.
65 * Rewrite handling of /etc/default/iodine according to debconf-devel(7)
66 in debian/config and debian/postinst.
67 * Set Standards-Version to 3.9.4 (no changes).
68 * Update years of packaging copyright.
69 * New patch verbose-build.patch: unhide compiler flags.
71 -- gregor herrmann <gregoa@debian.org> Thu, 09 May 2013 15:35:58 +0200
73 iodine (0.6.0~rc1-12) unstable; urgency=low
76 * debian/po/de.po: Fix charset (Closes: #691959)
78 -- gregor herrmann <gregoa@debian.org> Wed, 31 Oct 2012 20:38:01 +0100
80 iodine (0.6.0~rc1-11) unstable; urgency=low
82 * New version of iodine-client-start (1.0.4), pulled from upstream git
84 - "iodine-client-start make a point-to-point route for 127.0.0.1"
86 - "iodine-client-start launch iodine with UDP raw mode socket"
88 - "interface detection partially broken"
91 -- gregor herrmann <gregoa@debian.org> Tue, 22 May 2012 19:47:47 +0200
93 iodine (0.6.0~rc1-10) unstable; urgency=low
96 * debian/iodine.iodined.init:
97 + add $named to LSB's Required-Start, DNS resolution is needed for
98 the topdomain argument.
101 * Add patch 0001-man-iodine.8-add-note-about-sharing-port-dnsport.patch:
102 adds a note to the manpage about sharing port/dnsport. Thanks to Luca
103 Capello for the great analysis and the patch. (Closes: #668621)
105 -- gregor herrmann <gregoa@debian.org> Sat, 14 Apr 2012 22:06:06 +0200
107 iodine (0.6.0~rc1-9) unstable; urgency=low
109 * Make udev|makedev dependency Linux-only. Thanks to Robert Millan for
110 the bugreport and the patch. (Closes: #666509)
112 -- gregor herrmann <gregoa@debian.org> Sat, 31 Mar 2012 21:40:44 +0200
114 iodine (0.6.0~rc1-8) unstable; urgency=low
116 * Update Vcs-* headers.
117 * Add Italian debconf translation. Thanks to Beatrice Torracca.
119 * Build-depend on debhelper >= 9.
120 * debian/copyright: update to Copyright-Format 1.0.
121 * Update years of packaging copyright.
122 * Bump Standards-Version to 3.9.3 (no changes).
124 -- gregor herrmann <gregoa@debian.org> Fri, 30 Mar 2012 20:41:23 +0200
126 iodine (0.6.0~rc1-7) unstable; urgency=low
129 * Add support for "status" action to init.d script
132 -- gregor herrmann <gregoa@debian.org> Mon, 19 Dec 2011 19:56:22 +0100
134 iodine (0.6.0~rc1-6) unstable; urgency=low
136 * New patch: cmdline-r-u.patch. Due to a missing "break", -r causes -u to
137 have no effect (client). Thanks to Pavel Pergamenshchik for the bug report
140 * debian/{rules,control}: replace hardening-includes with the new
141 dpkg-dev/debhelper approach. Update cflags.patch to honour CPPFLAGS.
142 * Set Standards-Version to 3.9.2 (no changes).
144 -- gregor herrmann <gregoa@debian.org> Sun, 23 Oct 2011 23:07:10 +0200
146 iodine (0.6.0~rc1-5) unstable; urgency=low
148 * Don't source /etc/default/iodine in config script but read out the values
149 with awk. This allows to use shell constructs like $() in the file and
150 preserve them during re-configuration (closes: #612723).
151 Thanks to "Debian bug at v.nix.is" for the bug report.
152 * Add a logcheck filter; thanks to martin f krafft for the bug report and
153 the logcheck file (closes: #612721).
154 * Add patch armel_ftbfs.patch: Rename struct user to struct _user in the
155 code to avoid naming conflict caused by including <sys/user.h> as part of
156 the armel build. Taken from Ubuntu; not needed currently in Debian but
157 saves Ubuntu from carrying the patch and might be helpful later.
159 -- gregor herrmann <gregoa@debian.org> Sat, 12 Feb 2011 14:49:06 +0100
161 iodine (0.6.0~rc1-4) unstable; urgency=low
163 * Upload to unstable.
165 -- gregor herrmann <gregoa@debian.org> Mon, 07 Feb 2011 18:38:57 +0100
167 iodine (0.6.0~rc1-3) experimental; urgency=low
170 * Build with hardening; thanks to Romain Francoise for the bug report and
171 the patch (closes: #589054).
