parcimonie_0.7.1-1+deb7u1_all.deb


Advertisement

Description

parcimonie - privacy-friendly helper to refresh a GnuPG keyring

Distribution: Debian 7 (Wheezy)
Repository: Debian Main amd64
Package name: parcimonie
Package version: 0.7.1
Package release: 1+deb7u1
Package architecture: all
Package type: deb
Installed size: 68 B
Download size: 40.92 KB
Official Mirror: ftp.br.debian.org
parcimonie is a daemon that slowly refreshes a GnuPG public keyring from a keyserver. Its refreshes one key at a time; between every key update parcimonie: - sleeps a mostly random amount of time - asks Tor to change circuits. This process is meant to make it hard for an attacker to correlate the multiple performed key update operations. See the included design document to learn more about the threat and risk models parcimonie attempts to help coping with.

Alternatives

    Download

    Source package: parcimonie

    Install Howto

    1. Update the package index:
      # sudo apt-get update
    2. Install parcimonie deb package:
      # sudo apt-get install parcimonie

    Files

    • /etc/xdg/autostart/parcimonie-applet.desktop
    • /etc/xdg/autostart/parcimonie.desktop
    • /usr/bin/parcimonie
    • /usr/bin/parcimonie-applet
    • /usr/bin/parcimonie-torified-gpg
    • /usr/share/doc/parcimonie/README
    • /usr/share/doc/parcimonie/README.Debian
    • /usr/share/doc/parcimonie/TODO
    • /usr/share/doc/parcimonie/changelog.Debian.gz
    • /usr/share/doc/parcimonie/changelog.gz
    • /usr/share/doc/parcimonie/copyright
    • /usr/share/doc/parcimonie/design.mdwn
    • /usr/share/lintian/overrides/parcimonie
    • /usr/share/locale/de/LC_MESSAGES/parcimonie-applet.mo
    • /usr/share/locale/fr/LC_MESSAGES/parcimonie-applet.mo
    • /usr/share/man/man1/parcimonie-applet.1p.gz
    • /usr/share/man/man1/parcimonie-torified-gpg.1.gz
    • /usr/share/man/man1/parcimonie.1p.gz
    • /usr/share/man/man3/App::Parcimonie.3pm.gz
    • /usr/share/man/man3/App::Parcimonie::Applet.3pm.gz
    • /usr/share/man/man3/App::Parcimonie::DBus::Object.3pm.gz
    • /usr/share/man/man3/App::Parcimonie::Daemon.3pm.gz
    • /usr/share/man/man3/App::Parcimonie::GnuPG::Interface.3pm.gz
    • /usr/share/man/man3/App::Parcimonie::Role::HasCodeset.3pm.gz
    • /usr/share/man/man3/App::Parcimonie::Role::HasEncoding.3pm.gz
    • /usr/share/perl5/App/Parcimonie.pm
    • /usr/share/perl5/App/Parcimonie/Applet.pm
    • /usr/share/perl5/App/Parcimonie/Daemon.pm
    • /usr/share/perl5/App/Parcimonie/DBus/Object.pm
    • /usr/share/perl5/App/Parcimonie/GnuPG/Interface.pm
    • /usr/share/perl5/App/Parcimonie/Role/HasCodeset.pm
    • /usr/share/perl5/App/Parcimonie/Role/HasEncoding.pm

    Changelog

    2014-02-08 - intrigeri <intrigeri@debian.org> parcimonie (0.7.1-1+deb7u1) wheezy-security; urgency=high * Cherry-pick two upstream patches: - Sleep a random amount of time if the computed random sleep time is too low (CVE-2014-1921, Closes: #738134). - Clarify lapse time with large number of keys (Closes: #738004). Thanks Holger Levsen <holger@layer-acht.org> for the bug reports!

    2012-10-20 - intrigeri <intrigeri@debian.org> parcimonie (0.7.1-1) unstable; urgency=low * Imported Upstream version 0.7.1, that fixes critical bugs in the applet: - Use correct method name to set tooltip on status icon. Thanks to Vagrant Cascadian for reporting it. (Closes: #690577) - Pass the -1 placeholder for text length when inserting into a TextBuffer.

    2012-06-23 - intrigeri <intrigeri@debian.org> parcimonie (0.7-1) unstable; urgency=low * Imported Upstream version 0.7 * Update dependencies to match new upstream ones. * Drop all cherry-picked patches: obsoleted by new upstream release.

    2012-04-08 - intrigeri <intrigeri@debian.org> parcimonie (0.6-3) unstable; urgency=low * Cherry-pick patch from upstream Git (Closes: #665249). * Bump debhelper compatibility level to 9. * Bump copyright years.

    2012-03-05 - intrigeri <intrigeri@debian.org> parcimonie (0.6-2) unstable; urgency=low * Fix my name. * Add Lintian overrides for false positives. * Set my email address to my shiny new @debian.org one. * Update specification URL in debian/copyright. * Bump Standards-Version to 3.9.3, no change required. * New patch (cherry-picked from upstream Git): 0001-Testsuite-use-pool.sks-keyservers.net-instead-of-key.patch (Closes: #662595)

    2011-10-04 - Intri Geri <intrigeri+debian@boum.org> parcimonie (0.6-1) unstable; urgency=low * Imported Upstream version 0.6: - Don't send NEWNYM nor talk to the Tor control port/socket anymore: sleeping long enough for the previously used Tor circuit to expire (MaxCircuitDirtiness) is enough. - Drastic memory savings: · 75% (RSS) for the parcimonie daemon (58MB -> 15MB) · 50% (RSS) for the parcimonie applet (54MB -> 28MB) - Add an About dialog to the applet. * Add missing {Build-,}dependency on liblocale-gettext-perl. (Closes: #642732) * Update dependencies for 0.6.

    2011-08-20 - Intri Geri <intrigeri+debian@boum.org> parcimonie (0.5.2-1) unstable; urgency=low * Imported Upstream version 0.5.2: - Look up keys using the full fingerprint, instead of long key ID. (Closes: #637018) - Make it clear the torrc settings depend on the Tor version. (Closes: #636942) - Update keyserver configuration instructions. - Set strict permissions on GnuPG test home directories. * Update build-dependency: needs Module::Build, not Module::Install. * Drop obsolete patch: 0001-Set-strict-permissions-on-GnuPG-test-home-directorie.patch

    2011-07-30 - Intri Geri <intrigeri+debian@boum.org> parcimonie (0.5.1-3) unstable; urgency=low * Cherry-pick test suite bugfix from upstream Git. * Remove useless signature lines. * Initial release. (Closes: #636036)

    2011-07-30 - Intri Geri <intrigeri+debian@boum.org> parcimonie (0.5.1-2) unstable; urgency=low * Use my Debian email address. * Remove now useless lintian override.

    2011-07-29 - intrigeri <intrigeri+debian@boum.org> parcimonie (0.5.1-1) unstable; urgency=low * Imported Upstream version 0.5.1 - Use new Debian default location for ControlSocket and CookieAuthFile. - Document how Tor shall be configured. * Recommend tor. * Improve long package description. * Add lintian override for maintainer-not-full-name.

    Advertisement
    Advertisement