Format: 1.8 Date: Wed, 04 Apr 2012 12:02:31 -0500 Source: zescrow Binary: zescrow-client Architecture: source Version: 1.3-0ubuntu1~ppa3 Distribution: maverick Urgency: low Maintainer: Dustin Kirkland Changed-By: Dustin Kirkland Description: zescrow-client - back up eCryptfs Encrypted Home or Encrypted Private Configuratio Changes: zescrow (1.3-0ubuntu1~ppa3) maverick; urgency=low . * debian/copyright, upload/go/index.html, upload/index.html, usr/bin/zEscrow, www/deposit/go/index.html, www/deposit/index.html, www/include/above.html, www/include/below.html, www/include/credentials.html.CHANGE_ME, www/include/escrow.css, www/include/functions.html, www/index.html, www/not- found/index.html, www/openid/index.html, www/openid/return.html, www/privacy.html, www/retrieve/go/index.html, www/retrieve/index.html, www/terms.html: - Copyright updated to include Gazzang, Inc. * usr/bin/zEscrow: - Multiple security fixes, according to line-by-line code audit by Kees Cook - use 'set -e' rather than sh -e, to ensure errors are caught if an interpreter other than sh is used - store the stty earlier and restore on trapped exits - generate the tempfile with the required extensions - drop redundant chmodding - note specifically that the user's passphrase is NOT sent to the server - remove one of the client/server roundtrips, fetching the key fingerprint - instead, use gpg's --status-fd to parse machine readable output and retrieve the fingerprint from there - catch curl errors - catch gpg import errors - validate the fingerprint - drop use of wildcard in copying to tempdir - make the $url more readable - handle the browser launching prompt correctly Checksums-Sha1: a65491b1e442a4d122e4ae99fe3256f577ce8f84 1744 zescrow_1.3-0ubuntu1~ppa3.dsc 850d18afe23511f8aca3d3815e653e2bbda0dfaa 78567 zescrow_1.3.orig.tar.gz 8d515ef49028d4eac805af260c9e8d2a0b310d4c 2695 zescrow_1.3-0ubuntu1~ppa3.debian.tar.gz Checksums-Sha256: f4cd43b18918a28d17266a1462c8dff602e484679eaea6bd151121c3d3b4caeb 1744 zescrow_1.3-0ubuntu1~ppa3.dsc e018c18dd85529e3d52dc65b800ca2f66dec8f500e92d8d6bf8eaa5869a88a8b 78567 zescrow_1.3.orig.tar.gz cee86270b056ce2757d13336b2afc3c3d8c4c2f1e0e9fe92e1b5a3adc92e9388 2695 zescrow_1.3-0ubuntu1~ppa3.debian.tar.gz Files: 6e1e93597e96496292a83572bf8e80a3 1744 misc optional zescrow_1.3-0ubuntu1~ppa3.dsc 2ef7075aba653b409f077f9eed57607b 78567 misc optional zescrow_1.3.orig.tar.gz 50de17c69d73ea6a382ec04cb5c30d65 2695 misc optional zescrow_1.3-0ubuntu1~ppa3.debian.tar.gz