172 * New patch uninitialized-inside_topdomain.patch: initialize
173 inside_topdomain before using it; thanks to Samuel Thibault for the bug
174 report and the patch (closes: #596740).
175 * Set Standards-Version to 3.9.1 (no changes).
176 * Add Danish debconf translation, thanks to Joe Dalton (closes: #602447).
177 * Update iodine-client-start to version 1.0.3, commit 04c2dee
179 * debian/copyright: update years of packaging copyright, update formatting.
180 * Update to experimental because of the freeze.
183 * Update reference to README file in README.Debian (closes: #597736)
185 -- gregor herrmann <gregoa@debian.org> Fri, 14 Jan 2011 03:01:13 +0100
187 iodine (0.6.0~rc1-2) unstable; urgency=low
190 * Update init.d script to support spaces in password (closes: #597258)
192 -- gregor herrmann <gregoa@debian.org> Mon, 20 Sep 2010 22:25:48 +0200
194 iodine (0.6.0~rc1-1) unstable; urgency=low
196 * debian/watch: relax regexp to also catch release candidates.
198 * New upstream release:
199 - return nonzero if tunnel fails to open (closes: #534186)
200 - added support for CNAME/TXT/A/MX query types (closes: #587894)
201 - includes the changes we had backported in openlog.patch, so remove the
203 * This version introduces a new and incompatible protocol version
204 (00000502); adjust debia/README.Debian and add debian/NEWS.
205 * Add new patch manpage.patch (*roff problems). Refresh remaining patches.
206 Improve patch headers (DEP3).
207 * Set Standards-Version to 3.9.0 (no changes).
208 * debian/copyright: point to /usr/share/common-licenses/GPL-1 now that the
209 GNU GPLv1 is included in base-files.
211 -- gregor herrmann <gregoa@debian.org> Sat, 10 Jul 2010 18:04:23 +0200
213 iodine (0.5.2-7) unstable; urgency=low
215 * Add Spanish debconf translation, thanks to Francisco Javier Cuadrado
218 -- gregor herrmann <gregoa@debian.org> Mon, 24 May 2010 18:42:06 +0200
220 iodine (0.5.2-6) unstable; urgency=low
222 * Add $syslog facility to init script.
223 * Convert to source format 3.0 (quilt). Remove quilt framework.
224 * Update iodine-client-start (02eb805).
226 -- gregor herrmann <gregoa@debian.org> Sun, 23 May 2010 22:34:12 +0200
228 iodine (0.5.2-5) unstable; urgency=low
230 * Update iodine-client-start (01b8c6f).
231 * New patch openlog.patch: move openlog() call before chrooting; thanks to
232 Romain Francoise for the patch (closes: #573194).
233 * README.Debian: mention /usr/sbin/iodine-client-start now that it's not in
236 -- gregor herrmann <gregoa@debian.org> Wed, 10 Mar 2010 18:47:52 +0100
238 iodine (0.5.2-4) unstable; urgency=low
240 * Include updated iodine-client-start script and install it into /usr/sbin.
241 Adjust some files and create manpage with help2man.
243 -- gregor herrmann <gregoa@debian.org> Wed, 10 Feb 2010 22:03:12 +0100
245 iodine (0.5.2-3) unstable; urgency=low
247 * Add Japanese debconf translation, thanks to Hideki Yamane
249 * The example script iodine-jigger is now called iodine-client-start; update
250 the name in the relevant locations and integrate a newer version.
251 * debian/copyright: update formatting.
252 * Set Standards-Version to 3.8.4 (no changes).
253 * New patch spelling.patch: fix a minor spelling mistake in the manpage.
254 * Adjust handling of /etc/default/iodine in init script.
256 -- gregor herrmann <gregoa@debian.org> Mon, 08 Feb 2010 21:30:54 +0100
258 iodine (0.5.2-2) unstable; urgency=low
260 * Add Russian debconf translation, thanks to Yuri Kozlov (closes: #546345).
261 * Set Standards-Version to 3.8.3 (no changes).
262 * Update debian/rules, bump build dependencies in debian/control
265 -- gregor herrmann <gregoa@debian.org> Sun, 13 Sep 2009 01:05:31 +0200
267 iodine (0.5.2-1) unstable; urgency=low
269 * New upstream release.
271 -- gregor herrmann <gregoa@debian.org> Tue, 02 Jun 2009 18:03:31 +0200
273 iodine (0.5.1-2) unstable; urgency=low
275 * (Re-)add a warning to README.Debian that both client and server needs to
276 run the same protocol version (cf. #521260).
