Re: [tor-relays] security update for obfs4proxy

Quoting Toralf Förster (2022-10-16 11:23:18)

On 10/16/22 09:50, Toralf Förster wrote:

...

After configuring the installation of the unattended_upgrade package to consider all packages [1] the new obfs4proxy was installed - but Tor was not restarted nor obfs4proxy reloaded.

Isn't this a task for the software package ?

And IMO the Debian package should re-apply any setcap settings made to the exe before, eg.:

    setcap cap_net_bind_service=+ep /usr/bin/obfs4proxy

or?

Will be nice to add those fixes to the package. Maybe you can open two issues on the debian bugtracker for them. https://www.debian.org/Bugs/

Or feel free to directly send patches to the package: https://salsa.debian.org/pkg-privacy-team/obfs4proxy

Thanks for noticing.