277 * Create /var/run/iodine in init script if it doesn't exist; thanks to
278 martin f krafft for the bug report (closes: #521259).
280 -- gregor herrmann <gregoa@debian.org> Thu, 26 Mar 2009 17:45:24 +0100
282 iodine (0.5.1-1) unstable; urgency=low
284 * New upstream release.
285 * Refresh 03_cflags.patch.
286 * Set Standards-Version to 3.8.1 (no changes).
287 * debian/copyright: add an additional copyright holder.
289 -- gregor herrmann <gregoa@debian.org> Sat, 21 Mar 2009 20:23:26 +0100
291 iodine (0.5.0-3) unstable; urgency=low
293 * Improvements in init script, main point: be less verbose when iodined is
294 configured not to start; thanks to Yves-Alexis Perez for the bug report
296 * Upload to unstable.
298 -- gregor herrmann <gregoa@debian.org> Sun, 15 Feb 2009 02:19:15 +0100
300 iodine (0.5.0-2) experimental; urgency=low
302 * Update example script iodine-jigger; thanks to Stephan Walter for the bug
303 report and to Barak A. Pearlmutter for the updated version; add gawk to
304 Suggests (closes: #513221).
306 -- gregor herrmann <gregoa@debian.org> Thu, 29 Jan 2009 22:03:44 +0100
308 iodine (0.5.0-1) experimental; urgency=low
310 * New upstream release.
311 * debian/copyright: update years of upstream copyright.
312 * Install the new protocol descriptions under doc/*.
313 * Refresh patch 03_cflags.patch; drop patch 04_base64.patch, the base64
315 * Upload to experimenatal since (1) we are in the pre-lenny freeze and
316 (2) we had problems with the base64 components on hppa.
318 -- gregor herrmann <gregoa@debian.org> Sun, 25 Jan 2009 01:31:09 +0100
320 iodine (0.4.2-3) unstable; urgency=low
322 * Add Swedish debconf translation, thanks to Martin Bagge (closes: #504247).
323 * Fix "Init script starts iodined even if it is already running" by
324 removing the "--pidfile" option from the start-stop-daemon calls;
325 doesn't work for a forking process. Thanks to Michael Goetze for
326 the bug report (closes: #511887).
327 * Set debhelper compatibility level to 7; adapt debian/{control,compat,rules}
328 and add debian/iodine.{docs,examples,links}.
329 * debian/copyright: update formatting and years of packaging copyright.
331 -- gregor herrmann <gregoa@debian.org> Thu, 15 Jan 2009 23:27:07 +0100
333 iodine (0.4.2-2) unstable; urgency=low
335 * debian/postinst: only try to create /dev/net/tun if it doesn't exist and
336 if /dev/MAKEDEV is available; thanks to Lucas Nussbaum for the bug report
337 and to Lucas, Adeodato Simó, Matthew Johnson, and Alexander Wirt for their
338 help (closes: #502823).
340 -- gregor herrmann <gregoa@debian.org> Wed, 22 Oct 2008 23:35:25 +0200
342 iodine (0.4.2-1) unstable; urgency=low
344 * New upstream release:
345 - new command line switch "-s" to skip configration of the tun interface
347 - drop patches 01_mandir.patch and 02_make.patch, included upstream
348 - refresh patches 03_cflags.patch and 04_base64.patch
349 * debian/rules: separate DESTDIR and prefix on make install.
350 * Add the packages needed by the example script to Suggests: and don't
351 compress the example script any more.
353 -- gregor herrmann <gregoa@debian.org> Fri, 08 Aug 2008 16:33:26 -0300
355 iodine (0.4.1-4) unstable; urgency=low
357 * Add Czech debconf translation, thanks to Daniel Kavan
359 * Add note for translators to debconf template and change back localized
360 versions of ".example" to the original as mandated by RFC 2606.
361 * Convert de.po from ISO-8859-1 to UTF-8.
362 * debian/control: change my email address.
363 * Switch patch system from dpatch to quilt.
364 * Add example script iodine-jigger (script to set up an iodine tunnel and
365 route traffic through it) by Barak A. Pearlmutter (closes: #491294).
366 Thanks, Barak! Add copyright/license information about the script to
367 debian/copyright. Mention the example script in README.Debian.
368 * debian/copyright: wrap a long line, update years of packing copyright and
370 * Set Standards-Version to 3.8.0; add debian/README.source to document
373 -- gregor herrmann <gregoa@debian.org> Thu, 24 Jul 2008 18:35:59 +0200
375 iodine (0.4.1-3) unstable; urgency=low
377 * Fix LSB header in init.d script, thanks to Petter Reinholdtsen for the
378 report and the patch (closes: #468653).
379 * Set debhelper compatibility level to 6.
380 * New patch 04_base64: don't build/test {src,tests}/base64* anymore, causes
381 a FBTFS on hppa, and isn't actually used anyway (closes: #468404).
383 -- gregor herrmann <gregor+debian@comodo.priv.at> Sat, 01 Mar 2008 19:01:22 +0100
385 iodine (0.4.1-2) unstable; urgency=low
387 * Set Standards-Version to 3.7.3 (no changes required).
388 * Create install-stamp target in debian/rules and adjust target
390 * Change debian/copyright to the new machine-readable format.
391 * Add patch 03_cflags.dpatch: use CFLAGS from debian/rules in upstream
394 -- gregor herrmann <gregor+debian@comodo.priv.at> Tue, 05 Feb 2008 17:31:25 +0100
396 iodine (0.4.1-1) unstable; urgency=low
398 * New upstream release:
399 - hides password from ps and stdin (closes: #432719).
400 - uses /etc/resolv.conf (closes: #432867).
401 - incorporates patch to daemonize before chrooting and dropping
402 privileges, therefore dropping 02_detach.dpatch.
403 - uses $(MAKE) in Makefile, except in one case, therefore adding patch
405 - fixes the install dir for the manpage, therefore adapting patch
407 * debian/copyright: update years of copyright.
408 * debian/rules: use $(DPATCH_STAMPFN) and $@.
409 * Mention (improved) manpage in README.Debian.
411 -- gregor herrmann <gregor+debian@comodo.priv.at> Sat, 01 Dec 2007 02:30:51 +0100
413 iodine (0.4.0-5) unstable; urgency=low
415 * Apply patch for "init script fails to restart", thanks to Horst
416 Schirmeier (closes: #453001).
417 * debian/rules: make configure-stamp depend on patch.
419 -- gregor herrmann <gregor+debian@comodo.priv.at> Mon, 26 Nov 2007 20:36:41 +0100
421 iodine (0.4.0-4) unstable; urgency=low
423 * Add French debconf translation, thanks to Christian Perrier
425 * Add Dutch debconf translation, thanks to Bart Cornelis
427 * Clean up debian/rules.
428 * Don't install TODO anymore, and remove debian/docs.
429 * Move upstream URL from the description to the new Homepage field.
430 * Change XS-Vcs-* fields to Vcs-*.
431 * Add patch to daemonize before chrooting and dropping privileges, thanks
432 to Matthew William Solloway Bell (closes: #450759).
434 -- gregor herrmann <gregor+debian@comodo.priv.at> Fri, 16 Nov 2007 12:48:50 +0100
436 iodine (0.4.0-3) unstable; urgency=low
438 * Add Portuguese translation for debconf messages, thanks to Américo
439 Monteiro and Miguel Figueiredo (closes: #433041).
440 * Add German debconf translation, thanks to Helge Kreutzmann
442 * Fix typo in debconf template, thanks to Helge Kreutzmann
444 * Add debconf-updatepo to debian/rule's clean target.
445 * Convert debian/changelog to UTF-8.
446 * Fix usage of MAKEDEV, thanks to Marco d'Itri (closes: #434160).
448 -- gregor herrmann <gregor+debian@comodo.priv.at> Sun, 22 Jul 2007 16:27:51 +0200
450 iodine (0.4.0-2) unstable; urgency=low
452 * Change mode of /etc/default/iodine to 600, thanks to Lennart Poettering
455 -- gregor herrmann <gregor+debian@comodo.priv.at> Wed, 11 Jul 2007 18:10:12 +0200
457 iodine (0.4.0-1) unstable; urgency=low
459 * Initial upload to the Debian archive (closes: #430206).
460 * New upstream release.
462 * Don't create manpages anymore, now included in upstream tarball.
463 * Change debian/rules; upstream Makefile now includes install and test targets.
464 * Move makedev from Build-Depends to Depends.
465 * Add password option to debconf questions and /etc/default/iodine.
466 * Change order in postinst.
467 * Add user iodine and run iodined in a chroot as this user.
469 -- gregor herrmann <gregor+debian@comodo.priv.at> Sat, 23 Jun 2007 14:49:46 +0200
471 iodine (0.3.4-1) unstable; urgency=low
475 -- gregor herrmann <gregor+debian@comodo.priv.at> Fri, 26 Jan 2007 14:03:30 +0100